last executing test programs:

46.681738697s ago: executing program 1 (id=958):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000)

46.607256069s ago: executing program 1 (id=959):
openat$mice(0xffffff9c, &(0x7f0000000000), 0x301)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'vxcan1\x00', 0x7101})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x8000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r6 = syz_io_uring_setup(0xf08, 0x0, &(0x7f0000000580), &(0x7f0000000540), &(0x7f0000000f40))
io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

45.118105221s ago: executing program 1 (id=965):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000800)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0x6, 0x0, 0x1, 0x100, 0x206, 0x0, 0x7, 0x4, 0x100, 0x5, 0x4, 0x8, 0xa8b, 0x1, 0x0, 0xffff0000, 0x9d, 0x9, 0x7fff, 0x8, 0x6, 0x0, 0x5, 0x5, 0x5, 0xe, 0x100, 0x0, 0xe, 0x3, 0x3, 0x0, 0x10000, 0x9, 0x5, 0x3ff, 0x47, 0x9, 0x1, 0x2a5ba946, 0x1, 0x6, 0x8, 0x5, 0xce, 0x3, 0x401, 0x3e2525ee, 0x40, 0x6, 0x5, 0x5, 0x5, 0x5, 0x401, 0x1000, 0xf, 0x200, 0x200, 0x1, 0x5, 0x43331893, 0xfffffff0, 0xd6, 0xc6, 0x6, 0x3f686615, 0x2f0, 0x1, 0x2000000, 0x4, 0x7, 0xffffffff, 0x3f8, 0x10000, 0x3, 0xfffffffa, 0x2, 0x9, 0x9, 0x7798, 0x5, 0xc8b, 0x10000, 0x80, 0x4, 0x0, 0x80000001, 0x0, 0xda, 0x5, 0x2, 0x0, 0x1000, 0x6, 0x7, 0xffffffff, 0xfffffffe, 0x101, 0x8, 0x5, 0x56ed, 0x6, 0x9, 0x3, 0x3, 0x9, 0x219, 0x1, 0x4, 0xfb, 0x8, 0x7, 0x60000000, 0x4171, 0x6, 0x649, 0x0, 0x7c, 0x1, 0x3, 0xffffff38, 0x92, 0x1, 0x8001, 0xf, 0x63]}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000)
ioctl$EVIOCSREP(r0, 0x80044584, 0xffffffffffffffff)

43.829472602s ago: executing program 1 (id=968):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'})
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80000, 0x0)

43.300679075s ago: executing program 1 (id=970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000)

42.803668347s ago: executing program 1 (id=976):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100ebffffff0000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="200f3c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

42.061903737s ago: executing program 32 (id=976):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100ebffffff0000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="200f3c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19.926940574s ago: executing program 3 (id=1042):
r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io$sierra_net(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x20, 0xa, 0xd7, {0xd7, 0x6, "c18d19492de34d6f788dfdfcd329e1c1cd749a3aa5150a774a9b602997cdbe10964919bf49a1caaa0252a77653bf8d1fa00130aebcea9df763eb10fe1dc3f7e2ceb9facbd563c31d2879aa158d8156fe7a4be3f8b9383f97f11f855699e33f75b6a0c5f1a64bfb821da3935850b4347d82db1d7430de294163807b9555bad758c8fb68809c827e6bccae7e9fc0c896d95c7d49549ca6ea0556ae9d75054f837380698b222ea813c9d9e81836e346f5ad5e91bd717bf508d9180194e559783075b5f0ff4e2613f1e3d7fe58f810d3ae40d8c2b2b6e3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "dabad5839d42aba54a4cd4f0f5219ac21a98b7e1b08d156d63e2cb1c405b077e1ee6c8fc89c05ef586cfcc1d54c6c1196a91dc4bb63b9c2c67da0c0c988fccfb8e3d3915644bbd217b1fe0d2"}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000880)={0x0, 0x13, 0x62, "fe073377d1b25f8da138b11927e8bc7c15efb997fc943e625024f97ee8e222c863654bd44dc54c98e122401eb30d5f1b5aa94146ae0a9d06b400879986dc9a307f6b57cede5284f95c90e78b10e37d9d1f58ebcbfa92f2cc2e158c99b842bf47d1b1"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d80)={0x21, 0x0, 0x2, "3bf6"}})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001600)={0x24, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x68, 0xba, 0x20, 0x2040, 0xb210, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x9, 0x20, 0xd2, "", [{{0x9, 0x4, 0xe0, 0x1, 0x0, 0x37, 0xcc, 0xf2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x13, 0x82, 0x7f, 0x10, 0x1614, 0x407, 0xfcb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x13, 0x6, 0x0, 0x8, 0x1a, 0x27, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000005080)={0x44, &(0x7f0000004d80)={0x0, 0xf, 0x2, "fdee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071040703a461000000010902120001000000000904"], 0x0)

14.195828006s ago: executing program 3 (id=1053):
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
eventfd2(0x0, 0x1) (async)
epoll_create1(0x80000)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904"], 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000100)="2800000014000100000000000000000001000000ffffffff0000000000000000ffffffffffffffff", 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async)
memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) (async)
lremovexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_access\x00')
timer_create(0xfffffffffffffffd, 0x0, 0x0) (async)
timer_gettime(0x0, &(0x7f0000000080)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
io_setup(0x2, &(0x7f0000000000)) (async)
r2 = eventfd(0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004", @ANYRESDEC=r2], 0x20000600}}, 0x40000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil)

12.040126373s ago: executing program 4 (id=1057):
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r0=>0x0, 0x75, "5ae2e9d0cc5bef36cd7a68461e6b7e9f3f2a107342452343145cdee840af8654def979037fb89ce757948848f750f120ff2dca7fc959d270bc09c8493e48d4c6fdc0838f1d6defb00a3e689a554f12f1f16c00170f0147a7c2e6f1f73e85f5ea664f1d6cc170d1ba0298660e2cf583e63323406ee6"}, &(0x7f0000000080)=0x7d)
r1 = socket(0x2, 0x3, 0x67)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x30000003})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r5)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x8000)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x64, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c4}, 0xd4)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x6, 0x0, 0x40000003, 0x1, 0x9664, 0xfffffffe, 0x69a8, r0}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x280408c5}, 0xe800)

