last executing test programs:

39.106204043s ago: executing program 3 (id=552):
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4801298a", @ANYRES16=r0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x44890)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, 0x0)
listen(r1, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0703051400c80500"], 0xa)

13.55390075s ago: executing program 3 (id=552):
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4801298a", @ANYRES16=r0, @ANYBLOB="000429bd7000fcdbdf2512000000680005801c00028008000200010400000800020000800000080001001f0000001400028008000200050000000800020001000000340002800800020008000000080001000720000008000300deffffff08000300000000000800020000100000080002000500000014000980080001000300000008000200ff000000b800018024000280080001001200000008000300020000000800020008000000080002000800000034000280080002000500000008000300179900000800030031fdbd4a080004000600000041000200ff7f000008000100050000001700010069623a76657468305f746f5f62726964676500002c0004001400010002004e207f00000100000000000000001400020002004e23ac1414310000000000000000150001006574683a76657468315f746f5f68737200000000"], 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x44890)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, 0x0)
listen(r1, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0703051400c80500"], 0xa)

13.508645469s ago: executing program 2 (id=601):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000041c0)=@base={0x2, 0x4, 0x9, 0x9, 0x0, r0}, 0x50)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d"], 0x0)
creat(0x0, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r3 = accept$alg(r2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0)

12.431675214s ago: executing program 0 (id=604):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

12.3691368s ago: executing program 2 (id=605):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d030000000000000000"], 0x0, 0x4e}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x18)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000003000)={<r6=>0x0, <r7=>0x0})
recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0x9}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)={r6, r7+10000000})
sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000)
syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)

10.816867432s ago: executing program 1 (id=608):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
dup(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xb0, 0x30, 0x1, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ct={0x44, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xd, 0x6, "6af581c68d5ebf2eeb"}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r5, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1)

10.400675716s ago: executing program 3 (id=609):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000600))
pipe(&(0x7f0000000500))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB="87b0c1602dfb23e1b00fd00b6f194ae977eb6cc749d9c7808ecbb609c57a568b6efe349e172909f101d1d234db9d4a8cb733778f3d5f3fa1701bcd1a9289a76afa1b1bae1cb48561b57ea6acb5b877b0fc6c933bbb9e750b871053bf5445fa06216dda0ecb04a4b592b1e2bcdccc9e97fb4d7cbdb529ca04b1fd5fbc01bec0cbb6459ecc2035e7db560635922be35187fb1b782dc98147db24ecf7c69fa5fa3ea0f1becd0d7f7948c6b79aef0a7e6f2bda724a879455a968e883d7c4630d727d8cd9c3c03ffd3eed435aa72a8f22a23942", @ANYRES64=0x0], 0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"})

10.228718918s ago: executing program 0 (id=610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000002b000b0000000000000000000400000004000300620001"], 0x7c}}, 0xc00)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x30}}, 0x10)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x8cc000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x72}}}}}, 0x20}}, 0x4890)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "180922bfe1973504800000004adafe73"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004800)

9.63116053s ago: executing program 3 (id=611):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x9f0]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x49}, 0x0, &(0x7f0000000240)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/216, 0xd8}, &(0x7f0000000280), 0x40}}], 0x30, 0x8004}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7700fcdbdf25050000000001000000"], 0x20}}, 0x4004040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)

9.532313326s ago: executing program 0 (id=612):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = fanotify_init(0x200, 0x0)
r3 = dup(r1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
fanotify_mark(r2, 0x1, 0x48001059, r3, 0x0)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x1ff, 0x4)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x6}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463e8c79", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @rand_addr=0x64010100}}}}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r8, &(0x7f0000000000)="12", 0x100000, 0x44000, 0x0, 0x0)

8.935627762s ago: executing program 2 (id=613):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x9f0]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x49}, 0x0, &(0x7f0000000240)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/216, 0xd8}, &(0x7f0000000280), 0x40}}], 0x30, 0x8004}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7700fcdbdf25050000000001000000"], 0x20}}, 0x4004040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

8.515840022s ago: executing program 1 (id=614):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa24, 0x95f8, @mcast2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="093829bd3000ffdbdf423d0000000e00030000006574646576debdaa45ef140000000000000072636500000000000000046d756c74696361737400567cb59f2e878f7d0fc8827c0db2b6089a58d01c8ba87fc3f7cfedf1f0d706ffd957fee42c5fbf83a1196b2410cac6ce7e6273618a872d5573490aa8a63461ebd365e1cc97d153958e54258bc093941a1e"], 0x50}}, 0x4830)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x43)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c)
socket$inet_smc(0x2b, 0x1, 0x0)

8.403057407s ago: executing program 3 (id=615):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000)
keyctl$clear(0x5, 0xffffffffffffffff)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}})

7.343167856s ago: executing program 2 (id=616):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/167, 0xa7}], 0x1)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
mkdir(&(0x7f0000000100)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x9123, 0xe, 0x875, 0x1, 0x3, 0x0, 0x8, 0x9, 0xffffffffffffffc6, 0x80000000, 0xfffffffffffffd92, 0x3, 0x9, 0xffffffff, 0x5], 0xf000})
ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[])
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"})
r8 = syz_open_pts(r0, 0x80)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x13)
ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000001c0)=0x9)
ioctl$TCXONC(r8, 0x540a, 0x2)

7.071193699s ago: executing program 1 (id=617):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket(0x1e, 0x805, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000002c0)={0x0, 0x1, @raw_data=[0x8, 0x1, 0x7, 0x6, 0x5, 0x4, 0x7fff, 0x1, 0x4, 0x200, 0xc3b8, 0x4, 0xd873, 0xa, 0x377, 0x1]})
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
truncate(&(0x7f0000000080)='./bus\x00', 0x95a)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x6a1, 0x5, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33", 0x41564e57})
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x8}, 0x5}}}, 0x7)

7.061536005s ago: executing program 4 (id=618):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r1)
socket(0x10, 0x803, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)}, 0x24004880)
ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast})
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_io_uring_setup(0x7b, 0x0, 0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0, 0x40000103, 0x0, {0x4}})
io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x5cb, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, 0x32)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x101000)
r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.452126863s ago: executing program 0 (id=619):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa24, 0x95f8, @mcast2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="093829bd3000ffdbdf423d0000000e00030000006574646576debdaa45ef140000000000000072636500000000000000046d756c74696361737400567cb59f2e878f7d0fc8827c0db2b6089a58d01c8ba87fc3f7cfedf1f0d706ffd957fee42c5fbf83a1196b2410cac6ce7e6273618a872d5573490aa8a63461ebd365e1cc97d153958e54258bc093941a1e"], 0x50}}, 0x4830)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x43)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c)
socket$inet_smc(0x2b, 0x1, 0x0)

6.127948514s ago: executing program 4 (id=620):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x519b02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

5.847308546s ago: executing program 1 (id=621):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x9f0]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x49}, 0x0, &(0x7f0000000240)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/216, 0xd8}, &(0x7f0000000280), 0x40}}], 0x30, 0x8004}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7700fcdbdf25050000000001000000"], 0x20}}, 0x4004040)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe40}}, 0x1047)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

5.722941485s ago: executing program 0 (id=622):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x3a0})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffaf)

2.592462823s ago: executing program 1 (id=623):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r5, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
socket$netlink(0x10, 0x3, 0x14)

2.589789922s ago: executing program 2 (id=624):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
dup(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xb0, 0x30, 0x1, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ct={0x44, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0xd, 0x6, "6af581c68d5ebf2eeb"}, {0xc}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r5, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1)

2.371099304s ago: executing program 4 (id=625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2, 0xffe4}, 0x10)

2.096687555s ago: executing program 4 (id=626):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xa24, 0x95f8, @mcast2}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r5, @ANYBLOB="093829bd3000ffdbdf423d0000000e00030000006574646576debdaa45ef140000000000000072636500000000000000046d756c74696361737400567cb59f2e878f7d0fc8827c0db2b6089a58d01c8ba87fc3f7cfedf1f0d706ffd957fee42c5fbf83a1196b2410cac6ce7e6273618a872d5573490aa8a63461ebd365e1cc97d153958e54258bc093941a1e"], 0x50}}, 0x4830)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)

1.467466296s ago: executing program 1 (id=627):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00')
lseek(r4, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r6, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5785}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, r6, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x16000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4a18ff56}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18)
r9 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r9, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

1.098825763s ago: executing program 2 (id=628):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r0 = gettid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = fanotify_init(0x200, 0x0)
r3 = dup(r1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
fanotify_mark(r2, 0x1, 0x48001059, r3, 0x0)
r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040)=0x1ff, 0x4)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x6}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463e8c79", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @rand_addr=0x64010100}}}}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r10=>0x0})
sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r8, &(0x7f0000000000)="12", 0x100000, 0x44000, 0x0, 0x0)

947.603899ms ago: executing program 4 (id=629):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
dup(0xffffffffffffffff)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r5, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r8 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
socket$netlink(0x10, 0x3, 0x14)

200.867876ms ago: executing program 3 (id=630):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x80042103, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, 0x0)
pipe2(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000002000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,cachetag=', @ANYRESDEC=r2])
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r4 = memfd_secret(0x80000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x8, 0x86, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={<r6=>0x0, 0xe7, "b56ab176c8a9270fccd1d2513a5a069fc0b3a03d9b71692cce03b111a7ce941ce45ed30fcf10aa4cc842631e653481b67f91dcd73bcc94cb0b1f466e0b6abd32639c9ff263b670a3fa807e863c95b416c1cbc0a6b9410516482a3ec37141705cd2aa7dfa359758d04ec1769cfc1c607ef7ab5102c075859d2fd7634b48b84e61f5a63dee84e1addde13ccc9024be9af6fdf7500a60d75d8d394414dbf37684984be908dff7ddb30c0a27ae797fa25975f35baa350064d62c0485d93351aa66c511ff833e6bdf3fe9b90f762b4a7b06ad030fb3fab87b470ee88a59c7260e131622a17cf048020e"}, &(0x7f00000002c0)=0xef)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003d0007010000000000010000047c0000"], 0x18}}, 0xc000)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r6}, 0x8)
r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0)

132.577536ms ago: executing program 0 (id=631):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2})
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r3 = gettid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004)
r4 = dup(r2)
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = syz_io_uring_setup(0xbfa, &(0x7f0000000300)={0x0, 0x40ac, 0x1000, 0x2, 0x3f, 0x0, r4}, 0x0, &(0x7f00000001c0)=<r6=>0x0)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="70000000040601010000000000000000020000050900020073797a320000000005000100070000000900020073797a32000000000900020073797a31000000000900020073797a3200000000050001000700000000000900020073797a30000000000500010007000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000010}, 0x4000081)
syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r8, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=632):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
epoll_create(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, 0x0, 0xc800)
socket$isdn(0x22, 0x2, 0x25)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000)
close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