11.51229813s ago: executing program 5 (id=1059):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000001c40)=0x2000ff, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x40040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvtap0\x00'})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0x11, 0x148, 0x3f8, 0x0, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x0, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1b, 0x0, [{0x434e, 0x1, 0x7, 0x7fff}, {0x520d, 0x2, 0xd4, 0xcd03}, {0x8, 0x45, 0x0, 0x81}, {0x9, 0x7, 0x8, 0x4}, {0x3, 0x2, 0x0, 0x9}, {0x10, 0x2, 0x2, 0x5}, {0x4, 0x9, 0x0, 0x6}, {0x8, 0x9, 0xf9, 0x3}, {0xfff9, 0x5, 0x48, 0x4c4}, {0x8, 0x7, 0x4, 0x3a4}, {0x329a, 0xda, 0xf4, 0x2}, {0x8, 0x8, 0xf7, 0x5d}, {0x3, 0x2, 0x0, 0x8}, {0xe605, 0x8, 0x8, 0x6}, {0xd7f, 0xfe, 0x6, 0xfffffff9}, {0x7ad, 0x2, 0x3, 0xa42d}, {0x6, 0xb, 0x8, 0x3}, {0x3, 0x7, 0x7, 0x10001}, {0x2, 0x4, 0x7, 0x4}, {0x0, 0x8b, 0x5, 0x9}, {0x8, 0x2, 0x8, 0x4}, {0x6, 0x7f, 0x4f, 0xe1}, {0x5, 0x88, 0x1, 0x1c}, {0x1ff, 0x7, 0xbc, 0x3ff}, {0x61, 0x3, 0x1, 0x1}, {0x2, 0x1, 0x5}, {0x100, 0xf9, 0x40, 0x1}, {0x9, 0x4, 0x1, 0x9}, {0xe, 0x1, 0x3, 0x7}, {0xb, 0xff, 0x3, 0xb49}, {0x2b1, 0xc6, 0x40, 0x6}, {0x9, 0x1, 0x2, 0x8fe9}, {0x4c0, 0x4, 0x0, 0x2}, {0x46ab, 0x8, 0xff, 0x10}, {0x0, 0x6, 0x9, 0x6}, {0x80, 0x7, 0x6}, {0xbc, 0x2, 0x9, 0x2}, {0x2, 0x0, 0x8, 0xa}, {0x1, 0xff, 0x18, 0x9}, {0x86fb, 0x6, 0x4, 0xfffffff8}, {0x4, 0xfc, 0x5, 0x25a7712d}, {0x7, 0x6, 0x0, 0x7}, {0x5, 0x8, 0x3, 0x5eb8}, {0x5e00, 0xf7, 0x1, 0x1}, {0x1, 0xd, 0x4, 0x5}, {0x1, 0xff, 0xfb, 0x5}, {0x1000, 0x41, 0x6, 0x1}, {0x8, 0x3, 0x2d, 0xc}, {0xf001, 0x1, 0x8, 0x1}, {0x3, 0x3, 0x4, 0x4}, {0x0, 0x0, 0xa2, 0xb5e9}, {0x1000, 0x8, 0x9, 0x1}, {0x8, 0x8, 0x9}, {0xff05, 0x9, 0x1, 0xc9f3}, {0x0, 0xf8, 0x6, 0xa8}, {0xff7f, 0x7, 0xe8, 0x3}, {0x8000, 0xeb, 0x8, 0x9584}, {0xfffa, 0x9, 0x3, 0x2}, {0xff, 0x0, 0x28, 0x2}, {0x5, 0x9, 0x4, 0x81}, {0x401, 0xf, 0x2, 0x8}, {0x54, 0x9, 0x7, 0x7}, {0x64e, 0x92, 0x6b, 0x180000}, {0xd, 0x2, 0xe, 0x4}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x400, '\x00', {0xfffffffffffffffc}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x0, 0x2, 'snmp\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x41)
sendmsg$can_raw(r3, 0x0, 0x0)
write(r2, &(0x7f0000000300)='rt1715 0x4', 0xa)
syz_usb_ep_read(r1, 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12014001f7978a0804230f02e188010203010902120001080240020904fc07000f664108415c0d3126f94626c53313cfa45a36eb27e0d77879615499b6f25b3217a0091a171304000000fdbd9a0789b514b7b829fe530c929204a44d7dd37785b468bb42b488d7808ae916ca261bdd823e5c3044f0fc3556875616d85239185e3323a3d138b661e66006fb12a457749d91baaadfb34691293ddf7dfe61e24a1b8f54081d1bcab5f4afd6efeea63ae774503a1618c4dd5518ff238ada67b84b619c9f395178f6a8c6d0d31cc25470f4f460ea0bd74f2ca3e9e027"], 0x0)
syz_usb_ep_write(r1, 0x81, 0xffffffffffffff3a, &(0x7f0000000140)="04000000")

11.406362705s ago: executing program 4 (id=1061):
munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x2, 0x5, 0x787, 0x3, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206010800000000000000000300000614000780080011400000000805001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d6163"], 0x5c}}, 0x24000042)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r5, 0x601, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044895}, 0x20008840)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xa0, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "6c2b8ae3c775010b71ae58a123404489234d7ed8140ca3b4b871c46d50"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff163c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf7cf42e}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x64008000}, 0x800)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c90001"], 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000900)={0x7, 0x7f, 0x200})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x1, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x27}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

10.707871273s ago: executing program 4 (id=1062):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000000000)=0xfa000003)
sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0xe2, 0x24, 0x2c, 0x8, 0x41e, 0x401d, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xab, 0x3, 0x0, 0x96, 0xe2, 0x4d}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x59})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, r5}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}]}, 0x38}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x200000000000000, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
setns(0xc9, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r11, 0x400454cd, 0x10f)
r12 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
write$tun(r11, &(0x7f00000000c0)={@val={0x0, 0x805}, @val={0x2, 0x4, 0x7, 0x7, 0xfffb, 0x6}, @x25={0x0, 0x0, 0x1}}, 0x11)

9.875318714s ago: executing program 3 (id=1063):
r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070502020002000705830200020007050402000200070585020002000705060200020007058702000200070508020002"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x20, 0xa, 0xd7, {0xd7, 0x6, "c18d19492de34d6f788dfdfcd329e1c1cd749a3aa5150a774a9b602997cdbe10964919bf49a1caaa0252a77653bf8d1fa00130aebcea9df763eb10fe1dc3f7e2ceb9facbd563c31d2879aa158d8156fe7a4be3f8b9383f97f11f855699e33f75b6a0c5f1a64bfb821da3935850b4347d82db1d7430de294163807b9555bad758c8fb68809c827e6bccae7e9fc0c896d95c7d49549ca6ea0556ae9d75054f837380698b222ea813c9d9e81836e346f5ad5e91bd717bf508d9180194e559783075b5f0ff4e2613f1e3d7fe58f810d3ae40d8c2b2b6e3"}}, &(0x7f0000000700)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "dabad5839d42aba54a4cd4f0f5219ac21a98b7e1b08d156d63e2cb1c405b077e1ee6c8fc89c05ef586cfcc1d54c6c1196a91dc4bb63b9c2c67da0c0c988fccfb8e3d3915644bbd217b1fe0d2"}}}, &(0x7f0000000dc0)={0x1c, &(0x7f0000000880)={0x0, 0x13, 0x62, "fe073377d1b25f8da138b11927e8bc7c15efb997fc943e625024f97ee8e222c863654bd44dc54c98e122401eb30d5f1b5aa94146ae0a9d06b400879986dc9a307f6b57cede5284f95c90e78b10e37d9d1f58ebcbfa92f2cc2e158c99b842bf47d1b1"}, &(0x7f0000000940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000d80)={0x21, 0x0, 0x2, "3bf6"}})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001600)={0x24, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x68, 0xba, 0x20, 0x2040, 0xb210, 0xbcda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x9, 0x20, 0xd2, "", [{{0x9, 0x4, 0xe0, 0x1, 0x0, 0x37, 0xcc, 0xf2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x13, 0x82, 0x7f, 0x10, 0x1614, 0x407, 0xfcb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0x6, "", [{{0x9, 0x4, 0x13, 0x6, 0x0, 0x8, 0x1a, 0x27, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000005080)={0x44, &(0x7f0000004d80)={0x0, 0xf, 0x2, "fdee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071040703a461000000010902120001000000000904"], 0x0)

7.047461585s ago: executing program 0 (id=1068):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00', @ANYBLOB="05000100", @ANYBLOB], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair(0x21, 0x2, 0x45, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$unix(0x1, 0x2, 0x0)
bind$bt_hci(r3, 0x0, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)

6.660621469s ago: executing program 5 (id=1069):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10)

6.032025929s ago: executing program 0 (id=1070):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1, 0x5, 0x9, 0x17ef, 0x81})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0)
socket$packet(0x11, 0x2, 0x300)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r9=>0x0})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r9, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x28000)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="a4de00000000", @ANYRES16=r0, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="200050800500020002000000090001007ee5d52ffd0000000800030006ac0f00"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000002000000"], 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x481}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x48080)

4.96587245s ago: executing program 4 (id=1071):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x5, 0x101, 0x413b, 0x8, 0x41f}, {0x9, 0xffff, 0xa5, 0x4d, 0xfffffffffffbf40f, 0x4}], ['\x00', '\x00']})
process_vm_writev(0x0, &(0x7f00000033c0)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1, &(0x7f0000006880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x4000)
shutdown(r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r2, &(0x7f0000000100)=""/9, 0xfffffd87)
write$tun(r2, 0x0, 0xffe)
socket(0x11, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x2002, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=<r3=>0x0)
syz_pidfd_open(r3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x150)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0x5}, 0x1c)
pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

4.764973802s ago: executing program 5 (id=1072):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setrlimit(0x2, &(0x7f00000000c0)={0x2, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x13}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0)

4.106218183s ago: executing program 0 (id=1073):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
close(r1)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
setns(0xc9, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xb066}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x1}]}, 0x2c}}, 0x0)
chroot(&(0x7f0000000080)='./file0\x00')
r3 = socket(0x8, 0x5, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8001, 0x2, 0x2, 0x1, 0x8b1, 0xfffe}, 0x20)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r3, 0x40106150, &(0x7f0000000000))

4.08580847s ago: executing program 4 (id=1074):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x2, '#('}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0xc0, 0x24, 0x25, {0x25, 0x11, "7817cecdd93b2df8adb3dbca5cb99ce38383eb071124fa582f3d3efffc1187fb87b696"}}, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000200)={0x40, 0x18, 0x4a, "ba4b85bcf94d2165bf3f1c1f42e80beff7a43659175f7c9dfcab7cfa73b87f889fe659db955d5439fbfb0a45b5eac7b840b1c270a1e0d28cb9a41dd301909efb85b0c15fd22953e81f7e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0xeb, {0xe9, "a53df3fc6f56c7bd752601a25a5fa766d3fa2882188a63fc786d6e68437c3ee40cd212d9e55fed3feb6286c92e0d679af647d21e45b48d7728a30a0f2bd15cf55e627fe5a6c0aa250347cbc64d0b54237b932243ee76567e32ffd5e689cb97b3781aa1c1581d21ecec424caca08158d5947463aefec0e3973aeebc413d0a25bdf1c79eefe5791e5bfc3a6fc5eedbe3877390c37162f95c215b7d0ba804539e4e2ea9113e75666920b52e21e6d8ccc25b663c05c8d09ca15a6e566c4f3879537cc2916721ec7b6687cbe1c5e5d5e0e1fa37c8170fb24eba5d84ef3bac2ba83cbd32deb0a24122d82cb5"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x6}})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x80102)
ioctl$HIDIOCAPPLICATION(r2, 0x4802, 0x2)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="1201ae03a5ad5c2c4d743ddc54f234fead5121fd0801000000bfcc0102030109021b000140008015"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

4.020166809s ago: executing program 5 (id=1075):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000dc0000010800010001"], 0x1c}}, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c050}, 0x0)
read(r1, &(0x7f0000000400), 0x1000)
read(r1, &(0x7f0000000400), 0x1000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400ca01e9cb3c0296ac05ff27387b00000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)

3.457288383s ago: executing program 2 (id=1076):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010000000000000000002400000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

3.349140417s ago: executing program 3 (id=1077):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00009800"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000})
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, 0x0)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000})
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

2.590069956s ago: executing program 2 (id=1078):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='1\n', 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close(r3)
write(0xffffffffffffffff, &(0x7f0000000240)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x2, 0xfffffff8})
write(r4, &(0x7f00000002c0)='1\n', 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)

2.216167203s ago: executing program 3 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x0)
listen(r5, 0x5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0feaffff97c0a51047401cc4e7475c03000000041a000012", @ANYRESDEC=r1], 0x48)
setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000002c0)=[{0x1, 0x0, {0x2, 0x1, 0x2}, {0x2, 0x0, 0x2}, 0xff, 0x1}, {0x2, 0x2, {0x0, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0x0, 0xfe}, {0x2, 0x2, {0x0, 0xe, 0x4}, {0x2, 0xf0}, 0x0, 0x2}, {0x2, 0x0, {0x1, 0xff, 0x1}, {0x1, 0xf0}, 0xfd, 0xff}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x1, 0x1, 0x4}, 0x2, 0xfe}], 0xa0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2100000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32=r3, @ANYBLOB="d6514dc5fbab0728"], 0x5c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.561808486s ago: executing program 2 (id=1080):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00', @ANYBLOB="05000100", @ANYBLOB], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair(0x21, 0x2, 0x45, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$unix(0x1, 0x2, 0x0)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)

1.532806054s ago: executing program 0 (id=1081):
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x1b, 0x4, 0x3, 0x12, 0x2, 0xc, 0x20, 0x1, 0x18, 0x1, 0x3, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x6, 0x9, 0xb, 0x36, 0x30, 0xc, 0x6, 0x6, 0x16, 0x2, 0x24, 0x30, 0x16, 0x1, 0x9, 0xf]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x511a, 0x7, 0x6, 0xa3c, 0x4, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8296, 0xfce2, 0x1, 0x7, 0xc, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xfffe, 0x9, 0x8001, 0x4, 0x101, 0xc9]}}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004050)
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x100}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x400, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x3, 0xb55, 0x100104, 0x0}}, &(0x7f0000001fc0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0x6, <r10=>0x0, 0x1})
ioctl$DRM_IOCTL_SG_ALLOC(r9, 0xc0106438, &(0x7f00000001c0)={0x0, r10})
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

1.321878029s ago: executing program 2 (id=1082):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x4b45, 0x3) (fail_nth: 2)

1.307205241s ago: executing program 5 (id=1083):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
openat(0xffffffffffffffff, 0x0, 0x10800, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x242302)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getitimer(0x1, &(0x7f0000000040))
r2 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='1\x00', 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000006400)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='00:02\x00', 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
write(r0, &(0x7f0000000100)="52000000230001010002060000000000000000000000000000000000000000003f0000000000000000", 0x29)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)

1.102862068s ago: executing program 2 (id=1084):
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1.101736866s ago: executing program 0 (id=1085):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xd2a6, 0xffff5f11, 0xfffd, 0x200000000006b78, 0x6, 0x1, 0x1fe, 0x4a, 0x2c, 0x7})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (fail_nth: 2)

1.061902712s ago: executing program 3 (id=1086):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
gettid()
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

832.064113ms ago: executing program 2 (id=1087):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c000000220081239700004ab1b3a91c780000743788736302e00f80", 0x1c}], 0x10000000000002b7, 0x0, 0x0, 0x10}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{0x0}], 0x1}, 0x4}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "d4ad3902d27f7731a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3}, 0x94)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000006240)=0x1, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000062c0), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000))
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)

767.72853ms ago: executing program 5 (id=1088):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000002400000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

48.586857ms ago: executing program 0 (id=1089):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00009800"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xffffffffffffffff, 0xee01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000})
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, 0x0)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000})
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

0s ago: executing program 4 (id=1090):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt={'euid<', r3}}, {@uid_lt={'uid<', r3}}, {@euid_lt={'euid<', r4}}, {@uid_lt={'uid<', r4}}]}})
syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x723001e9, 0x0, 0x0, 0x4, 0x1801, 0x0, 0x0, 0x100, 0x2020009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0xffff, 0x2, 0x0, 0x10000, 0x0, 0x400}, 0x0, &(0x7f00000002c0)={0x1f, 0x3, 0x21, 0x0, 0x1000000002, 0x4, 0x0, 0x10000000003}, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000bc0)={0x2020}, 0x2020)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000000000000290000003200000073010000000000000b078097e739b7a798000000890a0000"], 0x28}, 0x40)
sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x107080, 0x0)

kernel console output (not intermixed with test programs):