ss=dir permissive=1
[  300.372097][ T6966] capability: warning: `syz.2.196' uses deprecated v2 capabilities in a way that may be insecure
[  300.429088][   T30] audit: type=1400 audit(1753889836.474:263): avc:  denied  { wake_alarm } for  pid=6963 comm="syz.2.196" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  300.499830][  T975] usb 2-1: Using ep0 maxpacket: 32
[  300.515310][  T975] usb 2-1: config index 0 descriptor too short (expected 36, got 34)
[  300.523613][  T975] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[  300.533935][  T975] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  300.549408][  T975] usb 2-1: config 0 interface 0 has no altsetting 0
[  300.559217][  T975] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  301.238866][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.257086][  T975] usb 2-1: config 0 descriptor??
[  301.270355][  T973] airspy 5-1:0.0: usb_control_msg() failed -110 request 0e
[  301.276472][  T975] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  301.291096][  T973] airspy 5-1:0.0: Registered as swradio24
[  301.296883][  T973] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  301.423467][   T30] audit: type=1400 audit(1753889837.524:264): avc:  denied  { execute } for  pid=6974 comm="syz.0.198" path="/40/cpu.stat" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  301.527983][   T30] audit: type=1400 audit(1753889837.554:265): avc:  denied  { setopt } for  pid=6974 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  302.002052][ T6984] FAULT_INJECTION: forcing a failure.
[  302.002052][ T6984] name failslab, interval 1, probability 0, space 0, times 0
[  302.019455][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.2.201 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  302.019473][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  302.019480][ T6984] Call Trace:
[  302.019484][ T6984]  <TASK>
[  302.019489][ T6984]  dump_stack_lvl+0x16c/0x1f0
[  302.019505][ T6984]  should_fail_ex+0x512/0x640
[  302.019524][ T6984]  should_failslab+0xc2/0x120
[  302.019536][ T6984]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  302.019547][ T6984]  ? skb_clone+0x190/0x3f0
[  302.019563][ T6984]  skb_clone+0x190/0x3f0
[  302.019576][ T6984]  netlink_deliver_tap+0xabd/0xd30
[  302.019594][ T6984]  netlink_unicast+0x62f/0x850
[  302.019611][ T6984]  ? __pfx_netlink_unicast+0x10/0x10
[  302.019630][ T6984]  netlink_sendmsg+0x8d1/0xdd0
[  302.019647][ T6984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.019667][ T6984]  ____sys_sendmsg+0xa98/0xc70
[  302.019688][ T6984]  ? copy_msghdr_from_user+0x10a/0x160
[  302.019709][ T6984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.019738][ T6984]  ? __pfx__kstrtoull+0x10/0x10
[  302.019764][ T6984]  ___sys_sendmsg+0x134/0x1d0
[  302.019786][ T6984]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.019820][ T6984]  ? find_held_lock+0x2b/0x80
[  302.019851][ T6984]  __sys_sendmmsg+0x200/0x420
[  302.019866][ T6984]  ? __pfx___sys_sendmmsg+0x10/0x10
[  302.019884][ T6984]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  302.019903][ T6984]  ? fput+0x70/0xf0
[  302.019916][ T6984]  ? ksys_write+0x1ac/0x250
[  302.019925][ T6984]  ? __pfx_ksys_write+0x10/0x10
[  302.019937][ T6984]  __x64_sys_sendmmsg+0x9c/0x100
[  302.019950][ T6984]  ? lockdep_hardirqs_on+0x7c/0x110
[  302.019962][ T6984]  do_syscall_64+0xcd/0x4c0
[  302.019976][ T6984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.019987][ T6984] RIP: 0033:0x7f6fbd98e9a9
[  302.019996][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.020006][ T6984] RSP: 002b:00007f6fbe851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.020017][ T6984] RAX: ffffffffffffffda RBX: 00007f6fbdbb5fa0 RCX: 00007f6fbd98e9a9
[  302.020024][ T6984] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000006
[  302.020030][ T6984] RBP: 00007f6fbe851090 R08: 0000000000000000 R09: 0000000000000000
[  302.020036][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.020042][ T6984] R13: 0000000000000000 R14: 00007f6fbdbb5fa0 R15: 00007fff8fcf1448
[  302.020055][ T6984]  </TASK>
[  302.622816][  T973] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  302.875593][ T5923] usb 5-1: USB disconnect, device number 9
[  302.920768][  T973] usb 3-1: Using ep0 maxpacket: 32
[  302.933746][  T973] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  302.962307][  T973] usb 3-1: config 0 has no interface number 0
[  302.971361][  T973] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  302.981166][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.989186][  T973] usb 3-1: Product: syz
[  302.993724][  T973] usb 3-1: Manufacturer: syz
[  303.055750][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'.
[  303.087736][  T973] usb 3-1: SerialNumber: syz
[  303.094778][  T973] usb 3-1: config 0 descriptor??
[  303.106179][  T973] smsc95xx v2.0.0
[  303.188999][ T7012] ubi: mtd0 is already attached to ubi31
[  303.657716][ T5923] usb 2-1: USB disconnect, device number 9
[  303.843899][   T30] audit: type=1400 audit(1753889839.944:266): avc:  denied  { read write } for  pid=7020 comm="syz.4.212" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  303.875943][   T30] audit: type=1400 audit(1753889839.944:267): avc:  denied  { open } for  pid=7020 comm="syz.4.212" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  304.232666][ T7025] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  304.263818][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.613887][  T973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  304.659909][  T973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  304.782999][  T973] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  304.811292][  T973] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  304.860905][  T973] usb 3-1: USB disconnect, device number 10
[  304.982650][ T7033] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  304.994422][ T7033] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  305.003665][ T7033] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  305.012303][ T7033] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  305.023496][ T7033] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  305.033159][ T7033] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  305.041105][ T5916] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  305.151765][ T7036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7036 comm=syz.4.214
[  305.170832][ T7033] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  305.179000][ T7033] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  305.191421][ T7033] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  305.201249][ T7033] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  305.299808][ T5916] usb 4-1: Using ep0 maxpacket: 16
[  305.325875][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  305.348733][ T5916] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  305.366682][   T30] audit: type=1400 audit(1753889841.464:268): avc:  denied  { connect } for  pid=7037 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  305.428380][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.449960][ T5916] usb 4-1: Product: syz
[  305.490100][ T5916] usb 4-1: Manufacturer: syz
[  305.504569][   T30] audit: type=1400 audit(1753889841.534:269): avc:  denied  { getopt } for  pid=7037 comm="syz.2.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  305.526860][ T5916] usb 4-1: SerialNumber: syz
[  305.657087][ T5916] usb 4-1: config 0 descriptor??
[  305.764014][ T5916] hub 4-1:0.0: bad descriptor, ignoring hub
[  305.802916][ T5916] hub 4-1:0.0: probe with driver hub failed with error -5
[  305.851448][ T7041] FAULT_INJECTION: forcing a failure.
[  305.851448][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.866292][ T5916] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  305.883393][ T7041] CPU: 0 UID: 0 PID: 7041 Comm: syz.1.216 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  305.883426][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  305.883440][ T7041] Call Trace:
[  305.883445][ T7041]  <TASK>
[  305.883452][ T7041]  dump_stack_lvl+0x16c/0x1f0
[  305.883477][ T7041]  should_fail_ex+0x512/0x640
[  305.883504][ T7041]  strncpy_from_user+0x3b/0x2e0
[  305.883529][ T7041]  __do_sys_request_key+0xa8/0x3d0
[  305.883551][ T7041]  ? fput+0x70/0xf0
[  305.883571][ T7041]  ? __pfx___do_sys_request_key+0x10/0x10
[  305.883592][ T7041]  ? ksys_write+0x1ac/0x250
[  305.883615][ T7041]  do_syscall_64+0xcd/0x4c0
[  305.883636][ T7041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.883653][ T7041] RIP: 0033:0x7fcda958e9a9
[  305.883666][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.883682][ T7041] RSP: 002b:00007fcdaa399038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  305.883698][ T7041] RAX: ffffffffffffffda RBX: 00007fcda97b5fa0 RCX: 00007fcda958e9a9
[  305.883709][ T7041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  305.883718][ T7041] RBP: 00007fcdaa399090 R08: 0000000000000000 R09: 0000000000000000
[  305.883728][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.883737][ T7041] R13: 0000000000000000 R14: 00007fcda97b5fa0 R15: 00007ffdb383e958
[  305.883760][ T7041]  </TASK>
[  305.906634][ T7029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=7029 comm=syz.3.213
[  306.075729][ T7029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=7029 comm=syz.3.213
[  306.253290][   T30] audit: type=1400 audit(1753889842.344:270): avc:  denied  { read } for  pid=7028 comm="syz.3.213" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  306.302400][   T30] audit: type=1400 audit(1753889842.344:271): avc:  denied  { open } for  pid=7028 comm="syz.3.213" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  306.585570][ T7056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  306.617152][   T30] audit: type=1400 audit(1753889842.704:272): avc:  denied  { bind } for  pid=7055 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  306.619481][ T7056] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[  306.637066][   T30] audit: type=1400 audit(1753889842.704:273): avc:  denied  { name_bind } for  pid=7055 comm="syz.0.222" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  306.688610][   T30] audit: type=1400 audit(1753889842.704:274): avc:  denied  { node_bind } for  pid=7055 comm="syz.0.222" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  306.724995][   T30] audit: type=1400 audit(1753889842.824:275): avc:  denied  { write } for  pid=7055 comm="syz.0.222" path="socket:[11646]" dev="sockfs" ino=11646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  307.436939][ T5916] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  307.573721][ T7067] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  307.657182][ T5916] usb 1-1: config 5 has an invalid interface number: 198 but max is 0
[  307.667943][ T5916] usb 1-1: config 5 has no interface number 0
[  307.674696][ T5916] usb 1-1: too many endpoints for config 5 interface 198 altsetting 3: 221, using maximum allowed: 30
[  307.687796][ T5916] usb 1-1: config 5 interface 198 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  307.744032][ T5916] usb 1-1: config 5 interface 198 has no altsetting 0
[  307.765829][ T5916] usb 1-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6
[  307.774991][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.786212][ T5916] usb 1-1: Product: syz
[  307.793970][ T5916] usb 1-1: Manufacturer: syz
[  307.802729][ T5916] usb 1-1: SerialNumber: syz
[  307.820311][ T5865] usb 4-1: reset high-speed USB device number 7 using dummy_hcd
[  307.848784][ T5865] usb 4-1: device reset changed ep0 maxpacket size!
[  307.867716][ T5930] usb 4-1: USB disconnect, device number 7
[  308.051121][ T5916] usb 1-1: USB disconnect, device number 11
[  308.057158][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  308.241180][ T7075] bridge_slave_0: left allmulticast mode
[  308.246844][ T7075] bridge_slave_0: left promiscuous mode
[  308.283556][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.359586][ T7066] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  308.396275][ T5930] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  308.410936][ T5930] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  308.417856][ T7075] bridge_slave_1: left allmulticast mode
[  308.455639][ T7075] bridge_slave_1: left promiscuous mode
[  308.484678][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.516449][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.894824][ T7075] bond0: (slave bond_slave_0): Releasing backup interface
[  308.926511][ T7075] bond0: (slave bond_slave_1): Releasing backup interface
[  308.985354][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.023648][ T7075] team0: Port device team_slave_0 removed
[  309.043161][ T7075] team0: Port device team_slave_1 removed
[  309.049585][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.057497][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.080337][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.087916][ T7075] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.185814][ T7075] bond1: (slave wlan0): Releasing active interface
[  309.250647][  T973] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  309.294749][ T7070] kAFS: unable to lookup cell '.,'
[  309.310375][ T7075] bond0: (slave wlan1): Releasing backup interface
[  309.549833][  T973] usb 3-1: device descriptor read/64, error -71
[  309.600268][ T7102] netem: change failed
[  309.869765][  T973] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  310.050177][  T973] usb 3-1: device descriptor read/64, error -71
[  310.203261][  T973] usb usb3-port1: attempt power cycle
[  310.425519][ T5923] usb 4-1: USB disconnect, device number 8
[  310.550040][  T973] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  310.590028][  T973] usb 3-1: device descriptor read/8, error -71
[  310.943484][  T973] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  310.970324][  T973] usb 3-1: device descriptor read/8, error -71
[  311.009853][ T5923] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  311.090124][  T973] usb usb3-port1: unable to enumerate USB device
[  311.189921][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  311.196382][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.207330][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.217085][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0
[  311.223771][ T5923] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  311.232867][ T5916] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  311.241014][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.252067][ T5923] usb 4-1: config 0 descriptor??
[  311.389781][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  311.398394][ T5916] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  311.407613][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.415744][ T5916] usb 1-1: Product: syz
[  311.420116][ T5916] usb 1-1: Manufacturer: syz
[  311.424737][ T5916] usb 1-1: SerialNumber: syz
[  311.431552][ T5916] usb 1-1: config 0 descriptor??
[  311.439021][ T5916] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  312.605412][ T5916] gspca_sonixj: reg_r err -110
[  312.634256][ T5916] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  312.969976][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  312.970008][   T30] audit: type=1400 audit(1753889848.764:277): avc:  denied  { connect } for  pid=7117 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  313.384745][   T30] audit: type=1400 audit(1753889848.974:278): avc:  denied  { mount } for  pid=7104 comm="syz.3.235" name="/" dev="rpc_pipefs" ino=12504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  313.479920][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  313.501206][ T7121] syz.2.240 (7121) used greatest stack depth: 17752 bytes left
[  313.691058][ T7133] netlink: 'syz.2.244': attribute type 7 has an invalid length.
[  313.698888][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[  313.780059][   T10] usb 2-1: Using ep0 maxpacket: 32
[  313.787047][   T10] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  313.796439][   T10] usb 2-1: config 0 has no interface number 0
[  313.816702][   T10] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  313.835608][   T10] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  313.841586][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'.
[  313.857430][   T10] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  313.872807][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.886209][   T10] usb 2-1: Product: syz
[  313.894188][   T10] usb 2-1: Manufacturer: syz
[  313.898846][   T10] usb 2-1: SerialNumber: syz
[  313.909158][   T10] usb 2-1: config 0 descriptor??
[  313.924664][ T7119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  313.931935][ T7119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  313.955414][   T10] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ee:a6:81:58:5a:36
[  314.030229][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  314.179881][   T24] usb 3-1: Using ep0 maxpacket: 32
[  314.198369][   T24] usb 3-1: config 9 has an invalid interface number: 160 but max is 0
[  314.253459][   T24] usb 3-1: config 9 has no interface number 0
[  314.417595][   T24] usb 3-1: config 9 interface 160 has no altsetting 0
[  314.427092][ T5930] usb 1-1: USB disconnect, device number 12
[  314.439054][   T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=4e.3f
[  314.467584][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.497691][   T24] usb 3-1: Product: syz
[  314.506870][   T24] usb 3-1: Manufacturer: syz
[  314.513025][   T24] usb 3-1: SerialNumber: syz
[  314.526673][ T5923] usbhid 4-1:0.0: can't add hid device: -71
[  314.573162][   T30] audit: type=1400 audit(1753889850.654:279): avc:  denied  { unmount } for  pid=6560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  314.713617][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  314.747221][ T5923] usb 4-1: USB disconnect, device number 9
[  314.852412][   T24] ftdi_sio 3-1:9.160: FTDI USB Serial Device converter detected
[  314.869358][   T24] ftdi_sio ttyUSB0: unknown device type: 0x4e3f
[  314.891309][   T24] usb 3-1: USB disconnect, device number 15
[  314.903053][   T24] ftdi_sio 3-1:9.160: device disconnected
[  315.019793][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  315.203864][   T24] usb 2-1: USB disconnect, device number 10
[  315.216771][   T24] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  315.301026][   T30] audit: type=1400 audit(1753889851.394:280): avc:  denied  { create } for  pid=7160 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  315.409870][   T30] audit: type=1400 audit(1753889851.464:281): avc:  denied  { write } for  pid=7160 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  315.949780][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  316.141047][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  316.193839][ T5923] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  316.267933][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.387859][ T5923] usb 3-1: Product: syz
[  316.446727][ T5923] usb 3-1: Manufacturer: syz
[  316.515882][ T5923] usb 3-1: SerialNumber: syz
[  316.663304][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  316.669608][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  316.676022][ T5923] usb 3-1: config 0 descriptor??
[  316.924679][ T7198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'.
[  317.020869][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'.
[  317.088496][ T7208] create_pit_timer: 94 callbacks suppressed
[  317.088510][ T7208] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  317.127148][ T7208] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  317.135770][ T7208] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  317.150511][ T7208] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  317.152991][ T5923] airspy 3-1:0.0: Board ID: 00
[  317.159645][ T7208] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  317.218140][ T7212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7212 comm=syz.3.256
[  317.239875][ T5916] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  317.344955][ T7208] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  317.487058][ T7208] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  319.046043][ T5923] airspy 3-1:0.0: Firmware version: 
[  319.061778][ T7208] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  319.074131][ T5923] airspy 3-1:0.0: usb_control_msg() failed -71 request 11
[  319.085373][ T5923] airspy 3-1:0.0: Registered as swradio24
[  319.091164][ T7208] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  319.091201][ T7208] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  319.150048][   T30] audit: type=1400 audit(1753889855.234:282): avc:  denied  { read } for  pid=7216 comm="syz.4.258" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.197410][ T5923] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  319.209182][   T30] audit: type=1400 audit(1753889855.244:283): avc:  denied  { open } for  pid=7216 comm="syz.4.258" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.233448][ T5916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  319.245205][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.315620][ T5923] usb 3-1: USB disconnect, device number 16
[  319.324433][ T5916] usb 2-1: Product: syz
[  319.829099][ T5916] usb 2-1: Manufacturer: syz
[  319.834225][ T5916] usb 2-1: SerialNumber: syz
[  319.841757][   T30] audit: type=1400 audit(1753889855.244:284): avc:  denied  { ioctl } for  pid=7216 comm="syz.4.258" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  319.890747][ T5916] usb 2-1: can't set config #1, error -71
[  319.901863][ T5916] usb 2-1: USB disconnect, device number 11
[  319.927783][   T30] audit: type=1400 audit(1753889855.404:285): avc:  denied  { append } for  pid=7216 comm="syz.4.258" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  320.025610][   T30] audit: type=1400 audit(1753889856.114:286): avc:  denied  { map } for  pid=7225 comm="syz.1.261" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  320.067755][ T7230] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  320.115835][   T30] audit: type=1400 audit(1753889856.114:287): avc:  denied  { create } for  pid=7225 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  320.135438][   T30] audit: type=1400 audit(1753889856.114:288): avc:  denied  { write } for  pid=7225 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  320.135845][ T7230] Error validating options; rc = [-22]
[  320.219754][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  320.294882][ T7237] warning: `syz.0.262' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  320.369767][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  320.405757][ T5923] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  320.416537][ T5923] usb 3-1: config 0 has no interface number 0
[  320.423762][ T5923] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  320.434240][ T5923] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  320.458191][ T5923] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  320.468620][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.913319][   T30] audit: type=1400 audit(1753889856.604:289): avc:  denied  { connect } for  pid=7236 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  320.941945][ T5923] usb 3-1: Product: syz
[  320.946192][ T5923] usb 3-1: Manufacturer: syz
[  320.953221][ T5923] usb 3-1: SerialNumber: syz
[  320.960104][   T30] audit: type=1400 audit(1753889856.614:290): avc:  denied  { write } for  pid=7236 comm="syz.0.262" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  320.987676][ T5923] usb 3-1: config 0 descriptor??
[  321.021359][ T7241] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  321.036464][ T7223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  321.043792][ T7223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  321.057347][ T5923] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e2:e7:6b:cc:e7:3e
[  321.269833][  T975] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  321.442846][  T975] usb 5-1: unable to get BOS descriptor or descriptor too short
[  321.464130][  T975] usb 5-1: config 6 has an invalid interface number: 252 but max is 0
[  321.489261][  T975] usb 5-1: config 6 has no interface number 0
[  321.503014][  T975] usb 5-1: config 6 interface 252 has no altsetting 0
[  321.521965][  T975] usb 5-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=76.22
[  321.607438][ T5930] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  321.623652][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.636988][  T975] usb 5-1: Product: syz
[  321.643480][  T975] usb 5-1: Manufacturer: syz
[  321.648167][  T975] usb 5-1: SerialNumber: syz
[  321.779902][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  321.797984][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.818066][ T5930] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  321.847204][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.875976][ T7240] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  321.893096][ T5930] usb 1-1: config 0 descriptor??
[  321.951476][   T30] audit: type=1400 audit(1753889858.044:291): avc:  denied  { ioctl } for  pid=7242 comm="syz.4.264" path="socket:[12016]" dev="sockfs" ino=12016 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  322.023129][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'.
[  322.139953][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.264'.
[  322.322359][ T5916] usb 3-1: USB disconnect, device number 17
[  322.330139][ T5916] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  322.388701][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[  322.428211][ T5930] lenovo 0003:17EF:6062.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0
[  322.457834][  T975] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state.
[  322.637365][ T7280] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  322.697955][ T5930] usb 1-1: USB disconnect, device number 13
[  323.412380][ T7279] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  323.462367][  T975] dvb-usb: bulk message failed: -71 (2/0)
[  323.478514][  T975] dvb-usb: will use the device's hardware PID filter (table count: 15).
[  323.519218][  T975] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom))
[  323.557162][  T975] usb 5-1: media controller created
[  323.625688][  T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  323.676391][  T975] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)...
[  323.717022][  T975] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[  323.873140][  T975] rc_core: IR keymap rc-dtt200u not found
[  323.895447][  T975] Registered IR keymap rc-empty
[  323.930598][  T975] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  324.005485][  T975] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6
[  324.031860][  T975] dvb-usb: schedule remote query interval to 300 msecs.
[  324.039653][  T975] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected.
[  324.092256][  T975] usb 5-1: USB disconnect, device number 10
[  324.453283][  T975] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected.
[  325.640529][ T7325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  325.902946][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  325.903548][   T30] audit: type=1400 audit(1753889862.004:295): avc:  denied  { setopt } for  pid=7331 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  326.189921][ T7338] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.277'.
[  326.203325][ T7334] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.277'.
[  326.460475][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'.
[  326.640043][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  327.906109][ T5897] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  327.995076][ T5897] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  328.010748][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  328.025655][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.249234][ T7364] ubi: mtd0 is already attached to ubi31
[  328.511728][ T7372] ubi: mtd0 is already attached to ubi31
[  329.013823][   T30] audit: type=1400 audit(1753889865.104:296): avc:  denied  { create } for  pid=7360 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  329.041771][ T7347] kAFS: unable to lookup cell '.,'
[  329.149542][   T30] audit: type=1400 audit(1753889865.244:297): avc:  denied  { write } for  pid=7360 comm="syz.0.285" path="socket:[13152]" dev="sockfs" ino=13152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  329.172761][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.748764][   T30] audit: type=1400 audit(1753889866.844:298): avc:  denied  { unmount } for  pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  330.789842][   T24] usb 5-1: USB disconnect, device number 11
[  333.287028][ T7421] FAULT_INJECTION: forcing a failure.
[  333.287028][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  333.299755][  T975] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  333.325856][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.1.299 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  333.325887][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  333.325898][ T7421] Call Trace:
[  333.325904][ T7421]  <TASK>
[  333.325911][ T7421]  dump_stack_lvl+0x16c/0x1f0
[  333.325936][ T7421]  should_fail_ex+0x512/0x640
[  333.325964][ T7421]  _copy_to_user+0x32/0xd0
[  333.325994][ T7421]  simple_read_from_buffer+0xcb/0x170
[  333.326023][ T7421]  proc_fail_nth_read+0x197/0x240
[  333.326043][ T7421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  333.326064][ T7421]  ? rw_verify_area+0xcf/0x680
[  333.326088][ T7421]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  333.326107][ T7421]  vfs_read+0x1e4/0xc60
[  333.326137][ T7421]  ? __pfx___mutex_lock+0x10/0x10
[  333.326159][ T7421]  ? __pfx_vfs_read+0x10/0x10
[  333.326193][ T7421]  ? __fget_files+0x20e/0x3c0
[  333.326219][ T7421]  ksys_read+0x12a/0x250
[  333.326234][ T7421]  ? __pfx_ksys_read+0x10/0x10
[  333.326250][ T7421]  ? fput+0x70/0xf0
[  333.326274][ T7421]  do_syscall_64+0xcd/0x4c0
[  333.326298][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.326316][ T7421] RIP: 0033:0x7fcda958d3bc
[  333.326331][ T7421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  333.326348][ T7421] RSP: 002b:00007fcdaa399030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  333.326365][ T7421] RAX: ffffffffffffffda RBX: 00007fcda97b5fa0 RCX: 00007fcda958d3bc
[  333.326376][ T7421] RDX: 000000000000000f RSI: 00007fcdaa3990a0 RDI: 0000000000000005
[  333.326386][ T7421] RBP: 00007fcdaa399090 R08: 0000000000000000 R09: 0000000000000000
[  333.326396][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.326406][ T7421] R13: 0000000000000000 R14: 00007fcda97b5fa0 R15: 00007ffdb383e958
[  333.326430][ T7421]  </TASK>
[  333.345923][ T7424] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  333.380195][ T7423] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  333.460997][  T975] usb 1-1: Using ep0 maxpacket: 16
[  333.491279][   T30] audit: type=1400 audit(1753889869.584:299): avc:  denied  { bind } for  pid=7417 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.674485][ T7424] vcan0: tx address claim with dlc 0
[  333.691852][  T975] usb 1-1: unable to get BOS descriptor or descriptor too short
[  333.701218][  T975] usb 1-1: config 2 has an invalid interface number: 54 but max is 1
[  333.709362][  T975] usb 1-1: config 2 has an invalid interface number: 174 but max is 1
[  333.723454][  T975] usb 1-1: config 2 has no interface number 0
[  333.736527][  T975] usb 1-1: config 2 has no interface number 1
[  333.746330][  T975] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64
[  333.882182][  T975] usb 1-1: config 2 interface 54 has no altsetting 0
[  333.891308][  T975] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=9b.97
[  333.900593][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.970247][  T975] usb 1-1: Product: syz
[  333.975078][  T975] usb 1-1: Manufacturer: syz
[  333.980737][  T975] usb 1-1: SerialNumber: syz
[  334.157883][ T7422] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  334.410656][  T975] usbserial_generic 1-1:2.54: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  334.446927][  T975] usbserial_generic 1-1:2.54: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  334.469525][   T30] audit: type=1400 audit(1753889870.544:300): avc:  denied  { connect } for  pid=7437 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  334.488989][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.503215][  T975] usbserial_generic 1-1:2.54: device has no bulk endpoints
[  334.511091][  T975] safe_serial 1-1:2.54: safe_serial converter detected
[  334.518087][  T975] safe_serial 1-1:2.54: probe with driver safe_serial failed with error -22
[  334.570056][  T975] usbserial_generic 1-1:2.174: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  334.602514][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.611861][  T975] usbserial_generic 1-1:2.174: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  334.629321][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.645424][  T975] usbserial_generic 1-1:2.174: generic converter detected
[  334.888010][  T975] usb 1-1: generic converter now attached to ttyUSB0
[  335.017614][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  335.192820][  T975] usb 1-1: USB disconnect, device number 14
[  335.235459][  T975] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  335.252946][  T975] usbserial_generic 1-1:2.174: device disconnected
[  335.576196][ T7456] ntfs3(nullb0): Primary boot signature is not NTFS.
[  335.583311][ T7456] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  336.242040][ T7459] ubi: mtd0 is already attached to ubi31
[  336.866140][ T7464] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  337.668173][ T7469] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  337.692192][ T7463] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  344.333268][   T30] audit: type=1400 audit(1753889880.434:301): avc:  denied  { setopt } for  pid=7478 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  344.485184][ T7469] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  344.505985][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[  345.262720][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  345.268745][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  345.274828][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  345.283638][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  345.367994][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'.
[  346.527002][   T30] audit: type=1400 audit(1753889882.604:302): avc:  denied  { read write } for  pid=7497 comm="syz.0.322" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  346.527124][ T5923] IPVS: starting estimator thread 0...
[  346.589808][   T30] audit: type=1400 audit(1753889882.614:303): avc:  denied  { open } for  pid=7497 comm="syz.0.322" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  347.052145][   T30] audit: type=1400 audit(1753889883.144:304): avc:  denied  { watch watch_reads } for  pid=7497 comm="syz.0.322" path="/66" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  347.369875][ T7507] IPVS: using max 43 ests per chain, 103200 per kthread