2 has an invalid length.
[  417.930694][ T8878] netlink: 220 bytes leftover after parsing attributes in process `syz.4.861'.
[  417.992595][   T25] usb 2-1: Using ep0 maxpacket: 16
[  417.994203][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  417.998173][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.998213][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  417.998238][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  417.998258][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  417.998280][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  417.999143][   T25] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  417.999164][   T25] usb 2-1: Manufacturer: syz
[  418.017587][   T25] usb 2-1: config 0 descriptor??
[  418.568010][ T8886] fuse: Bad value for 'fd'
[  418.803052][ T5713] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  419.029852][ T5713] usb 5-1: Using ep0 maxpacket: 32
[  419.060384][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short
[  419.060409][ T5713] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  419.093885][ T5713] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  419.093911][ T5713] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  419.093929][ T5713] usb 5-1: config 14 has no interface number 0
[  419.093945][ T5713] usb 5-1: config 14 has no interface number 1
[  419.093992][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  419.094013][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  419.094034][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  419.094056][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  419.094077][ T5713] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  419.094105][ T5713] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  419.094128][ T5713] usb 5-1: config 14 interface 57 has no altsetting 0
[  419.094144][ T5713] usb 5-1: config 14 interface 228 has no altsetting 0
[  419.178652][ T8893] netlink: 'syz.2.866': attribute type 1 has an invalid length.
[  419.219500][ T8893] 8021q: adding VLAN 0 to HW filter on device bond1
[  419.237333][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.237358][ T5713] usb 5-1: Product: syz
[  419.237372][ T5713] usb 5-1: Manufacturer: syz
[  419.237386][ T5713] usb 5-1: SerialNumber: syz
[  419.312693][   T25] rc_core: IR keymap rc-hauppauge not found
[  419.312710][   T25] Registered IR keymap rc-empty
[  419.312832][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.347171][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.363562][   T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  419.365538][   T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input84
[  419.369891][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.381187][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.384610][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.397934][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.420161][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.434922][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.452398][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[  419.462627][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.475372][ T8902] erspan0: entered promiscuous mode
[  419.478929][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  419.496840][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.512870][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.542761][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.542928][ T5705] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  419.572872][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  419.590487][ T8909] jffs2: notice: (8909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  420.105446][ T8914] FAULT_INJECTION: forcing a failure.
[  420.105446][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  420.105476][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.0.871 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.105502][ T8914] Tainted: [L]=SOFTLOCKUP
[  420.105508][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  420.105519][ T8914] Call Trace:
[  420.105525][ T8914]  <TASK>
[  420.105532][ T8914]  dump_stack_lvl+0x100/0x190
[  420.105563][ T8914]  should_fail_ex.cold+0x5/0xa
[  420.105593][ T8914]  _copy_to_user+0x32/0xd0
[  420.105617][ T8914]  simple_read_from_buffer+0xcb/0x170
[  420.105645][ T8914]  proc_fail_nth_read+0x1af/0x230
[  420.105671][ T8914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  420.105697][ T8914]  ? rw_verify_area+0xce/0x6d0
[  420.105715][ T8914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  420.105738][ T8914]  vfs_read+0x1e4/0xb40
[  420.105759][ T8914]  ? lock_acquire+0x1d1/0x380
[  420.105779][ T8914]  ? __fget_files+0x34/0x3d0
[  420.105802][ T8914]  ? __pfx_vfs_read+0x10/0x10
[  420.105820][ T8914]  ? find_held_lock+0x2b/0x80
[  420.105847][ T8914]  ? __fget_files+0x215/0x3d0
[  420.105875][ T8914]  ? __fget_files+0x21f/0x3d0
[  420.105906][ T8914]  ksys_read+0x12a/0x250
[  420.105926][ T8914]  ? __pfx_ksys_read+0x10/0x10
[  420.105954][ T8914]  do_syscall_64+0x123/0x790
[  420.105976][ T8914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.105994][ T8914] RIP: 0033:0x7f79c275e98e
[  420.106009][ T8914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  420.106026][ T8914] RSP: 002b:00007f79c363ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  420.106045][ T8914] RAX: ffffffffffffffda RBX: 00007f79c36406c0 RCX: 00007f79c275e98e
[  420.106057][ T8914] RDX: 000000000000000f RSI: 00007f79c36400a0 RDI: 0000000000000007
[  420.106067][ T8914] RBP: 00007f79c3640090 R08: 0000000000000000 R09: 0000000000000000
[  420.106077][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.106087][ T8914] R13: 00007f79c2a26128 R14: 00007f79c2a26090 R15: 00007ffed9903798
[  420.106113][ T8914]  </TASK>
[  420.592947][   T25] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  420.620538][   T25] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  420.620559][   T25] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  420.658546][   T25] usb 2-1: USB disconnect, device number 55
[  420.769802][ T5705] usb 4-1: Using ep0 maxpacket: 8
[  420.778288][ T5705] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  420.795390][   T31] audit: type=1400 audit(1790800100.615:339): avc:  denied  { create } for  pid=8916 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  420.803616][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.803655][ T5705] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  420.803678][ T5705] usb 4-1: config 0 interface 0 has no altsetting 0
[  420.807904][   T31] audit: type=1400 audit(1790800100.615:340): avc:  denied  { write } for  pid=8883 comm="syz.4.863" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  420.821062][ T8917] netlink: 'syz.2.873': attribute type 27 has an invalid length.
[  420.880223][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.880248][ T5705] usb 4-1: Product: syz
[  420.880262][ T5705] usb 4-1: Manufacturer: syz
[  420.880276][ T5705] usb 4-1: SerialNumber: syz
[  420.895667][   T31] audit: type=1400 audit(1790800100.715:341): avc:  denied  { mounton } for  pid=8916 comm="syz.2.873" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  420.911855][ T8917] bond0: (slave bond_slave_1): Releasing backup interface
[  420.976623][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.976965][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.014347][ T5705] usb 4-1: config 0 descriptor??
[  421.017724][ T5705] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  421.022639][   T25] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  421.103726][ T5713] legousbtower 5-1:14.57: interrupt endpoints not found
[  421.116423][ T5713] legousbtower 5-1:14.228: get version request failed: -71
[  421.116540][ T5713] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71
[  421.133744][ T5713] usb 5-1: USB disconnect, device number 45
[  421.178731][   T25] usb 2-1: unable to get BOS descriptor or descriptor too short
[  421.178772][   T25] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  421.179224][   T25] usb 2-1: config 0 has no interfaces?
[  421.530747][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.530775][   T25] usb 2-1: Product: syz
[  421.530789][   T25] usb 2-1: Manufacturer: syz
[  421.530803][   T25] usb 2-1: SerialNumber: syz
[  421.703305][   T31] audit: type=1400 audit(1790800101.455:342): avc:  denied  { watch watch_reads } for  pid=8891 comm="syz.3.864" path="/proc/555/fdinfo" dev="proc" ino=21394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  421.981429][   T25] usb 2-1: config 0 descriptor??