[  348.007410][   T30] audit: type=1400 audit(1753889884.104:305): avc:  denied  { listen } for  pid=7515 comm="syz.2.326" lport=58720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  348.262863][ T7527] ubi: mtd0 is already attached to ubi31
[  348.840003][   T30] audit: type=1400 audit(1753889884.874:306): avc:  denied  { accept } for  pid=7515 comm="syz.2.326" lport=58720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  349.000321][ T5923] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  349.227790][ T7535] sctp: [Deprecated]: syz.0.329 (pid 7535) Use of int in max_burst socket option deprecated.
[  349.227790][ T7535] Use struct sctp_assoc_value instead
[  349.404449][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  349.415994][ T5923] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  349.432148][ T7538] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  349.459652][ T5923] usb 2-1: config 0 has no interfaces?
[  349.469831][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  349.515091][ T5923] usb 2-1: config 0 has no interfaces?
[  349.534675][ T5923] usb 2-1: config 0 has no interfaces?
[  349.684722][   T10] usb 3-1: Using ep0 maxpacket: 8
[  349.832223][   T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  349.844940][   T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58
[  349.855128][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.867477][   T10] usb 3-1: Product: syz
[  349.877901][   T10] usb 3-1: Manufacturer: syz
[  349.889969][   T10] usb 3-1: SerialNumber: syz
[  350.204333][   T10] usb 3-1: USB disconnect, device number 18
[  350.281450][ T7537] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  350.540480][ T7548] fuse: Bad value for 'max_read'
[  350.569865][   T30] audit: type=1400 audit(1753889886.634:307): avc:  denied  { mounton } for  pid=7544 comm="syz.0.331" path="/69/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1
[  350.637794][   T30] audit: type=1400 audit(1753889886.644:308): avc:  denied  { create } for  pid=7544 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  350.910287][   T30] audit: type=1400 audit(1753889886.644:309): avc:  denied  { write } for  pid=7544 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  351.029159][ T5923] usb 2-1: unable to read config index 3 descriptor/start: -71
[  351.038364][ T5923] usb 2-1: can't read configurations, error -71
[  352.209762][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  352.423482][ T5897] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  352.507946][ T5897] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  352.524369][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  352.620683][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.773701][ T7578] qrtr: Invalid version 0
[  353.004549][ T7564] kAFS: unable to lookup cell '.,'
[  353.114275][   T30] audit: type=1400 audit(1753889889.214:310): avc:  denied  { read } for  pid=7579 comm="syz.3.339" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  353.329810][   T30] audit: type=1400 audit(1753889889.214:311): avc:  denied  { open } for  pid=7579 comm="syz.3.339" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  353.353792][    C0] vkms_vblank_simulate: vblank timer overrun
[  353.861974][   T30] audit: type=1400 audit(1753889889.234:312): avc:  denied  { ioctl } for  pid=7579 comm="syz.3.339" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  353.887426][    C0] vkms_vblank_simulate: vblank timer overrun
[  354.119828][ T5897] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  354.279746][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  354.279814][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  354.309954][ T7593] netem: change failed
[  354.336710][ T5897] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  354.365686][ T5897] usb 1-1: config 0 has no interface number 0
[  354.378915][ T5897] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  354.401741][ T5897] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  354.424679][ T5897] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  354.437368][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.456022][ T5897] usb 1-1: Product: syz
[  354.475657][ T5897] usb 1-1: Manufacturer: syz
[  354.489662][ T5897] usb 1-1: SerialNumber: syz
[  354.513704][ T5897] usb 1-1: config 0 descriptor??
[  354.523126][ T7586] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  354.530365][ T7586] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  354.547496][ T5897] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ce:34:01:28:33:c4
[  354.965830][ T5923] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  354.983384][ T5923] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  355.001453][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  355.086593][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.281518][ T5897] usb 5-1: USB disconnect, device number 12
[  355.378680][   T30] audit: type=1400 audit(1753889891.474:313): avc:  denied  { listen } for  pid=7604 comm="syz.4.344" path=2F36362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  355.401455][    C0] vkms_vblank_simulate: vblank timer overrun
[  355.537724][ T7588] kAFS: unable to lookup cell '.,'
[  356.015545][   T30] audit: type=1400 audit(1753889891.774:314): avc:  denied  { listen } for  pid=7604 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  356.035290][    C0] vkms_vblank_simulate: vblank timer overrun
[  356.302751][  T973] usb 1-1: USB disconnect, device number 15
[  356.309409][  T973] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  357.109839][ T7618] ubi: mtd0 is already attached to ubi31
[  358.492003][ T7632] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  358.729763][ T5931] usb 3-1: USB disconnect, device number 19
[  360.097606][ T7631] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  360.165527][ T7642] netem: change failed
[  360.841582][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  360.929283][ T7664] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  361.070315][   T10] usb 1-1: Using ep0 maxpacket: 32
[  361.087261][ T7655] FAULT_INJECTION: forcing a failure.
[  361.087261][ T7655] name failslab, interval 1, probability 0, space 0, times 0
[  361.119740][ T5931] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  361.149011][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.0.352 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  361.149035][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  361.149045][ T7655] Call Trace:
[  361.149050][ T7655]  <TASK>
[  361.149057][ T7655]  dump_stack_lvl+0x16c/0x1f0
[  361.149080][ T7655]  should_fail_ex+0x512/0x640
[  361.149103][ T7655]  should_failslab+0xc2/0x120
[  361.149116][ T7655]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  361.149127][ T7655]  ? skb_clone+0x190/0x3f0
[  361.149144][ T7655]  skb_clone+0x190/0x3f0
[  361.149157][ T7655]  netlink_deliver_tap+0xabd/0xd30
[  361.149184][ T7655]  netlink_unicast+0x62f/0x850
[  361.149210][ T7655]  ? __pfx_netlink_unicast+0x10/0x10
[  361.149239][ T7655]  netlink_sendmsg+0x8d1/0xdd0
[  361.149259][ T7655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.149279][ T7655]  ____sys_sendmsg+0xa98/0xc70
[  361.149296][ T7655]  ? copy_msghdr_from_user+0x10a/0x160
[  361.149311][ T7655]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.149346][ T7655]  ___sys_sendmsg+0x134/0x1d0
[  361.149367][ T7655]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.149384][ T7655]  ? __lock_acquire+0x622/0x1c90
[  361.149414][ T7655]  ? __mutex_unlock_slowpath+0x80/0x800
[  361.149431][ T7655]  __sys_sendmsg+0x16d/0x220
[  361.149444][ T7655]  ? __pfx___sys_sendmsg+0x10/0x10
[  361.149478][ T7655]  do_syscall_64+0xcd/0x4c0
[  361.149499][ T7655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.149515][ T7655] RIP: 0033:0x7ff9d9b8e9a9
[  361.149528][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.149540][ T7655] RSP: 002b:00007ff9da92e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.149551][ T7655] RAX: ffffffffffffffda RBX: 00007ff9d9db5fa0 RCX: 00007ff9d9b8e9a9
[  361.149558][ T7655] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  361.149564][ T7655] RBP: 00007ff9da92e090 R08: 0000000000000000 R09: 0000000000000000
[  361.149570][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.149576][ T7655] R13: 0000000000000000 R14: 00007ff9d9db5fa0 R15: 00007ffe87e60c08
[  361.149589][ T7655]  </TASK>
[  361.381231][ T7662] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  361.623018][ T5931] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  361.664680][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  361.674138][   T10] usb 1-1: no configurations
[  361.681715][ T5931] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  361.682472][   T10] usb 1-1: can't read configurations, error -22
[  361.704331][ T5931] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  361.724347][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'.
[  361.735771][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.816192][   T10] usb 3-1: USB disconnect, device number 20
[  364.253267][  T973] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  364.374116][ T7703] qrtr: Invalid version 0
[  364.835565][  T973] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  364.866592][  T973] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  364.894827][  T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  365.007912][  T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.445594][ T7711] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  365.709782][  T973] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  365.873877][  T973] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  365.883276][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.892985][  T973] usb 1-1: Product: syz
[  365.928747][  T973] usb 1-1: Manufacturer: syz
[  365.933656][  T973] usb 1-1: SerialNumber: syz
[  365.949403][  T973] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  365.966880][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  366.048578][ T7715] FAULT_INJECTION: forcing a failure.
[  366.048578][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.147601][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.2.365 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  366.147629][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  366.147639][ T7715] Call Trace:
[  366.147645][ T7715]  <TASK>
[  366.147652][ T7715]  dump_stack_lvl+0x16c/0x1f0
[  366.147677][ T7715]  should_fail_ex+0x512/0x640
[  366.147705][ T7715]  _copy_from_user+0x2e/0xd0
[  366.147733][ T7715]  copy_mount_options+0x76/0x190
[  366.147759][ T7715]  __x64_sys_mount+0x1ac/0x310
[  366.147780][ T7715]  ? __pfx___x64_sys_mount+0x10/0x10
[  366.147807][ T7715]  do_syscall_64+0xcd/0x4c0
[  366.147830][ T7715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.147848][ T7715] RIP: 0033:0x7f6fbd98e9a9
[  366.147862][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.147879][ T7715] RSP: 002b:00007f6fbe851038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  366.147896][ T7715] RAX: ffffffffffffffda RBX: 00007f6fbdbb5fa0 RCX: 00007f6fbd98e9a9
[  366.147908][ T7715] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  366.147918][ T7715] RBP: 00007f6fbe851090 R08: 0000200000000680 R09: 0000000000000000
[  366.147929][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.147938][ T7715] R13: 0000000000000000 R14: 00007f6fbdbb5fa0 R15: 00007fff8fcf1448
[  366.147961][ T7715]  </TASK>
[  366.366978][ T7710] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  366.493766][ T5897] usb 5-1: USB disconnect, device number 13
[  366.509659][   T30] audit: type=1400 audit(1753889902.594:315): avc:  denied  { getattr } for  pid=7714 comm="syz.2.365" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  366.901495][ T5923] usb 1-1: USB disconnect, device number 18
[  366.914805][ T7715] overlayfs: statfs failed on './file0'
[  366.970791][   T30] audit: type=1400 audit(1753889903.064:316): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  367.076008][ T7719] erspan0: entered promiscuous mode
[  367.179853][   T10] usb 1-1: Service connection timeout for: 256
[  367.186032][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  367.216098][   T10] ath9k_htc: Failed to initialize the device
[  367.225326][ T7723] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  367.233650][ T5923] usb 1-1: ath9k_htc: USB layer deinitialized
[  367.504232][ T7727] netem: change failed
[  367.609815][  T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  367.789697][   T30] audit: type=1400 audit(1753889903.804:317): avc:  denied  { connect } for  pid=7734 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  367.991049][  T975] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  368.046384][  T975] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  368.058642][ T7722] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  368.126688][  T975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  368.173659][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.532042][ T7748] kAFS: unable to lookup cell '.,'
[  369.668739][ T7750] netem: change failed
[  369.700567][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  369.855230][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.867469][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.943552][ T5930] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  370.080876][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.099465][ T5930] usb 2-1: config 0 descriptor??
[  370.121859][ T5930] usbhid 2-1:0.0: can't add hid device: -22
[  370.132551][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  370.389578][ T5930] usb 2-1: USB disconnect, device number 14
[  370.650296][ T5916] usb 4-1: USB disconnect, device number 11
[  370.707581][   T30] audit: type=1400 audit(1753889906.804:318): avc:  denied  { create } for  pid=7763 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  370.737597][   T30] audit: type=1400 audit(1753889906.834:319): avc:  denied  { getopt } for  pid=7763 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  370.826869][   T30] audit: type=1400 audit(1753889906.894:320): avc:  denied  { name_bind } for  pid=7763 comm="syz.3.381" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  370.866823][   T30] audit: type=1400 audit(1753889906.894:321): avc:  denied  { write } for  pid=7763 comm="syz.3.381" path="socket:[14951]" dev="sockfs" ino=14951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  372.931231][   T30] audit: type=1400 audit(1753889908.994:322): avc:  denied  { ioctl } for  pid=7772 comm="syz.1.383" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  373.035527][   T30] audit: type=1400 audit(1753889909.134:323): avc:  denied  { unmount } for  pid=7779 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  373.139877][ T5923] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  373.202192][   T30] audit: type=1400 audit(1753889909.274:324): avc:  denied  { read } for  pid=7779 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.228806][   T30] audit: type=1400 audit(1753889909.324:325): avc:  denied  { write } for  pid=7779 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  373.301148][ T5923] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  373.309602][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  373.323474][ T5923] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  373.335045][ T5923] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  373.350503][ T5923] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  373.370387][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  373.412622][ T5923] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  373.423460][ T5923] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  373.434322][ T5923] usb 2-1: Product: syz
[  373.438556][ T5923] usb 2-1: Manufacturer: syz
[  373.443641][ T5923] usb 2-1: SerialNumber: syz
[  373.450904][ T5923] usb 2-1: config 0 descriptor??
[  373.456380][ T7773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  373.959917][ T5923] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  373.983770][ T5923] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  374.108013][   T30] audit: type=1400 audit(1753889910.204:326): avc:  denied  { block_suspend } for  pid=7789 comm="syz.2.388" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  374.190506][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  374.219176][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'.
[  374.347118][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.392618][ T5931] usb 5-1: Using ep0 maxpacket: 32
[  374.460798][ T5931] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  374.463604][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.498288][ T5931] usb 5-1: config 0 has no interface number 0
[  374.591864][ T5931] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  374.656805][ T5931] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  374.927681][ T5931] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  374.937023][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.945370][ T5931] usb 5-1: Product: syz
[  374.951199][ T5931] usb 5-1: Manufacturer: syz
[  374.956902][ T5931] usb 5-1: SerialNumber: syz
[  374.971367][ T5931] usb 5-1: config 0 descriptor??
[  374.984643][ T7788] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  374.991966][ T7788] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  375.014074][ T5931] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:3c:73:91:47:63
[  375.705458][ T5930] usb 2-1: USB disconnect, device number 15
[  375.996360][ T5930] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  376.213689][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'.
[  376.420091][ T5931] usb 5-1: USB disconnect, device number 14
[  376.616768][ T5923] Process accounting resumed
[  376.638529][ T7830] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  376.647360][   T30] audit: type=1400 audit(1753889912.664:327): avc:  denied  { mount } for  pid=7825 comm="syz.1.397" name="/" dev="ramfs" ino=14091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  376.871859][ T7831] delete_channel: no stack
[  376.991649][   T30] audit: type=1400 audit(1753889912.664:328): avc:  denied  { unmount } for  pid=7825 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  377.021239][ T5931] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  377.149746][ T5923] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  377.843272][ T5923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  378.055799][ T5923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  378.069772][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.076074][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  378.533484][ T5923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  378.566401][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  378.592183][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.620046][ T5923] usb 4-1: Product: syz
[  378.624340][ T5923] usb 4-1: Manufacturer: syz
[  378.629006][ T5923] usb 4-1: SerialNumber: syz
[  378.698810][ T5923] hub 4-1:1.0: bad descriptor, ignoring hub
[  378.721751][ T5923] hub 4-1:1.0: probe with driver hub failed with error -5
[  380.152524][ T7859] netem: change failed
[  381.253500][   T30] audit: type=1400 audit(1753889916.984:329): avc:  denied  { ioctl } for  pid=7878 comm="syz.4.409" path="socket:[14219]" dev="sockfs" ino=14219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  381.396414][   T30] audit: type=1400 audit(1753889916.994:330): avc:  denied  { ioctl } for  pid=7878 comm="syz.4.409" path="socket:[14218]" dev="sockfs" ino=14218 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  381.929152][ T5923] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  381.954708][   T30] audit: type=1400 audit(1753889918.054:331): avc:  denied  { unmount } for  pid=6560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  382.012748][ T5923] usb 4-1: USB disconnect, device number 12
[  382.050560][ T5923] usblp0: removed
[  382.847912][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'.
[  383.383625][ T7917] input: syz1 as /devices/virtual/input/input7
[  384.393466][ T5897] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  384.549768][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  384.557453][ T5897] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[  384.595639][ T5897] usb 4-1: config 0 has no interface number 0
[  384.648484][ T5897] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  384.680480][ T5897] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  384.715413][ T5897] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  384.739699][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.768050][ T5897] usb 4-1: Product: syz
[  384.774482][ T5897] usb 4-1: Manufacturer: syz
[  384.884551][ T5897] usb 4-1: SerialNumber: syz
[  384.925119][ T5897] usb 4-1: config 0 descriptor??
[  385.100766][ T7928] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  385.108019][ T7928] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  385.443931][ T5897] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7a:43:45:71:ba:a6
[  385.871370][ T7959] netem: change failed
[  385.960606][ T5916] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  386.223882][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.613015][ T5923] usb 4-1: USB disconnect, device number 13
[  386.647598][ T5916] usb 2-1: config 0 has no interfaces?
[  386.658892][ T7957] create_pit_timer: 91 callbacks suppressed
[  386.658906][ T7957] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  386.677123][ T5916] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  386.690904][ T7968] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  386.698071][ T5923] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  386.806909][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.809305][ T7957] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  386.970401][ T7962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7962 comm=syz.2.423
[  387.029272][ T5916] usb 2-1: config 0 descriptor??
[  387.238672][ T7957] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  387.392332][ T7957] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  387.462131][ T5858] Bluetooth: hci2: unexpected event for opcode 0x1405
[  387.877987][ T7957] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  387.901067][ T7957] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  387.917420][ T7957] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  387.917583][ T7967] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  388.056540][ T7957] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  388.094622][ T7957] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  388.109756][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  388.132569][ T7957] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  388.466000][ T5923] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  388.477155][ T5923] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  388.488460][ T5923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  388.498352][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.519871][    T9] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  388.681205][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  388.747857][    T9] usb 5-1: config 0 has no interface number 0
[  388.755403][ T7975] kAFS: unable to lookup cell '.,'
[  388.761936][    T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  388.773387][    T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  388.784476][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  388.796528][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.814802][    T9] usb 5-1: config 0 descriptor??
[  388.825398][ T7985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  388.848612][    T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  388.930101][ T5923] usb 2-1: USB disconnect, device number 16
[  389.102120][    T9] usb 5-1: USB disconnect, device number 15
[  389.340022][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  390.104402][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  390.336764][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.408904][ T5923] usb 2-1: Product: syz
[  390.436179][ T5923] usb 2-1: Manufacturer: syz
[  390.482498][ T5923] usb 2-1: SerialNumber: syz
[  390.972974][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'.
[  391.047415][   T30] audit: type=1400 audit(1753889927.114:332): avc:  denied  { write } for  pid=8000 comm="" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  391.188550][ T5897] usb 4-1: USB disconnect, device number 14
[  391.235946][ T8047] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  391.686397][ T5923] cdc_ncm 2-1:1.0: bind() failure
[  391.695592][ T5923] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  391.755160][ T5923] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  391.805308][ T5923] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  391.886349][ T5923] usb 2-1: USB disconnect, device number 17
[  391.950640][ T8046] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  392.042947][ T8064] ip6tnl1: entered promiscuous mode
[  392.559921][ T5931] libceph: connect (1)[c::]:6789 error -101
[  392.574604][ T5931] libceph: mon0 (1)[c::]:6789 connect error
[  392.729731][ T5916] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  392.889824][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  392.897540][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.916579][ T8080] ceph: No mds server is up or the cluster is laggy
[  393.009833][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.055797][ T5916] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  393.131778][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.275801][ T5916] usb 3-1: config 0 descriptor??
[  393.408292][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'.
[  393.768843][ T5916] usbhid 3-1:0.0: can't add hid device: -71
[  393.785066][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  393.816024][ T5916] usb 3-1: USB disconnect, device number 21
[  394.183807][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  394.365676][    T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  394.378412][    T9] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  394.444149][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  394.537407][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.539812][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  394.706454][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'.
[  394.775271][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  394.798015][   T30] audit: type=1400 audit(1753889930.874:333): avc:  denied  { ioctl } for  pid=8132 comm="syz.0.450" path="socket:[16468]" dev="sockfs" ino=16468 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  395.492372][ T8136] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  396.620481][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  396.637666][   T30] audit: type=1400 audit(1753889930.874:334): avc:  denied  { bind } for  pid=8132 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  396.704871][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'.
[  398.039380][    T9] usb 2-1: can't set config #27, error -71
[  398.047922][    T9] usb 2-1: USB disconnect, device number 18
[  398.497432][ T8168] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  398.563597][   T30] audit: type=1400 audit(1753889934.664:335): avc:  denied  { append } for  pid=8170 comm="syz.4.460" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  398.818868][ T8175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'.
[  399.102727][   T30] audit: type=1400 audit(1753889935.204:336): avc:  denied  { ioctl } for  pid=8170 comm="syz.4.460" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  399.156112][ T8182] hsr0: entered promiscuous mode
[  399.300461][ T8167] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  399.451270][   T30] audit: type=1400 audit(1753889935.534:337): avc:  denied  { setattr } for  pid=8189 comm="syz.0.462" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  399.475287][   T30] audit: type=1400 audit(1753889935.544:338): avc:  denied  { read append } for  pid=8189 comm="syz.0.462" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  399.501356][ T8170] hsr0: left promiscuous mode
[  399.523768][   T30] audit: type=1400 audit(1753889935.544:339): avc:  denied  { open } for  pid=8189 comm="syz.0.462" path="/100/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  399.619765][ T5916] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  399.756909][   T30] audit: type=1800 audit(1753889935.854:340): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.462" name="/" dev="9p" ino=2 res=0 errno=0
[  399.789789][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  399.798024][ T5916] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  399.808460][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.817644][ T5916] usb 4-1: Product: syz
[  399.825895][ T5916] usb 4-1: Manufacturer: syz
[  399.830693][ T5916] usb 4-1: SerialNumber: syz
[  399.844024][ T5916] usb 4-1: config 0 descriptor??
[  400.319324][ T5916] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a
[  400.344396][ T5916] airspy 4-1:0.0: Could not detect board
[  400.353887][ T5916] airspy 4-1:0.0: probe with driver airspy failed with error -32
[  400.394177][ T5916] usb 4-1: USB disconnect, device number 15
[  400.626224][  T975] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  400.791159][  T975] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  400.801354][  T975] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  400.810394][  T975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  400.819390][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.931346][ T8207] kAFS: unable to lookup cell '.,'
[  402.192148][   T30] audit: type=1400 audit(1753889938.214:341): avc:  denied  { write } for  pid=8226 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  402.568626][   T30] audit: type=1400 audit(1753889938.274:342): avc:  denied  { read write } for  pid=8226 comm="syz.3.472" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  402.603037][ T8235] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  402.684059][   T30] audit: type=1400 audit(1753889938.284:343): avc:  denied  { open } for  pid=8226 comm="syz.3.472" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  403.088256][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'.
[  403.369266][ T5923] usb 3-1: USB disconnect, device number 22
[  403.460014][ T8231] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  404.750260][  T975] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  405.691281][ T5897] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  405.789713][  T975] usb 2-1: Using ep0 maxpacket: 8
[  405.804303][  T975] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  405.827074][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.845148][  T975] usb 2-1: Product: syz
[  405.851856][  T975] usb 2-1: Manufacturer: syz
[  405.860142][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  405.925667][  T975] usb 2-1: SerialNumber: syz
[  406.148284][ T5897] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  406.173024][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.194807][  T975] usb 2-1: config 0 descriptor??
[  406.203068][ T5897] usb 4-1: Product: syz
[  406.207243][ T5897] usb 4-1: Manufacturer: syz
[  406.223654][  T975] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  406.231595][ T5897] usb 4-1: SerialNumber: syz
[  406.267725][ T5897] usb 4-1: config 0 descriptor??
[  406.377770][   T30] audit: type=1400 audit(1753889942.474:344): avc:  denied  { append } for  pid=8280 comm="syz.4.485" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  406.400884][    C0] vkms_vblank_simulate: vblank timer overrun
[  406.450829][ T8282] netlink: 'syz.4.485': attribute type 10 has an invalid length.
[  406.744381][ T5897] airspy 4-1:0.0: Board ID: 00
[  406.752942][  T975] gspca_sonixj: reg_w1 err -110
[  406.761472][ T5897] airspy 4-1:0.0: Firmware version: 
[  406.827695][ T8282] 8021q: adding VLAN 0 to HW filter on device team0
[  406.835422][  T975] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  406.878287][ T8282] bond0: (slave team0): Enslaving as an active interface with an up link
[  406.945210][  T975] usb 2-1: USB disconnect, device number 19
[  407.009522][   T30] audit: type=1400 audit(1753889943.104:345): avc:  denied  { ioctl } for  pid=8283 comm="syz.0.484" path="socket:[15948]" dev="sockfs" ino=15948 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  407.209737][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  407.286854][ T5897] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e
[  407.307533][ T5897] airspy 4-1:0.0: Registered as swradio24
[  407.676582][ T5916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  407.688019][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.773658][ T5897] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  407.773670][ T5916] usb 3-1: Product: syz
[  407.773685][ T5916] usb 3-1: Manufacturer: syz
[  407.846279][ T5916] usb 3-1: SerialNumber: syz
[  407.872426][ T5916] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  407.935484][ T5897] usb 4-1: USB disconnect, device number 16
[  407.963697][ T5923] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  407.989867][  T973] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  408.184741][  T973] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  408.196213][  T973] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  408.397539][  T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  408.428270][  T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.853474][ T8298] kAFS: unable to lookup cell '.,'
[  409.089962][  T973] usb 3-1: USB disconnect, device number 23
[  409.659733][ T5923] usb 3-1: Service connection timeout for: 256
[  409.692792][ T5923] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  409.717251][ T5923] ath9k_htc: Failed to initialize the device
[  409.743133][  T973] usb 3-1: ath9k_htc: USB layer deinitialized
[  409.759424][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'.
[  409.770584][ T8311] FAULT_INJECTION: forcing a failure.
[  409.770584][ T8311] name failslab, interval 1, probability 0, space 0, times 0
[  409.887541][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: syz.2.494 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  409.887566][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  409.887576][ T8311] Call Trace:
[  409.887580][ T8311]  <TASK>
[  409.887585][ T8311]  dump_stack_lvl+0x16c/0x1f0
[  409.887602][ T8311]  should_fail_ex+0x512/0x640
[  409.887620][ T8311]  should_failslab+0xc2/0x120
[  409.887632][ T8311]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  409.887644][ T8311]  ? skb_clone+0x190/0x3f0
[  409.887660][ T8311]  skb_clone+0x190/0x3f0
[  409.887673][ T8311]  netlink_deliver_tap+0xabd/0xd30
[  409.887691][ T8311]  netlink_unicast+0x62f/0x850
[  409.887708][ T8311]  ? __pfx_netlink_unicast+0x10/0x10
[  409.887727][ T8311]  netlink_sendmsg+0x8d1/0xdd0
[  409.887744][ T8311]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.887765][ T8311]  ____sys_sendmsg+0xa98/0xc70
[  409.887781][ T8311]  ? copy_msghdr_from_user+0x10a/0x160
[  409.887794][ T8311]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.887816][ T8311]  ___sys_sendmsg+0x134/0x1d0
[  409.887829][ T8311]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.887840][ T8311]  ? __lock_acquire+0x622/0x1c90