[  422.039544][ T5705] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  422.064371][ T5705] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  422.127772][ T5705] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  422.281547][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.281889][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.307090][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.307430][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.326590][ T5713] usb 2-1: USB disconnect, device number 56
[  422.398954][ T8930] fuse: Bad value for 'fd'
[  422.486880][   T31] audit: type=1400 audit(1790800102.305:343): avc:  denied  { ioctl } for  pid=8933 comm="syz.2.877" path="socket:[19319]" dev="sockfs" ino=19319 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  422.699515][   T25] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  422.752639][   T30] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  422.849046][ T8938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.878'.
[  422.851775][ T8938] netlink: 108 bytes leftover after parsing attributes in process `syz.2.878'.
[  422.854496][   T31] audit: type=1400 audit(1790800102.665:344): avc:  denied  { mount } for  pid=8935 comm="syz.2.878" name="/" dev="rpc_pipefs" ino=21423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  422.919164][ T5705] usb 4-1: USB disconnect, device number 55
[  423.135354][   T25] usb 5-1: device descriptor read/64, error -71
[  423.135455][ T5713] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  423.181891][   T31] audit: type=1400 audit(1790800102.995:345): avc:  denied  { read write } for  pid=8940 comm="syz.3.879" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  423.182079][   T31] audit: type=1400 audit(1790800102.995:346): avc:  denied  { open } for  pid=8940 comm="syz.3.879" path="/dev/video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  423.231606][   T31] audit: type=1400 audit(1790800103.005:347): avc:  denied  { ioctl } for  pid=8940 comm="syz.3.879" path="/dev/video36" dev="devtmpfs" ino=1043 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  423.235835][   T30] usb 1-1: Using ep0 maxpacket: 16
[  423.236710][   T30] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  423.237154][   T30] usb 1-1: config 0 has no interfaces?
[  423.237975][   T30] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  423.237992][   T30] usb 1-1: Manufacturer: syz
[  423.259856][   T30] usb 1-1: config 0 descriptor??
[  423.293049][ T5713] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  423.296839][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  423.296863][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  423.296883][ T5713] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  423.296901][ T5713] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  423.296928][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.311716][ T5713] hub 2-1:1.0: bad descriptor, ignoring hub
[  423.311736][ T5713] hub 2-1:1.0: probe with driver hub failed with error -5
[  423.312297][ T5713] mos7720 2-1:1.0: required endpoints missing
[  423.402647][   T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  423.494441][   T31] audit: type=1400 audit(1790800103.305:348): avc:  denied  { unmount } for  pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  423.519598][ T5713] usb 1-1: USB disconnect, device number 59
[  423.556067][   T25] usb 5-1: device descriptor read/64, error -71
[  423.636197][   T30] usb 2-1: USB disconnect, device number 57
[  423.664611][   T25] usb usb5-port1: attempt power cycle
[  424.002611][   T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  424.023773][   T25] usb 5-1: device descriptor read/8, error -71
[  424.357863][   T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  424.403257][   T25] usb 5-1: device descriptor read/8, error -71
[  424.449707][   T31] audit: type=1400 audit(1790800104.265:349): avc:  denied  { mount } for  pid=8959 comm="syz.0.881" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  424.523173][   T25] usb usb5-port1: unable to enumerate USB device
[  425.006692][   T31] audit: type=1400 audit(1790800104.825:350): avc:  denied  { unmount } for  pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  425.313209][ T5784] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  425.472613][ T5784] usb 4-1: Using ep0 maxpacket: 8
[  425.472706][ T8983] fuse: Bad value for 'fd'
[  425.473125][ T5784] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  425.474828][ T5784] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  425.474867][ T5784] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.474892][ T5784] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  425.474917][ T5784] usb 4-1: config 0 interface 0 has no altsetting 0
[  425.474944][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.481473][ T5784] usb 4-1: config 0 descriptor??
[  426.022751][ T5726] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  426.023660][ T5705] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  426.177830][ T5784] hid-alps 0003:044E:120C.001F: unknown main item tag 0x0
[  426.177946][ T5784] hid-alps 0003:044E:120C.001F: unbalanced collection at end of report description
[  426.183975][ T5784] hid-alps 0003:044E:120C.001F: parse failed
[  426.184044][ T5784] hid-alps 0003:044E:120C.001F: probe with driver hid-alps failed with error -22
[  426.323535][ T5726] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47
[  426.330168][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.382603][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  426.383229][ T5705] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  426.384140][ T5705] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.384166][ T5705] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  426.384190][ T5705] usb 1-1: config 0 interface 0 has no altsetting 0
[  426.384217][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.509670][ T5726] usb 3-1: config 0 descriptor??
[  426.510671][ T5705] usb 1-1: config 0 descriptor??
[  426.515258][ T5726] gspca_main: STV06xx-2.14.0 probing 046d:0850
[  426.519435][ T5784] usb 4-1: USB disconnect, device number 56
[  426.935747][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8993 comm=syz.4.891
[  426.939251][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'.
[  426.946421][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.891'.
[  427.238498][ T5705] usbhid 1-1:0.0: can't add hid device: -71
[  427.238649][ T5705] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  427.241254][ T5705] usb 1-1: USB disconnect, device number 60
[  427.318089][   T31] audit: type=1400 audit(1790800107.135:351): avc:  denied  { read } for  pid=8999 comm="syz.1.893" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  427.318312][   T31] audit: type=1400 audit(1790800107.135:352): avc:  denied  { open } for  pid=8999 comm="syz.1.893" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  427.543129][    T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  427.571595][   T31] audit: type=1400 audit(1790800107.385:353): avc:  denied  { mount } for  pid=8977 comm="syz.2.887" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  427.609509][ T9002] FAULT_INJECTION: forcing a failure.
[  427.609509][ T9002] name failslab, interval 1, probability 0, space 0, times 0
[  427.609539][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.4.894 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  427.609563][ T9002] Tainted: [L]=SOFTLOCKUP
[  427.609568][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  427.609579][ T9002] Call Trace:
[  427.609585][ T9002]  <TASK>
[  427.609593][ T9002]  dump_stack_lvl+0x100/0x190
[  427.609623][ T9002]  should_fail_ex.cold+0x5/0xa
[  427.609648][ T9002]  should_failslab+0xc2/0x120
[  427.609673][ T9002]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  427.609696][ T9002]  ? __alloc_skb+0x5b7/0x710
[  427.609720][ T9002]  ? __alloc_skb+0x140/0x710
[  427.609746][ T9002]  __alloc_skb+0x140/0x710
[  427.609766][ T9002]  ? __alloc_skb+0x5b7/0x710
[  427.609789][ T9002]  ? __pfx___alloc_skb+0x10/0x10
[  427.609819][ T9002]  netlink_alloc_large_skb+0x69/0x150
[  427.609845][ T9002]  netlink_sendmsg+0x680/0xda0
[  427.609872][ T9002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.609896][ T9002]  ? selinux_socket_sendmsg+0x198/0x2f0
[  427.609921][ T9002]  ____sys_sendmsg+0xa4d/0xbe0
[  427.609939][ T9002]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.609963][ T9002]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.609988][ T9002]  ? lock_acquire+0x1d1/0x380
[  427.610009][ T9002]  ? get_pid_task+0x2a/0x250
[  427.610034][ T9002]  ___sys_sendmsg+0x190/0x1e0
[  427.610056][ T9002]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.610076][ T9002]  ? get_pid_task+0x106/0x250
[  427.610109][ T9002]  ? find_held_lock+0x2b/0x80
[  427.610152][ T9002]  __sys_sendmsg+0x160/0x210
[  427.610177][ T9002]  ? __pfx___sys_sendmsg+0x10/0x10