[  409.887869][ T8311]  ? __mutex_unlock_slowpath+0x80/0x800
[  409.887887][ T8311]  __sys_sendmsg+0x16d/0x220
[  409.887900][ T8311]  ? __pfx___sys_sendmsg+0x10/0x10
[  409.887921][ T8311]  do_syscall_64+0xcd/0x4c0
[  409.887935][ T8311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.887946][ T8311] RIP: 0033:0x7f6fbd98e9a9
[  409.887955][ T8311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.887965][ T8311] RSP: 002b:00007f6fbe851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.887976][ T8311] RAX: ffffffffffffffda RBX: 00007f6fbdbb5fa0 RCX: 00007f6fbd98e9a9
[  409.887983][ T8311] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003
[  409.887989][ T8311] RBP: 00007f6fbe851090 R08: 0000000000000000 R09: 0000000000000000
[  409.887996][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.888002][ T8311] R13: 0000000000000000 R14: 00007f6fbdbb5fa0 R15: 00007fff8fcf1448
[  409.888015][ T8311]  </TASK>
[  410.474505][   T30] audit: type=1400 audit(1753889946.574:346): avc:  denied  { getattr } for  pid=8327 comm="syz.3.498" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=16851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  410.567804][ T8328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  410.574443][ T8328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  410.591629][ T8328] vhci_hcd vhci_hcd.0: Device attached
[  410.654501][ T8330] vhci_hcd: connection closed
[  410.656072][ T3010] vhci_hcd: stop threads
[  410.865344][  T973] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  411.450342][ T3010] vhci_hcd: release socket
[  411.587418][ T3010] vhci_hcd: disconnect device
[  411.660508][  T975] usb 5-1: USB disconnect, device number 16
[  412.087282][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'.
[  412.733217][ T8369] netlink: 'syz.3.506': attribute type 10 has an invalid length.
[  412.793125][ T8369] bond0: (slave bond_slave_0): Releasing backup interface
[  413.243456][   T30] audit: type=1400 audit(1753889949.344:347): avc:  denied  { ioctl } for  pid=8372 comm="syz.1.507" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  416.435028][ T8422] afs: Unknown parameter '18446744073709551615'
[  416.603173][ T5930] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  416.605662][ T8423] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  416.696540][ T8423] fuse: Bad value for 'fd'
[  416.779806][  T973] vhci_hcd: vhci_device speed not set
[  416.983920][ T5930] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  416.996696][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'.
[  417.059101][ T5930] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  417.189911][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  417.206955][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.296860][ T8441] ubi: mtd0 is already attached to ubi31
[  417.732075][ T8420] kAFS: unable to lookup cell '.,'
[  417.737732][   T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  417.933938][   T24] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  418.878254][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.934578][   T24] usb 1-1: Product: syz
[  418.945673][   T24] usb 1-1: Manufacturer: syz
[  418.959194][   T24] usb 1-1: SerialNumber: syz
[  418.975079][   T30] audit: type=1400 audit(1753889955.074:348): avc:  denied  { create } for  pid=8449 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  419.053090][ T8451] FAULT_INJECTION: forcing a failure.
[  419.053090][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  419.066233][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.4.520 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  419.066256][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  419.066266][ T8451] Call Trace:
[  419.066272][ T8451]  <TASK>
[  419.066281][ T8451]  dump_stack_lvl+0x16c/0x1f0
[  419.066297][ T8451]  should_fail_ex+0x512/0x640
[  419.066315][ T8451]  _copy_from_user+0x2e/0xd0
[  419.066333][ T8451]  memdup_user+0x6b/0xe0
[  419.066344][ T8451]  strndup_user+0x78/0xe0
[  419.066355][ T8451]  __x64_sys_fsopen+0x9c/0x240
[  419.066370][ T8451]  do_syscall_64+0xcd/0x4c0
[  419.066384][ T8451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.066396][ T8451] RIP: 0033:0x7fd26198e9a9
[  419.066405][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.066416][ T8451] RSP: 002b:00007fd25f7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  419.066426][ T8451] RAX: ffffffffffffffda RBX: 00007fd261bb6080 RCX: 00007fd26198e9a9
[  419.066433][ T8451] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000006c0
[  419.066440][ T8451] RBP: 00007fd25f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  419.066446][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.066452][ T8451] R13: 0000000000000001 R14: 00007fd261bb6080 R15: 00007ffc08ba7178
[  419.066465][ T8451]  </TASK>
[  419.413426][   T24] usb 1-1: config 0 descriptor??
[  419.642740][   T24] usb 1-1: ignoring: probably an ADSL modem
[  419.892094][ T8456] netlink: 'syz.0.517': attribute type 12 has an invalid length.
[  419.918577][   T30] audit: type=1400 audit(1753889956.004:349): avc:  denied  { write } for  pid=8459 comm="syz.3.524" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  420.077935][ T8456] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.517'.
[  420.140059][   T30] audit: type=1400 audit(1753889956.004:350): avc:  denied  { open } for  pid=8459 comm="syz.3.524" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  420.164317][   T30] audit: type=1400 audit(1753889956.044:351): avc:  denied  { read } for  pid=8459 comm="syz.3.524" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  420.187219][   T30] audit: type=1400 audit(1753889956.044:352): avc:  denied  { open } for  pid=8459 comm="syz.3.524" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  420.187261][   T30] audit: type=1400 audit(1753889956.114:353): avc:  denied  { ioctl } for  pid=8459 comm="syz.3.524" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  420.498189][ T8473] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  420.547871][ T5923] usb 3-1: USB disconnect, device number 24
[  420.870435][   T24] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  420.920455][   T24] usb 1-1: USB disconnect, device number 19
[  421.063204][ T8471] hsr0: entered promiscuous mode
[  421.075964][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'.
[  421.108013][ T8471] hsr_slave_0: left promiscuous mode
[  421.255161][ T8477] ubi: mtd0 is already attached to ubi31
[  421.263043][ T8471] hsr_slave_1: left promiscuous mode
[  421.365702][ T8472] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  421.450750][ T8471] hsr0 (unregistering): left promiscuous mode
[  421.818373][   T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  421.971975][   T24] usb 4-1: Using ep0 maxpacket: 32
[  422.015099][   T24] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  422.025321][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.116134][   T24] usb 4-1: Product: syz
[  422.139788][   T24] usb 4-1: Manufacturer: syz
[  422.247679][   T24] usb 4-1: SerialNumber: syz
[  422.255482][   T24] usb 4-1: config 0 descriptor??
[  422.409310][ T8494] netlink: 'syz.4.532': attribute type 1 has an invalid length.
[  422.446246][ T8494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.532'.
[  422.698371][   T24] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a
[  422.914271][   T24] airspy 4-1:0.0: Could not detect board
[  423.209762][   T24] airspy 4-1:0.0: probe with driver airspy failed with error -32
[  423.298805][   T24] usb 4-1: USB disconnect, device number 17
[  423.690282][  T975] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  423.819774][  T973] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  423.884686][ T8523] netlink: 'syz.3.540': attribute type 1 has an invalid length.
[  423.953006][  T975] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  424.049812][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.089740][  T975] usb 2-1: Product: syz
[  424.094049][  T975] usb 2-1: Manufacturer: syz
[  424.098655][  T975] usb 2-1: SerialNumber: syz
[  424.114370][  T975] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  424.133143][  T973] usb 5-1: config 0 has no interfaces?
[  424.133287][   T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  424.290902][  T973] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  424.315055][  T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.388677][ T8527] ubi: mtd0 is already attached to ubi31
[  425.275220][  T973] usb 5-1: Product: syz
[  425.288739][  T973] usb 5-1: Manufacturer: syz
[  425.293500][  T973] usb 5-1: SerialNumber: syz
[  425.837358][  T973] usb 5-1: config 0 descriptor??
[  425.850749][   T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  425.894692][   T24] ath9k_htc: Failed to initialize the device
[  426.067895][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[  426.288920][ T5916] usb 2-1: USB disconnect, device number 20
[  426.439752][  T973] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  426.804641][  T973] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  426.831537][  T973] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  426.859537][  T973] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  426.877142][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.270860][ T8531] kAFS: unable to lookup cell '.,'
[  427.862923][  T973] usb 5-1: USB disconnect, device number 17
[  428.379830][  T973] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  428.540024][  T973] usb 5-1: Using ep0 maxpacket: 32
[  428.563353][  T973] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  428.573344][   T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.595570][  T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.640212][  T973] usb 5-1: Product: syz
[  428.661594][  T973] usb 5-1: Manufacturer: syz
[  428.688398][  T973] usb 5-1: SerialNumber: syz
[  428.708891][   T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.790204][  T973] usb 5-1: config 0 descriptor??
[  428.834981][   T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.972444][   T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.223505][  T973] airspy 5-1:0.0: Board ID: 00
[  429.239687][  T973] airspy 5-1:0.0: Firmware version: 
[  429.438680][  T973] airspy 5-1:0.0: usb_control_msg() failed -71 request 11
[  430.001517][   T50] bridge_slave_1: left allmulticast mode
[  430.007442][   T50] bridge_slave_1: left promiscuous mode
[  430.008519][  T973] airspy 5-1:0.0: Registered as swradio24
[  430.020009][  T973] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  430.041823][ T5916] usb 1-1: USB disconnect, device number 20
[  430.090666][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.106987][  T973] usb 5-1: USB disconnect, device number 18
[  430.635299][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  430.646524][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  430.656927][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  430.662613][   T50] bridge_slave_0: left allmulticast mode
[  430.669590][   T50] bridge_slave_0: left promiscuous mode
[  430.675412][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.683430][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  430.694648][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  431.049861][  T975] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  431.056178][ T8611] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  431.235081][  T975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  431.262185][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.272424][  T975] usb 3-1: Product: syz
[  431.283498][  T975] usb 3-1: Manufacturer: syz
[  431.288137][  T975] usb 3-1: SerialNumber: syz
[  431.342722][  T975] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  431.399063][ T5897] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  431.744682][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.766563][   T50] bond0 (unregistering): Released all slaves
[  432.779842][   T51] Bluetooth: hci3: command tx timeout
[  432.841098][ T5897] usb 3-1: Service connection timeout for: 256
[  432.884732][ T5897] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  433.158067][  T973] usb 3-1: USB disconnect, device number 25
[  433.203970][ T5897] ath9k_htc: Failed to initialize the device
[  433.236481][  T973] usb 3-1: ath9k_htc: USB layer deinitialized
[  433.483224][   T30] audit: type=1400 audit(1753889969.554:354): avc:  denied  { write } for  pid=8620 comm="syz.4.562" path="socket:[18635]" dev="sockfs" ino=18635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  433.507216][    C0] vkms_vblank_simulate: vblank timer overrun
[  434.860771][   T51] Bluetooth: hci3: command tx timeout
[  435.590655][   T30] audit: type=1400 audit(1753889971.364:355): avc:  denied  { read } for  pid=8620 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  435.726922][   T50] hsr_slave_0: left promiscuous mode
[  435.811037][   T50] hsr_slave_1: left promiscuous mode
[  435.816724][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.831267][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  435.863921][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.907474][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.931379][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  436.043856][   T50] veth1_macvtap: left promiscuous mode
[  436.058778][   T50] veth0_macvtap: left promiscuous mode
[  436.073200][   T50] veth1_vlan: left promiscuous mode
[  436.079842][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  436.087606][   T50] veth0_vlan: left promiscuous mode
[  436.271224][   T10] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185
[  436.282823][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  436.296213][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  436.808225][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.817241][   T10] usb 3-1: Product: syz
[  436.823755][   T10] usb 3-1: Manufacturer: syz
[  436.828578][   T10] usb 3-1: SerialNumber: syz
[  436.848485][   T10] usb 3-1: config 0 descriptor??
[  436.854759][ T8640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  436.869519][   T10] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  436.877907][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  436.889619][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  436.897821][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  436.908726][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  436.919252][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  436.927252][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  436.939932][   T51] Bluetooth: hci3: command tx timeout
[  436.953000][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  436.966500][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  436.975399][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  436.983235][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  436.990915][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  436.998602][   T10] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  437.008755][   T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  437.208508][   T50] team0 (unregistering): Port device team_slave_1 removed
[  437.261291][   T50] team0 (unregistering): Port device team_slave_0 removed
[  437.562250][ T5897] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  437.793451][ T5897] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  437.842038][ T5897] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  437.880469][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  438.004441][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.229929][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  438.399723][   T24] usb 1-1: Using ep0 maxpacket: 32
[  439.019717][   T51] Bluetooth: hci3: command tx timeout
[  439.124293][   T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  439.133433][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.143546][   T24] usb 1-1: Product: syz
[  439.147714][   T24] usb 1-1: Manufacturer: syz
[  439.153638][   T24] usb 1-1: SerialNumber: syz
[  439.168925][ T8657] kAFS: unable to lookup cell '.,'
[  439.281981][   T24] usb 1-1: config 0 descriptor??
[  439.289510][ T5923] usb 3-1: USB disconnect, device number 26
[  439.307757][   T50] IPVS: stop unused estimator thread 0...
[  439.314894][ T5923] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  439.354411][ T5923] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  439.366862][ T5923] keyspan 3-1:0.0: device disconnected
[  439.440262][ T8593] chnl_net:caif_netlink_parms(): no params data found
[  439.503861][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  439.510286][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  439.598799][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.614282][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.650727][ T8593] bridge_slave_0: entered allmulticast mode
[  439.659047][ T8593] bridge_slave_0: entered promiscuous mode
[  439.667275][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.674719][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.682179][ T8593] bridge_slave_1: entered allmulticast mode
[  439.689935][ T8593] bridge_slave_1: entered promiscuous mode
[  439.701222][   T24] airspy 1-1:0.0: Board ID: 00
[  439.705832][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  439.706022][   T24] airspy 1-1:0.0: Firmware version: 
[  439.759741][ T5916] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  439.774265][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.786414][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.852333][ T8593] team0: Port device team_slave_0 added
[  439.863630][ T8593] team0: Port device team_slave_1 added