[  427.610215][ T9002]  do_syscall_64+0x123/0x790
[  427.610237][ T9002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.610256][ T9002] RIP: 0033:0x7fcc5f99e159
[  427.610272][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.610290][ T9002] RSP: 002b:00007fcc6079e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.610308][ T9002] RAX: ffffffffffffffda RBX: 00007fcc5fc25fa0 RCX: 00007fcc5f99e159
[  427.610321][ T9002] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  427.610331][ T9002] RBP: 00007fcc6079e090 R08: 0000000000000000 R09: 0000000000000000
[  427.610341][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.610352][ T9002] R13: 00007fcc5fc26038 R14: 00007fcc5fc25fa0 R15: 00007ffe4b8d15c8
[  427.610376][ T9002]  </TASK>
[  427.792699][    T9] usb 4-1: Using ep0 maxpacket: 16
[  427.831711][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  428.369923][    T9] usb 4-1: config 0 has no interfaces?
[  428.500933][ T5726] usb 3-1: USB disconnect, device number 59
[  428.570708][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  428.570765][    T9] usb 4-1: Manufacturer: syz
[  428.663592][    T9] usb 4-1: config 0 descriptor??
[  428.955466][    T9] usb 4-1: USB disconnect, device number 57
[  429.005258][   T30] kernel write not supported for file /uinput (pid: 30 comm: kworker/1:1)
[  429.010259][   T31] audit: type=1400 audit(1790800108.825:354): avc:  denied  { write } for  pid=9015 comm="syz.0.898" name="usb_gadget" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  429.024145][   T31] audit: type=1400 audit(1790800108.825:355): avc:  denied  { write } for  pid=9015 comm="syz.0.898" name="strings" dev="configfs" ino=21534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  429.024190][   T31] audit: type=1400 audit(1790800108.825:356): avc:  denied  { write } for  pid=9015 comm="syz.0.898" name="configs" dev="configfs" ino=21533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  429.024227][   T31] audit: type=1400 audit(1790800108.835:357): avc:  denied  { write } for  pid=9015 comm="syz.0.898" name="strings" dev="configfs" ino=21539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  429.024263][   T31] audit: type=1400 audit(1790800108.835:358): avc:  denied  { write } for  pid=9015 comm="syz.0.898" name="functions" dev="configfs" ino=21532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  429.024297][   T31] audit: type=1400 audit(1790800108.835:359): avc:  denied  { read } for  pid=9015 comm="syz.0.898" name="no_out_endpoint" dev="configfs" ino=21542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  429.102642][   T31] audit: type=1400 audit(1790800108.895:360): avc:  denied  { unmount } for  pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  429.486097][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  429.955655][ T9032] xt_hashlimit: max too large, truncated to 1048576
[  429.955709][ T9032] xt_hashlimit: overflow, try lower: 0/0
[  429.956914][ T9032] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  430.802631][    T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  430.882407][   T31] audit: type=1800 audit(1790800110.695:361): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.897" name="file1" dev="tmpfs" ino=1024 res=0 errno=0
[  430.966060][    T9] usb 2-1: Using ep0 maxpacket: 8
[  430.970940][    T9] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  430.978337][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  430.978457][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.978489][    T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  430.978519][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  430.978620][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.113778][    T9] usb 2-1: config 0 descriptor??
[  431.740806][    T9] hid-alps 0003:044E:120C.0020: unknown main item tag 0x0
[  431.743454][    T9] hid-alps 0003:044E:120C.0020: unbalanced collection at end of report description
[  431.787405][    T9] hid-alps 0003:044E:120C.0020: parse failed
[  431.789711][    T9] hid-alps 0003:044E:120C.0020: probe with driver hid-alps failed with error -22
[  431.910614][    T9] usb 2-1: USB disconnect, device number 58
[  433.695445][ T5615] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  433.858688][ T5784] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  433.928669][ T9053] FAULT_INJECTION: forcing a failure.
[  433.928669][ T9053] name failslab, interval 1, probability 0, space 0, times 0
[  433.928700][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.2.906 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.928725][ T9053] Tainted: [L]=SOFTLOCKUP
[  433.928732][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  433.928743][ T9053] Call Trace:
[  433.928749][ T9053]  <TASK>
[  433.928756][ T9053]  dump_stack_lvl+0x100/0x190
[  433.928789][ T9053]  should_fail_ex.cold+0x5/0xa
[  433.928815][ T9053]  should_failslab+0xc2/0x120
[  433.928842][ T9053]  __kmalloc_noprof+0xfc/0x840
[  433.928864][ T9053]  ? __pfx_dynamic_dname+0x10/0x10
[  433.928885][ T9053]  ? tomoyo_encode2+0xfb/0x3c0
[  433.928914][ T9053]  tomoyo_encode2+0xfb/0x3c0
[  433.928943][ T9053]  tomoyo_encode+0x29/0x50
[  433.928965][ T9053]  tomoyo_realpath_from_path+0x18c/0x690
[  433.928996][ T9053]  tomoyo_path_number_perm+0x23c/0x580
[  433.929016][ T9053]  ? tomoyo_path_number_perm+0x22e/0x580
[  433.929039][ T9053]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  433.929071][ T9053]  ? __lock_acquire+0x5c0/0x1f40
[  433.929105][ T9053]  ? __fget_files+0x34/0x3d0
[  433.929131][ T9053]  ? find_held_lock+0x2b/0x80
[  433.929156][ T9053]  ? hook_file_ioctl_common+0x140/0x440
[  433.929189][ T9053]  ? __fget_files+0x21f/0x3d0
[  433.929218][ T9053]  security_file_ioctl+0xd3/0x230
[  433.929242][ T9053]  __x64_sys_ioctl+0xb7/0x210
[  433.929265][ T9053]  do_syscall_64+0x123/0x790
[  433.929288][ T9053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.929307][ T9053] RIP: 0033:0x7f4d1479e159
[  433.929322][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.929339][ T9053] RSP: 002b:00007f4d1557e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  433.929360][ T9053] RAX: ffffffffffffffda RBX: 00007f4d14a26090 RCX: 00007f4d1479e159
[  433.929373][ T9053] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  433.929383][ T9053] RBP: 00007f4d1557e090 R08: 0000000000000000 R09: 0000000000000000
[  433.929394][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.929405][ T9053] R13: 00007f4d14a26128 R14: 00007f4d14a26090 R15: 00007ffdcf045ea8
[  433.929430][ T9053]  </TASK>
[  433.929505][ T9053] ERROR: Out of memory at tomoyo_realpath_from_path.
[  434.013841][ T5784] usb 1-1: device descriptor read/64, error -71
[  434.298720][ T5784] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  434.449202][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  434.451105][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  434.522667][ T5784] usb 1-1: device descriptor read/64, error -71
[  434.642660][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  434.654271][ T5784] usb usb1-port1: attempt power cycle
[  434.797978][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  434.825159][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.825433][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  434.826095][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.925540][    T9] usb 3-1: config 0 descriptor??
[  434.999959][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  435.313008][ T5784] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  435.343092][ T5784] usb 1-1: device descriptor read/8, error -71
[  435.356980][ T9066] syzkaller0: entered promiscuous mode
[  435.357021][ T9066] syzkaller0: entered allmulticast mode
[  435.602728][ T5784] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  435.616074][   T31] audit: type=1400 audit(1790800115.435:362): avc:  denied  { append } for  pid=9058 comm="syz.2.910" name="event3" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  435.624452][ T5784] usb 1-1: device descriptor read/8, error -71
[  435.648830][ T9075] FAULT_INJECTION: forcing a failure.
[  435.648830][ T9075] name failslab, interval 1, probability 0, space 0, times 0
[  435.648924][ T9075] CPU: 1 UID: 0 PID: 9075 Comm: syz.2.910 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  435.648952][ T9075] Tainted: [L]=SOFTLOCKUP
[  435.648959][ T9075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  435.648970][ T9075] Call Trace:
[  435.648977][ T9075]  <TASK>
[  435.648986][ T9075]  dump_stack_lvl+0x100/0x190
[  435.649019][ T9075]  should_fail_ex.cold+0x5/0xa
[  435.649047][ T9075]  should_failslab+0xc2/0x120
[  435.649075][ T9075]  __kmalloc_cache_noprof+0x91/0x6d0
[  435.649097][ T9075]  ? tcp_sendmsg_fastopen+0x24d/0x750
[  435.649125][ T9075]  tcp_sendmsg_fastopen+0x24d/0x750
[  435.649157][ T9075]  tcp_sendmsg_locked+0x27da/0x4420
[  435.649187][ T9075]  ? __lock_acquire+0x5c0/0x1f40
[  435.649217][ T9075]  ? reacquire_held_locks+0xdd/0x1f0
[  435.649240][ T9075]  ? release_sock+0x21/0x280
[  435.649268][ T9075]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  435.649291][ T9075]  ? lock_acquire+0x1d1/0x380
[  435.649313][ T9075]  ? do_raw_spin_lock+0x128/0x260
[  435.649347][ T9075]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  435.649380][ T9075]  ? __local_bh_enable_ip+0xa5/0x120
[  435.649407][ T9075]  tcp_sendmsg+0x2e/0x50
[  435.649428][ T9075]  ? __pfx_tcp_sendmsg+0x10/0x10
[  435.649451][ T9075]  inet_sendmsg+0xb9/0x140
[  435.649476][ T9075]  __sys_sendto+0x453/0x4e0
[  435.649500][ T9075]  ? __pfx_inet_sendmsg+0x10/0x10
[  435.649522][ T9075]  ? __pfx___sys_sendto+0x10/0x10
[  435.649566][ T9075]  ? xfd_validate_state+0x129/0x190
[  435.649594][ T9075]  __x64_sys_sendto+0xe0/0x1c0
[  435.649618][ T9075]  ? do_syscall_64+0xae/0x790
[  435.649638][ T9075]  ? lockdep_hardirqs_on+0x7d/0x110
[  435.649657][ T9075]  do_syscall_64+0x123/0x790
[  435.649679][ T9075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.649700][ T9075] RIP: 0033:0x7f4d1479e159
[  435.649717][ T9075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.649736][ T9075] RSP: 002b:00007f4d1557e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  435.649756][ T9075] RAX: ffffffffffffffda RBX: 00007f4d14a26090 RCX: 00007f4d1479e159
[  435.649769][ T9075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  435.649780][ T9075] RBP: 00007f4d1483506b R08: 0000200000e68000 R09: 0000000000000010
[  435.649792][ T9075] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000
[  435.649803][ T9075] R13: 00007f4d14a26128 R14: 00007f4d14a26090 R15: 00007ffdcf045ea8
[  435.649829][ T9075]  </TASK>
[  435.756340][ T5784] usb usb1-port1: unable to enumerate USB device
[  436.333195][   T30] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  436.447778][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  436.485027][   T30] usb 5-1: Using ep0 maxpacket: 8
[  436.486918][   T30] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  436.487811][   T30] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  436.487847][   T30] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.487872][   T30] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  436.487897][   T30] usb 5-1: config 0 interface 0 has no altsetting 0
[  436.487923][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.558809][   T30] usb 5-1: config 0 descriptor??
[  436.627872][   T31] audit: type=1400 audit(1790800116.445:363): avc:  denied  { name_bind } for  pid=9086 comm="syz.1.918" src=17185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  436.630368][   T31] audit: type=1400 audit(1790800116.445:364): avc:  denied  { bind } for  pid=9086 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  436.652668][   T31] audit: type=1400 audit(1790800116.455:365): avc:  denied  { connect } for  pid=9086 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  436.652704][   T31] audit: type=1400 audit(1790800116.455:366): avc:  denied  { read } for  pid=9086 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  437.389762][   T30] hid-alps 0003:044E:120C.0021: unknown main item tag 0x0
[  437.389796][   T30] hid-alps 0003:044E:120C.0021: unbalanced collection at end of report description
[  437.390321][   T30] hid-alps 0003:044E:120C.0021: parse failed
[  437.390394][   T30] hid-alps 0003:044E:120C.0021: probe with driver hid-alps failed with error -22
[  437.756794][   T30] usb 5-1: USB disconnect, device number 50
[  437.761612][    T9] usb 3-1: USB disconnect, device number 60
[  437.905357][ T9106] IPv6: Can't replace route, no match found
[  437.926854][   T31] audit: type=1400 audit(1790800117.745:367): avc:  denied  { create } for  pid=9107 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  437.984032][   T31] audit: type=1400 audit(1790800117.805:368): avc:  denied  { create } for  pid=9112 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  437.989428][   T31] audit: type=1400 audit(1790800117.805:369): avc:  denied  { connect } for  pid=9112 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  437.998608][   T31] audit: type=1400 audit(1790800117.815:370): avc:  denied  { write } for  pid=9107 comm="syz.2.923" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  438.346472][   T30] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  438.484735][ T9123] FAULT_INJECTION: forcing a failure.
[  438.484735][ T9123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.484849][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.2.930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.484876][ T9123] Tainted: [L]=SOFTLOCKUP
[  438.484882][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  438.484893][ T9123] Call Trace:
[  438.484899][ T9123]  <TASK>
[  438.484907][ T9123]  dump_stack_lvl+0x100/0x190
[  438.484938][ T9123]  should_fail_ex.cold+0x5/0xa
[  438.484965][ T9123]  _copy_from_user+0x2e/0xd0
[  438.484989][ T9123]  io_uring_setup+0xc0/0x160
[  438.485014][ T9123]  ? lock_acquire+0x1d1/0x380
[  438.485035][ T9123]  ? avc_has_perm_noaudit+0x56/0x470
[  438.485064][ T9123]  ? __pfx_io_uring_setup+0x10/0x10
[  438.485086][ T9123]  ? find_held_lock+0x2b/0x80
[  438.485112][ T9123]  ? avc_has_perm_noaudit+0x11e/0x470
[  438.485141][ T9123]  ? avc_has_perm_noaudit+0x11e/0x470
[  438.485184][ T9123]  ? xfd_validate_state+0x129/0x190
[  438.485212][ T9123]  __x64_sys_io_uring_setup+0xc2/0x170
[  438.485238][ T9123]  do_syscall_64+0x123/0x790
[  438.485260][ T9123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.485278][ T9123] RIP: 0033:0x7f4d1479e159
[  438.485293][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.485310][ T9123] RSP: 002b:00007f4d1557dee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  438.485329][ T9123] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4d1479e159
[  438.485340][ T9123] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  438.485351][ T9123] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  438.485362][ T9123] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  438.485373][ T9123] R13: 0000200000000b10 R14: 00007f4d1557dfd8 R15: 0000000000000000
[  438.485397][ T9123]  </TASK>
[  438.548741][   T30] usb 4-1: Using ep0 maxpacket: 8
[  438.550656][   T30] usb 4-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00
[  438.553582][   T30] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  438.553672][   T30] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  438.553741][   T30] usb 4-1: config 0 interface 0 has no altsetting 0
[  438.553826][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.683502][ T5784] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  438.875968][   T30] usb 4-1: config 0 descriptor??
[  438.934759][ T5784] usb 5-1: unable to get BOS descriptor or descriptor too short
[  438.934872][ T5784] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice= 0.40
[  438.973412][ T6870] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  438.999839][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.999895][ T5784] usb 5-1: Product: syz
[  438.999929][ T5784] usb 5-1: Manufacturer: syz
[  438.999983][ T5784] usb 5-1: SerialNumber: syz
[  439.142756][ T6870] usb 1-1: Using ep0 maxpacket: 8
[  439.146377][ T6870] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  439.149819][ T6870] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  439.149919][ T6870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.452287][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.4.928'.
[  439.475146][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.928'.
[  439.542134][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.554267][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.598904][   T30] input: HID 0518:0002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0518:0002.0022/input/input85
[  439.664452][ T5784] usb 5-1: USB disconnect, device number 51
[  439.669541][ T9129] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2
[  439.692026][   T30] ezkey 0003:0518:0002.0022: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.3-1/input0
[  440.440044][   T31] audit: type=1400 audit(1790800120.255:371): avc:  denied  { ioctl } for  pid=9112 comm="syz.3.927" path="socket:[21845]" dev="sockfs" ino=21845 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  440.487761][ T8315] tipc: Subscription rejected, illegal request
[  440.872262][ T5784] usb 4-1: USB disconnect, device number 58
[  441.382601][   T30] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  441.672589][   T30] usb 3-1: Using ep0 maxpacket: 8