[  439.894723][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0
[  439.901891][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  439.930835][   T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 11
[  439.931862][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  439.943534][   T24] airspy 1-1:0.0: Registered as swradio24
[  439.955278][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  439.967845][   T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  439.981531][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1
[  439.988741][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  439.995841][   T24] usb 1-1: USB disconnect, device number 21
[  440.002857][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  440.006523][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.049739][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  440.062976][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.085155][ T5916] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  440.097039][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.135293][ T5916] usb 2-1: Product: syz
[  440.145274][ T5916] usb 2-1: Manufacturer: syz
[  440.151178][ T5916] usb 2-1: SerialNumber: syz
[  440.265668][ T5916] usb 2-1: config 0 descriptor??
[  440.281532][ T8593] hsr_slave_0: entered promiscuous mode
[  440.287772][ T8593] hsr_slave_1: entered promiscuous mode
[  440.314181][ T8593] debugfs: 'hsr0' already exists in 'hsr'
[  440.320052][ T8593] Cannot create hsr debugfs directory
[  440.819909][ T5916] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  440.890424][ T5916] usb 5-1: USB disconnect, device number 19
[  441.059864][   T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  441.300660][   T24] usb 3-1: Using ep0 maxpacket: 32
[  441.326817][ T5897] usb 2-1: USB disconnect, device number 21
[  441.881211][   T24] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  441.938222][   T24] usb 3-1: config 0 has no interface number 0
[  442.009072][   T24] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  442.043229][   T24] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  442.068229][   T24] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  442.098026][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.383774][   T30] audit: type=1400 audit(1753889978.464:356): avc:  denied  { getopt } for  pid=8716 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  442.458825][   T24] usb 3-1: Product: syz
[  442.563798][   T24] usb 3-1: Manufacturer: syz
[  442.568424][   T24] usb 3-1: SerialNumber: syz
[  442.584926][   T24] usb 3-1: config 0 descriptor??
[  442.600435][ T8700] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  442.607633][ T8700] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  444.678291][   T30] audit: type=1400 audit(1753889980.554:357): avc:  denied  { mount } for  pid=8740 comm="syz.4.577" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  444.814801][   T24] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 8a:7c:96:20:8a:d2
[  444.925353][   T24] usb 3-1: USB disconnect, device number 27
[  445.052569][   T24] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  445.119869][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  445.660105][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.768986][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  445.881170][ T5931] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  446.023910][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.071871][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'.
[  446.227538][   T30] audit: type=1400 audit(1753889982.324:358): avc:  denied  { unmount } for  pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  446.318237][ T5931] usb 5-1: config 0 descriptor??
[  446.326114][ T5931] usb 5-1: can't set config #0, error -71
[  446.330205][ T8754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.580'.
[  446.345511][ T5931] usb 5-1: USB disconnect, device number 20
[  446.797317][   T30] audit: type=1400 audit(1753889982.854:359): avc:  denied  { watch } for  pid=8758 comm="syz.0.583" path="/121" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  447.015277][   T30] audit: type=1400 audit(1753889982.854:360): avc:  denied  { watch_sb } for  pid=8758 comm="syz.0.583" path="/121" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  447.139727][ T5931] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  447.201009][ T8593] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  447.223244][ T8593] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  447.233387][ T8593] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  447.246881][ T8593] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  447.293487][ T5931] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=30.62
[  447.306901][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.326376][ T5931] usb 5-1: Product: syz
[  447.430019][ T5931] usb 5-1: Manufacturer: syz
[  447.449711][ T5931] usb 5-1: SerialNumber: syz
[  447.472454][ T5931] usb 5-1: config 0 descriptor??
[  447.620699][ T5931] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[  447.628815][ T5931] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  447.673323][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.721937][ T8593] 8021q: adding VLAN 0 to HW filter on device team0
[  447.756235][ T8593] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  447.766691][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.778618][ T8794] FAULT_INJECTION: forcing a failure.
[  447.778618][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.797673][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.0.587 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  447.797697][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  447.797708][ T8794] Call Trace:
[  447.797714][ T8794]  <TASK>
[  447.797721][ T8794]  dump_stack_lvl+0x16c/0x1f0
[  447.797745][ T8794]  should_fail_ex+0x512/0x640
[  447.797774][ T8794]  _copy_to_user+0x32/0xd0
[  447.797803][ T8794]  simple_read_from_buffer+0xcb/0x170
[  447.797837][ T8794]  proc_fail_nth_read+0x197/0x240
[  447.797857][ T8794]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.797878][ T8794]  ? rw_verify_area+0xcf/0x680
[  447.797903][ T8794]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  447.797921][ T8794]  vfs_read+0x1e4/0xc60
[  447.797951][ T8794]  ? __pfx___mutex_lock+0x10/0x10
[  447.797972][ T8794]  ? __pfx_vfs_read+0x10/0x10
[  447.798012][ T8794]  ? __fget_files+0x20e/0x3c0
[  447.798037][ T8794]  ksys_read+0x12a/0x250
[  447.798053][ T8794]  ? __pfx_ksys_read+0x10/0x10
[  447.798076][ T8794]  do_syscall_64+0xcd/0x4c0
[  447.798099][ T8794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.798117][ T8794] RIP: 0033:0x7ff9d9b8d3bc
[  447.798131][ T8794] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  447.798148][ T8794] RSP: 002b:00007ff9d79f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  447.798166][ T8794] RAX: ffffffffffffffda RBX: 00007ff9d9db6080 RCX: 00007ff9d9b8d3bc
[  447.798177][ T8794] RDX: 000000000000000f RSI: 00007ff9d79f60a0 RDI: 0000000000000003
[  447.798188][ T8794] RBP: 00007ff9d79f6090 R08: 0000000000000000 R09: 0000000000000000
[  447.798198][ T8794] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  447.798209][ T8794] R13: 0000000000000000 R14: 00007ff9d9db6080 R15: 00007ffe87e60c08
[  447.798233][ T8794]  </TASK>
[  447.856715][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.985145][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'.
[  447.987405][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.047918][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.055061][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.098958][ T8798] 8021q: VLANs not supported on ip6_vti0
[  448.114486][   T30] audit: type=1400 audit(1753889984.184:361): avc:  denied  { getopt } for  pid=8789 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  448.966500][ T8815] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  449.182475][ T5931] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  449.189228][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.284009][ T8813] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  449.326037][ T8593] veth0_vlan: entered promiscuous mode
[  449.350705][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  449.367927][ T5931] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  449.833948][ T5931] usb 1-1: config 0 has no interface number 0
[  449.842456][ T5931] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  449.855241][ T5931] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  449.867453][ T8593] veth1_vlan: entered promiscuous mode
[  449.869084][ T5931] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  449.884440][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.895660][ T5931] usb 1-1: Product: syz
[  449.903415][ T5931] usb 1-1: Manufacturer: syz
[  449.908040][ T5931] usb 1-1: SerialNumber: syz
[  449.922631][ T5931] usb 1-1: config 0 descriptor??
[  449.928321][ T8814] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  449.936386][ T8814] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  449.954823][ T5931] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 46:1a:03:c1:b9:99
[  449.972379][  T973] usb 5-1: USB disconnect, device number 21
[  450.016165][ T8593] veth0_macvtap: entered promiscuous mode
[  450.043369][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[  450.203636][ T8836] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  450.214254][ T8836] SELinux: failed to load policy
[  451.915592][ T8593] veth1_macvtap: entered promiscuous mode
[  451.927918][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.937163][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.945812][ T8593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.954693][ T8593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.963495][ T8593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.972261][ T8593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.040641][  T975] usb 1-1: USB disconnect, device number 22
[  452.047541][  T975] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  452.427272][ T8858] ubi: mtd0 is already attached to ubi31
[  452.544716][   T30] audit: type=1400 audit(1753889988.594:362): avc:  denied  { read } for  pid=8850 comm="syz.2.596" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  452.609802][ T8854] binder: binder_mmap: 8850 200000000000-200000b36000 bad vm_flags failed -1
[  452.749761][ T5930] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  452.840706][ T8861] binder: 8850:8861 ioctl 40046210 0 returned -14
[  452.840965][ T8855] block device autoloading is deprecated and will be removed.
[  452.868052][   T30] audit: type=1400 audit(1753889988.604:363): avc:  denied  { open } for  pid=8850 comm="syz.2.596" path="/128/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  452.929007][   T30] audit: type=1400 audit(1753889988.674:364): avc:  denied  { append } for  pid=8850 comm="syz.2.596" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  452.980951][ T5930] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  452.994772][ T5930] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  453.097797][ T5930] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  453.121304][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.196801][ T8859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  453.217980][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  453.238675][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.268252][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.639506][ T8873] FAULT_INJECTION: forcing a failure.
[  453.639506][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  453.652807][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.1.595 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  453.652832][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  453.652842][ T8873] Call Trace:
[  453.652848][ T8873]  <TASK>
[  453.652855][ T8873]  dump_stack_lvl+0x16c/0x1f0
[  453.652880][ T8873]  should_fail_ex+0x512/0x640
[  453.652907][ T8873]  _copy_from_user+0x2e/0xd0
[  453.652934][ T8873]  memdup_user_nul+0x6c/0x120
[  453.652953][ T8873]  sel_commit_bools_write+0x13e/0x420
[  453.652979][ T8873]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  453.653006][ T8873]  ? preempt_schedule_thunk+0x16/0x30
[  453.653034][ T8873]  ? __pfx_sel_commit_bools_write+0x10/0x10
[  453.653058][ T8873]  vfs_write+0x29d/0x1150
[  453.653080][ T8873]  ? __pfx_vfs_write+0x10/0x10
[  453.653095][ T8873]  ? find_held_lock+0x2b/0x80
[  453.653117][ T8873]  ? __fget_files+0x204/0x3c0
[  453.653139][ T8873]  ? __fget_files+0x20e/0x3c0
[  453.653154][ T8873]  ? __fget_files+0x1b0/0x3c0
[  453.653178][ T8873]  __x64_sys_pwrite64+0x1eb/0x250
[  453.653196][ T8873]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  453.653221][ T8873]  do_syscall_64+0xcd/0x4c0
[  453.653244][ T8873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.653261][ T8873] RIP: 0033:0x7fcda958e9a9
[  453.653276][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.653292][ T8873] RSP: 002b:00007fcdaa357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  453.653309][ T8873] RAX: ffffffffffffffda RBX: 00007fcda97b6160 RCX: 00007fcda958e9a9
[  453.653321][ T8873] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000009
[  453.653332][ T8873] RBP: 00007fcdaa357090 R08: 0000000000000000 R09: 0000000000000000
[  453.653342][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.653353][ T8873] R13: 0000000000000000 R14: 00007fcda97b6160 R15: 00007ffdb383e958
[  453.653377][ T8873]  </TASK>
[  453.880298][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.941810][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.429766][ T5930] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  454.555412][ T8886] 9pnet_fd: Insufficient options for proto=fd
[  454.880885][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.897311][ T5930] usb 4-1: config 0 has no interfaces?
[  454.919338][ T5930] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  454.954853][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.108857][ T5930] usb 4-1: config 0 descriptor??
[  455.613330][ T8906] Cannot find add_set index 0 as target
[  456.291649][ T5930] usb 2-1: USB disconnect, device number 22
[  456.459834][ T5963] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  456.468882][   T30] audit: type=1400 audit(1753889992.554:365): avc:  denied  { module_request } for  pid=8912 comm="syz.1.607" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  456.513640][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  456.680286][ T5963] usb 3-1: Using ep0 maxpacket: 32
[  456.716936][ T5963] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  456.803367][ T5963] usb 3-1: config 0 has no interface number 0
[  456.849701][  T973] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  456.896613][ T5963] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  457.033949][ T5963] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  457.086435][ T5963] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  457.135672][  T973] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  457.155725][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.227755][ T5930] usb 4-1: USB disconnect, device number 18
[  457.261057][  T973] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  457.282039][ T5963] usb 3-1: Product: syz
[  457.319810][ T5963] usb 3-1: Manufacturer: syz
[  457.333061][  T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  457.356730][ T5963] usb 3-1: SerialNumber: syz
[  457.385097][  T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.401236][ T5963] usb 3-1: config 0 descriptor??
[  457.422525][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  457.432044][ T8908] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  457.439292][ T8908] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  457.456982][ T5963] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:0a:31:58:f0:4a
[  457.559255][ T8938] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  457.933024][ T8919] kAFS: unable to lookup cell '.,'
[  458.426761][ T8952] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  458.944469][ T5931] usb 3-1: USB disconnect, device number 28
[  459.031877][ T5931] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  460.361462][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'.
[  460.501427][ T8951] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  460.516927][ T5931] usb 5-1: USB disconnect, device number 22
[  460.649167][ T8976] bridge1: entered promiscuous mode
[  461.703822][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'.
[  461.773222][   T51] Bluetooth: hci2: unexpected event for opcode 0x2010
[  461.787890][   T30] audit: type=1400 audit(1753889997.854:366): avc:  denied  { getopt } for  pid=8975 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  461.930013][ T9002] ubi: mtd0 is already attached to ubi31
[  462.878096][ T9010] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[  462.887990][ T9010] SELinux: failed to load policy
[  466.738628][ T9044] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  467.664677][ T9043] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  467.764010][ T9057] FAULT_INJECTION: forcing a failure.
[  467.764010][ T9057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  467.765098][ T9057] 
[  467.765105][ T9057] ======================================================
[  467.765110][ T9057] WARNING: possible circular locking dependency detected
[  467.765118][ T9057] 6.16.0-syzkaller-04405-g4b290aae788e #0 Not tainted
[  467.765127][ T9057] ------------------------------------------------------
[  467.765133][ T9057] syz.4.632/9057 is trying to acquire lock:
[  467.765141][ T9057] ffffffff8e4d10e0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0
[  467.765185][ T9057] 
[  467.765185][ T9057] but task is already holding lock:
[  467.765189][ T9057] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  467.765227][ T9057] 
[  467.765227][ T9057] which lock already depends on the new lock.
[  467.765227][ T9057] 
[  467.765232][ T9057] 
[  467.765232][ T9057] the existing dependency chain (in reverse order) is:
[  467.765237][ T9057] 
[  467.765237][ T9057] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  467.765257][ T9057]        _raw_spin_lock_nested+0x31/0x40
[  467.765272][ T9057]        raw_spin_rq_lock_nested+0x29/0x130
[  467.765290][ T9057]        task_rq_lock+0xcf/0x490
[  467.765308][ T9057]        cgroup_move_task+0x81/0x2a0
[  467.765327][ T9057]        css_set_move_task+0x288/0x5f0
[  467.765342][ T9057]        cgroup_post_fork+0x201/0x9e0
[  467.765361][ T9057]        copy_process+0x5cfa/0x7690
[  467.765381][ T9057]        kernel_clone+0xfc/0x930
[  467.765401][ T9057]        user_mode_thread+0xc7/0x110
[  467.765421][ T9057]        rest_init+0x23/0x2b0
[  467.765442][ T9057]        start_kernel+0x3ee/0x4d0
[  467.765457][ T9057]        x86_64_start_reservations+0x18/0x30
[  467.765473][ T9057]        x86_64_start_kernel+0x130/0x190
[  467.765488][ T9057]        common_startup_64+0x13e/0x148
[  467.765504][ T9057] 
[  467.765504][ T9057] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  467.765524][ T9057]        _raw_spin_lock_irqsave+0x3a/0x60
[  467.765539][ T9057]        try_to_wake_up+0xb2/0x1680
[  467.765556][ T9057]        __wake_up_common+0x135/0x1f0
[  467.765570][ T9057]        __wake_up+0x31/0x60
[  467.765590][ T9057]        tty_port_default_wakeup+0x2a/0x40
[  467.765611][ T9057]        serial8250_tx_chars+0x68e/0x860
[  467.765633][ T9057]        serial8250_handle_irq+0x761/0xcb0
[  467.765655][ T9057]        serial8250_default_handle_irq+0x9a/0x250
[  467.765678][ T9057]        serial8250_interrupt+0xf5/0x1b0
[  467.765702][ T9057]        __handle_irq_event_percpu+0x22c/0x7d0
[  467.765722][ T9057]        handle_irq_event+0xab/0x1e0
[  467.765740][ T9057]        handle_edge_irq+0x3b3/0x9d0
[  467.765758][ T9057]        __common_interrupt+0xe2/0x250
[  467.765786][ T9057]        common_interrupt+0xba/0xe0
[  467.765808][ T9057]        asm_common_interrupt+0x26/0x40
[  467.765824][ T9057]        format_decode+0x3eb/0xd40
[  467.765848][ T9057]        vsnprintf+0x156/0x1160
[  467.765863][ T9057]        sprintf+0xcc/0x100
[  467.765878][ T9057]        info_print_prefix+0x25a/0x350
[  467.765892][ T9057]        record_print_text+0x140/0x400
[  467.765906][ T9057]        printk_get_next_message+0x2d1/0x6d0
[  467.765925][ T9057]        console_flush_all+0x6ea/0xc60
[  467.765943][ T9057]        console_unlock+0xd8/0x210
[  467.765961][ T9057]        vprintk_emit+0x418/0x6d0
[  467.765979][ T9057]        _printk+0xc7/0x100
[  467.765992][ T9057]        kauditd_hold_skb+0x205/0x250
[  467.766006][ T9057]        kauditd_send_queue+0x236/0x290
[  467.766030][ T9057]        kauditd_thread+0x623/0xa70
[  467.766044][ T9057]        kthread+0x3c2/0x780
[  467.766057][ T9057]        ret_from_fork+0x5d7/0x6f0
[  467.766071][ T9057]        ret_from_fork_asm+0x1a/0x30
[  467.766090][ T9057] 
[  467.766090][ T9057] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  467.766111][ T9057]        _raw_spin_lock_irqsave+0x3a/0x60
[  467.766126][ T9057]        __wake_up+0x1c/0x60
[  467.766146][ T9057]        tty_port_default_wakeup+0x2a/0x40
[  467.766166][ T9057]        serial8250_tx_chars+0x68e/0x860
[  467.766186][ T9057]        serial8250_handle_irq+0x761/0xcb0
[  467.766209][ T9057]        serial8250_default_handle_irq+0x9a/0x250
[  467.766232][ T9057]        serial8250_interrupt+0xf5/0x1b0
[  467.766255][ T9057]        __handle_irq_event_percpu+0x22c/0x7d0
[  467.766274][ T9057]        handle_irq_event+0xab/0x1e0
[  467.766292][ T9057]        handle_edge_irq+0x3b3/0x9d0
[  467.766308][ T9057]        __common_interrupt+0xe2/0x250
[  467.766329][ T9057]        common_interrupt+0xba/0xe0
[  467.766350][ T9057]        asm_common_interrupt+0x26/0x40
[  467.766365][ T9057]        _raw_spin_unlock_irqrestore+0x31/0x80
[  467.766380][ T9057]        uart_write+0x2a4/0xb30
[  467.766398][ T9057]        n_tty_write+0x412/0x1160
[  467.766420][ T9057]        file_tty_write.constprop.0+0x504/0x9b0
[  467.766439][ T9057]        redirected_tty_write+0xd4/0x150
[  467.766457][ T9057]        vfs_write+0x6c4/0x1150
[  467.766471][ T9057]        ksys_write+0x12a/0x250
[  467.766483][ T9057]        do_syscall_64+0xcd/0x4c0
[  467.766500][ T9057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.766515][ T9057] 
[  467.766515][ T9057] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  467.766535][ T9057]        _raw_spin_lock_irqsave+0x3a/0x60
[  467.766550][ T9057]        serial8250_console_write+0x181/0x1890
[  467.766573][ T9057]        console_flush_all+0x801/0xc60
[  467.766591][ T9057]        console_unlock+0xd8/0x210
[  467.766608][ T9057]        vprintk_emit+0x418/0x6d0
[  467.766627][ T9057]        _printk+0xc7/0x100
[  467.766639][ T9057]        register_console+0xc2d/0x11b0
[  467.766658][ T9057]        univ8250_console_init+0x5f/0x90
[  467.766675][ T9057]        console_init+0x14f/0x680
[  467.766690][ T9057]        start_kernel+0x29f/0x4d0
[  467.766704][ T9057]        x86_64_start_reservations+0x18/0x30
[  467.766720][ T9057]        x86_64_start_kernel+0x130/0x190
[  467.766734][ T9057]        common_startup_64+0x13e/0x148
[  467.766751][ T9057] 
[  467.766751][ T9057] -> #0 (console_owner){-.-.}-{0:0}:
[  467.766771][ T9057]        __lock_acquire+0x126f/0x1c90
[  467.766800][ T9057]        lock_acquire+0x179/0x350
[  467.766813][ T9057]        console_lock_spinning_enable+0xb0/0xd0
[  467.766832][ T9057]        console_flush_all+0x7aa/0xc60
[  467.766849][ T9057]        console_unlock+0xd8/0x210
[  467.766867][ T9057]        vprintk_emit+0x418/0x6d0
[  467.766885][ T9057]        _printk+0xc7/0x100
[  467.766898][ T9057]        should_fail_ex+0x4e7/0x640
[  467.766919][ T9057]        strncpy_from_user+0x3b/0x2e0
[  467.766938][ T9057]        strncpy_from_user_nofault+0x7f/0x180
[  467.766956][ T9057]        bpf_bprintf_prepare+0xede/0x14b0
[  467.766971][ T9057]        bpf_trace_printk+0xda/0x190
[  467.766985][ T9057]        bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[  467.766997][ T9057]        bpf_trace_run2+0x230/0x590
[  467.767014][ T9057]        __bpf_trace_contention_begin+0xc9/0x110
[  467.767038][ T9057]        trace_contention_begin.constprop.0+0xde/0x160
[  467.767056][ T9057]        __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  467.767074][ T9057]        do_raw_spin_lock+0x20e/0x2b0
[  467.767090][ T9057]        raw_spin_rq_lock_nested+0x7e/0x130
[  467.767110][ T9057]        __schedule+0x301/0x5df0
[  467.767124][ T9057]        preempt_schedule_common+0x44/0xc0
[  467.767140][ T9057]        preempt_schedule_thunk+0x16/0x30
[  467.767160][ T9057]        _raw_spin_unlock+0x3e/0x50
[  467.767174][ T9057]        __do_sys_close_range+0x38f/0x730
[  467.767191][ T9057]        do_syscall_64+0xcd/0x4c0
[  467.767209][ T9057]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.767224][ T9057] 
[  467.767224][ T9057] other info that might help us debug this:
[  467.767224][ T9057] 
[  467.767229][ T9057] Chain exists of:
[  467.767229][ T9057]   console_owner --> &p->pi_lock --> &rq->__lock
[  467.767229][ T9057] 
[  467.767252][ T9057]  Possible unsafe locking scenario:
[  467.767252][ T9057] 
[  467.767256][ T9057]        CPU0                    CPU1
[  467.767261][ T9057]        ----                    ----
[  467.767265][ T9057]   lock(&rq->__lock);
[  467.767274][ T9057]                                lock(&p->pi_lock);
[  467.767285][ T9057]                                lock(&rq->__lock);
[  467.767296][ T9057]   lock(console_owner);
[  467.767305][ T9057] 
[  467.767305][ T9057]  *** DEADLOCK ***
[  467.767305][ T9057] 
[  467.767309][ T9057] 4 locks held by syz.4.632/9057:
[  467.767318][ T9057]  #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  467.767358][ T9057]  #1: ffffffff8e5c3aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590
[  467.767395][ T9057]  #2: ffffffff8e5b1520 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100
[  467.767429][ T9057]  #3: ffffffff8e5b1590 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60
[  467.767468][ T9057] 
[  467.767468][ T9057] stack backtrace:
[  467.767476][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.4.632 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  467.767496][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  467.767506][ T9057] Call Trace:
[  467.767511][ T9057]  <TASK>
[  467.767517][ T9057]  dump_stack_lvl+0x116/0x1f0
[  467.767536][ T9057]  print_circular_bug+0x275/0x350
[  467.767561][ T9057]  check_noncircular+0x14c/0x170
[  467.767589][ T9057]  __lock_acquire+0x126f/0x1c90
[  467.767618][ T9057]  lock_acquire+0x179/0x350
[  467.767632][ T9057]  ? console_lock_spinning_enable+0x9f/0xd0
[  467.767652][ T9057]  ? console_lock_spinning_enable+0x88/0xd0
[  467.767674][ T9057]  console_lock_spinning_enable+0xb0/0xd0
[  467.767693][ T9057]  ? console_lock_spinning_enable+0x9f/0xd0
[  467.767712][ T9057]  console_flush_all+0x7aa/0xc60
[  467.767734][ T9057]  ? __pfx_console_flush_all+0x10/0x10
[  467.767757][ T9057]  ? is_printk_cpu_sync_owner+0x32/0x40
[  467.767786][ T9057]  console_unlock+0xd8/0x210
[  467.767804][ T9057]  ? __pfx_console_unlock+0x10/0x10
[  467.767823][ T9057]  ? do_raw_spin_unlock+0x160/0x230
[  467.767842][ T9057]  ? _printk+0xc7/0x100
[  467.767857][ T9057]  ? __down_trylock_console_sem+0xb0/0x140
[  467.767875][ T9057]  vprintk_emit+0x418/0x6d0
[  467.767895][ T9057]  ? __pfx_vprintk_emit+0x10/0x10
[  467.767919][ T9057]  _printk+0xc7/0x100
[  467.767933][ T9057]  ? __pfx__printk+0x10/0x10
[  467.767948][ T9057]  ? rcu_is_watching+0x12/0xc0
[  467.767969][ T9057]  ? __pfx____ratelimit+0x10/0x10
[  467.767988][ T9057]  should_fail_ex+0x4e7/0x640
[  467.768011][ T9057]  strncpy_from_user+0x3b/0x2e0
[  467.768033][ T9057]  strncpy_from_user_nofault+0x7f/0x180
[  467.768051][ T9057]  bpf_bprintf_prepare+0xede/0x14b0
[  467.768069][ T9057]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  467.768096][ T9057]  ? __lock_acquire+0x622/0x1c90
[  467.768123][ T9057]  ? bpf_trace_run2+0x3db/0x590
[  467.768140][ T9057]  bpf_trace_printk+0xda/0x190
[  467.768155][ T9057]  ? __pfx_bpf_trace_printk+0x10/0x10
[  467.768173][ T9057]  ? bpf_trace_run2+0x3db/0x590
[  467.768194][ T9057]  bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[  467.768207][ T9057]  bpf_trace_run2+0x230/0x590
[  467.768225][ T9057]  ? __pfx_bpf_trace_run2+0x10/0x10
[  467.768243][ T9057]  ? __kernel_text_address+0xd/0x40
[  467.768263][ T9057]  ? arch_stack_walk+0xa6/0x100
[  467.768282][ T9057]  __bpf_trace_contention_begin+0xc9/0x110
[  467.768309][ T9057]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  467.768338][ T9057]  ? stack_trace_save+0x8e/0xc0
[  467.768360][ T9057]  ? stack_depot_save_flags+0x28/0xa40
[  467.768385][ T9057]  trace_contention_begin.constprop.0+0xde/0x160
[  467.768405][ T9057]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  467.768426][ T9057]  ? __lock_acquire+0xb8a/0x1c90
[  467.768451][ T9057]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  467.768475][ T9057]  do_raw_spin_lock+0x20e/0x2b0
[  467.768494][ T9057]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  467.768512][ T9057]  ? rcu_qs+0x2b/0xe0
[  467.768530][ T9057]  ? rcu_note_context_switch+0x192/0x1e00
[  467.768552][ T9057]  raw_spin_rq_lock_nested+0x7e/0x130
[  467.768573][ T9057]  ? preempt_schedule_common+0x44/0xc0
[  467.768589][ T9057]  ? preempt_schedule_common+0x44/0xc0
[  467.768605][ T9057]  __schedule+0x301/0x5df0
[  467.768622][ T9057]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  467.768642][ T9057]  ? locks_remove_posix+0x280/0x470
[  467.768672][ T9057]  ? __pfx___schedule+0x10/0x10
[  467.768688][ T9057]  ? __lock_acquire+0xb8a/0x1c90
[  467.768714][ T9057]  ? mark_held_locks+0x49/0x80
[  467.768739][ T9057]  ? irqentry_exit+0x3b/0x90
[  467.768756][ T9057]  ? lockdep_hardirqs_on+0x7c/0x110
[  467.768773][ T9057]  ? preempt_schedule_thunk+0x16/0x30
[  467.768801][ T9057]  preempt_schedule_common+0x44/0xc0
[  467.768819][ T9057]  preempt_schedule_thunk+0x16/0x30
[  467.768843][ T9057]  _raw_spin_unlock+0x3e/0x50
[  467.768858][ T9057]  __do_sys_close_range+0x38f/0x730
[  467.768877][ T9057]  ? __pfx___do_sys_close_range+0x10/0x10
[  467.768898][ T9057]  do_syscall_64+0xcd/0x4c0
[  467.768918][ T9057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.768934][ T9057] RIP: 0033:0x7fd26198e9a9
[  467.768947][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.768964][ T9057] RSP: 002b:00007fd25f7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  467.768979][ T9057] RAX: ffffffffffffffda RBX: 00007fd261bb6080 RCX: 00007fd26198e9a9
[  467.768990][ T9057] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  467.769000][ T9057] RBP: 00007fd25f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  467.769010][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.769020][ T9057] R13: 0000000000000000 R14: 00007fd261bb6080 R15: 00007ffc08ba7178
[  467.769036][ T9057]  </TASK>
[  469.050174][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.4.632 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) 
[  469.050194][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  469.050204][ T9057] Call Trace:
[  469.050209][ T9057]  <TASK>
[  469.050214][ T9057]  dump_stack_lvl+0x116/0x1f0
[  469.050235][ T9057]  should_fail_ex+0x512/0x640
[  469.050256][ T9057]  strncpy_from_user+0x3b/0x2e0
[  469.050274][ T9057]  strncpy_from_user_nofault+0x7f/0x180
[  469.050291][ T9057]  bpf_bprintf_prepare+0xede/0x14b0
[  469.050307][ T9057]  ? __pfx_bpf_bprintf_prepare+0x10/0x10
[  469.050329][ T9057]  ? __lock_acquire+0x622/0x1c90
[  469.050353][ T9057]  ? bpf_trace_run2+0x3db/0x590
[  469.050367][ T9057]  bpf_trace_printk+0xda/0x190
[  469.050380][ T9057]  ? __pfx_bpf_trace_printk+0x10/0x10
[  469.050394][ T9057]  ? bpf_trace_run2+0x3db/0x590
[  469.050411][ T9057]  bpf_prog_7c77c7e0f6645ad8+0x3e/0x44
[  469.050423][ T9057]  bpf_trace_run2+0x230/0x590
[  469.050438][ T9057]  ? __pfx_bpf_trace_run2+0x10/0x10
[  469.050453][ T9057]  ? __kernel_text_address+0xd/0x40
[  469.050468][ T9057]  ? arch_stack_walk+0xa6/0x100
[  469.050485][ T9057]  __bpf_trace_contention_begin+0xc9/0x110
[  469.050508][ T9057]  ? __pfx___bpf_trace_contention_begin+0x10/0x10
[  469.050531][ T9057]  ? stack_trace_save+0x8e/0xc0
[  469.050551][ T9057]  ? stack_depot_save_flags+0x28/0xa40
[  469.050571][ T9057]  trace_contention_begin.constprop.0+0xde/0x160
[  469.050587][ T9057]  __pv_queued_spin_lock_slowpath+0x109/0xcf0
[  469.050605][ T9057]  ? __lock_acquire+0xb8a/0x1c90
[  469.050626][ T9057]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  469.050646][ T9057]  do_raw_spin_lock+0x20e/0x2b0
[  469.050661][ T9057]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  469.050675][ T9057]  ? rcu_qs+0x2b/0xe0
[  469.050691][ T9057]  ? rcu_note_context_switch+0x192/0x1e00
[  469.050709][ T9057]  raw_spin_rq_lock_nested+0x7e/0x130
[  469.050728][ T9057]  ? preempt_schedule_common+0x44/0xc0
[  469.050742][ T9057]  ? preempt_schedule_common+0x44/0xc0
[  469.050755][ T9057]  __schedule+0x301/0x5df0
[  469.050773][ T9057]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  469.050790][ T9057]  ? locks_remove_posix+0x280/0x470
[  469.050815][ T9057]  ? __pfx___schedule+0x10/0x10
[  469.050828][ T9057]  ? __lock_acquire+0xb8a/0x1c90
[  469.050850][ T9057]  ? mark_held_locks+0x49/0x80
[  469.050870][ T9057]  ? irqentry_exit+0x3b/0x90
[  469.050884][ T9057]  ? lockdep_hardirqs_on+0x7c/0x110
[  469.050899][ T9057]  ? preempt_schedule_thunk+0x16/0x30
[  469.050919][ T9057]  preempt_schedule_common+0x44/0xc0
[  469.050934][ T9057]  preempt_schedule_thunk+0x16/0x30
[  469.050953][ T9057]  _raw_spin_unlock+0x3e/0x50
[  469.050966][ T9057]  __do_sys_close_range+0x38f/0x730
[  469.050982][ T9057]  ? __pfx___do_sys_close_range+0x10/0x10
[  469.050999][ T9057]  do_syscall_64+0xcd/0x4c0
[  469.051016][ T9057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.051030][ T9057] RIP: 0033:0x7fd26198e9a9
[  469.051042][ T9057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.051056][ T9057] RSP: 002b:00007fd25f7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  469.051069][ T9057] RAX: ffffffffffffffda RBX: 00007fd261bb6080 RCX: 00007fd26198e9a9
[  469.051079][ T9057] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004
[  469.051087][ T9057] RBP: 00007fd25f7d5090 R08: 0000000000000000 R09: 0000000000000000
[  469.051096][ T9057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.051104][ T9057] R13: 0000000000000000 R14: 00007fd261bb6080 R15: 00007ffc08ba7178
[  469.051117][ T9057]  </TASK>
[  469.450176][ T9057] delete_channel: no stack
[  469.539754][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  469.772868][ T5930] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  469.787482][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.848924][ T5930] usb 4-1: Product: syz
[  469.861159][ T5930] usb 4-1: Manufacturer: syz
[  469.873407][ T5930] usb 4-1: SerialNumber: syz
[  469.890440][ T5930] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  469.905077][ T5897] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  470.383956][ T5930] usb 4-1: USB disconnect, device number 19
[  471.179806][ T5897] usb 4-1: Service connection timeout for: 256
[  471.185985][ T5897] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  471.194172][ T5897] ath9k_htc: Failed to initialize the device
[  471.200287][ T5930] usb 4-1: ath9k_htc: USB layer deinitialized