[  441.680755][   T30] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  441.733211][   T30] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  441.733252][   T30] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.733277][   T30] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  441.733301][   T30] usb 3-1: config 0 interface 0 has no altsetting 0
[  441.733328][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.794794][    T9] usb 1-1: USB disconnect, device number 65
[  442.050323][   T30] usb 3-1: config 0 descriptor??
[  442.267399][ T9151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.274047][ T9151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.296388][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'.
[  442.462348][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'.
[  442.675392][   T30] hid-alps 0003:044E:120C.0023: unknown main item tag 0x0
[  442.675420][   T30] hid-alps 0003:044E:120C.0023: unbalanced collection at end of report description
[  442.717074][   T30] hid-alps 0003:044E:120C.0023: parse failed
[  442.720515][   T30] hid-alps 0003:044E:120C.0023: probe with driver hid-alps failed with error -22
[  442.845028][   T30] usb 3-1: USB disconnect, device number 61
[  443.056729][    T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  443.438447][    T9] usb 4-1: Using ep0 maxpacket: 16
[  443.454029][    T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  443.456981][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  443.457022][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.460231][    T9] usb 4-1: config 0 descriptor??
[  443.508706][    T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input86
[  443.771730][   T30] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  443.942755][   T30] usb 5-1: Using ep0 maxpacket: 16
[  443.948222][   T30] usb 5-1: device descriptor read/all, error -61
[  444.055204][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.084103][   T30] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  444.090989][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.182603][   T31] kauditd_printk_skb: 1 callbacks suppressed
[  444.182620][   T31] audit: type=1400 audit(1790800123.985:373): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="functions" dev="configfs" ino=21532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.227785][   T30] usb 5-1: device descriptor read/64, error -71
[  444.263179][   T31] audit: type=1400 audit(1790800124.075:374): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="header" dev="configfs" ino=22086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.297000][   T31] audit: type=1400 audit(1790800124.115:375): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="uncompressed" dev="configfs" ino=22087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.337438][   T31] audit: type=1400 audit(1790800124.155:376): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="u" dev="configfs" ino=22100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.341635][   T31] audit: type=1400 audit(1790800124.155:377): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="h" dev="configfs" ino=22099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.394678][   T30] usb usb5-port1: attempt power cycle
[  444.398273][   T31] audit: type=1400 audit(1790800124.215:378): avc:  denied  { create } for  pid=9163 comm="syz.3.943" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  444.400015][   T31] audit: type=1400 audit(1790800124.215:379): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="h" dev="configfs" ino=22099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.466714][   T31] audit: type=1400 audit(1790800124.215:380): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="fs" dev="configfs" ino=22093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.468817][   T31] audit: type=1400 audit(1790800124.285:381): avc:  denied  { write } for  pid=9163 comm="syz.3.943" name="fs" dev="configfs" ino=22093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  444.471991][ T5713] usb 4-1: USB disconnect, device number 59
[  444.524476][ T5784] usb 1-1: new low-speed USB device number 66 using dummy_hcd
[  444.604691][ T6870] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  444.688972][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short
[  444.689015][ T5784] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=69.74
[  444.690599][ T5784] usb 1-1: config 2 has an invalid interface number: 124 but max is 0
[  444.690621][ T5784] usb 1-1: config 2 has no interface number 0
[  444.726626][ T5784] usb 1-1: string descriptor 0 read error: -22
[  444.726731][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.749350][ T5784] cypress_cy7c63 1-1:2.124: Cypress CY7C63xxx device now attached
[  444.758582][   T30] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  444.782658][ T6870] usb 3-1: Using ep0 maxpacket: 8
[  444.784645][ T6870] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  444.784779][   T30] usb 5-1: device descriptor read/8, error -71
[  444.785560][ T6870] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  444.785598][ T6870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.041475][   T30] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  445.069392][   T30] usb 5-1: device descriptor read/8, error -71
[  445.173504][   T30] usb usb5-port1: unable to enumerate USB device
[  446.000325][   T31] audit: type=1400 audit(1790800125.815:382): avc:  denied  { name_bind } for  pid=9206 comm="syz.3.953" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  446.163334][ T5713] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  446.324519][ T5713] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  446.325509][ T5713] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  446.325533][ T5713] usb 2-1: config 0 has no interface number 0
[  446.325567][ T5713] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  446.327728][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.327751][ T5713] usb 2-1: Product: syz
[  446.327764][ T5713] usb 2-1: Manufacturer: syz
[  446.327778][ T5713] usb 2-1: SerialNumber: syz
[  446.330359][ T5713] usb 2-1: config 0 descriptor??
[  446.404658][ T5713] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  446.544695][ T9204] FAULT_INJECTION: forcing a failure.
[  446.544695][ T9204] name failslab, interval 1, probability 0, space 0, times 0
[  446.544727][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.1.952 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  446.544752][ T9204] Tainted: [L]=SOFTLOCKUP
[  446.544758][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  446.544768][ T9204] Call Trace:
[  446.544774][ T9204]  <TASK>
[  446.544782][ T9204]  dump_stack_lvl+0x100/0x190
[  446.544812][ T9204]  should_fail_ex.cold+0x5/0xa
[  446.544839][ T9204]  should_failslab+0xc2/0x120
[  446.544865][ T9204]  __kmalloc_cache_noprof+0x91/0x6d0
[  446.544884][ T9204]  ? dummy_urb_enqueue+0xa3/0x880
[  446.544911][ T9204]  dummy_urb_enqueue+0xa3/0x880
[  446.544930][ T9204]  ? usb_hcd_map_urb_for_dma+0x28a/0x1190
[  446.544955][ T9204]  usb_hcd_submit_urb+0x268/0x2150
[  446.544977][ T9204]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  446.545006][ T9204]  usb_submit_urb+0x827/0x19b0
[  446.545032][ T9204]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  446.545064][ T9204]  yurex_write+0x413/0x910
[  446.545083][ T9204]  ? __pfx_yurex_write+0x10/0x10
[  446.545102][ T9204]  ? __pfx_autoremove_wake_function+0x10/0x10
[  446.545121][ T9204]  ? avc_policy_seqno+0x9/0x20
[  446.545145][ T9204]  ? selinux_file_permission+0x8f/0x6d0
[  446.545171][ T9204]  ? bpf_lsm_file_permission+0x9/0x10
[  446.545195][ T9204]  ? security_file_permission+0x76/0x210
[  446.545226][ T9204]  ? rw_verify_area+0xce/0x6d0
[  446.545247][ T9204]  vfs_write+0x2aa/0x1050
[  446.545267][ T9204]  ? __pfx_yurex_write+0x10/0x10
[  446.545283][ T9204]  ? lock_acquire+0x1d1/0x380
[  446.545303][ T9204]  ? __fget_files+0x34/0x3d0
[  446.545328][ T9204]  ? __pfx_vfs_write+0x10/0x10
[  446.545346][ T9204]  ? find_held_lock+0x2b/0x80
[  446.545372][ T9204]  ? __fget_files+0x215/0x3d0
[  446.545394][ T9204]  ? __fget_files+0x215/0x3d0
[  446.545423][ T9204]  ? __fget_files+0x21f/0x3d0
[  446.545454][ T9204]  ksys_write+0x12a/0x250
[  446.545474][ T9204]  ? __pfx_ksys_write+0x10/0x10
[  446.545502][ T9204]  do_syscall_64+0x123/0x790
[  446.545522][ T9204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.545540][ T9204] RIP: 0033:0x7f7e1bd9e159
[  446.545555][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.545571][ T9204] RSP: 002b:00007f7e1cc78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  446.545589][ T9204] RAX: ffffffffffffffda RBX: 00007f7e1c025fa0 RCX: 00007f7e1bd9e159
[  446.545602][ T9204] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000005
[  446.545612][ T9204] RBP: 00007f7e1cc78090 R08: 0000000000000000 R09: 0000000000000000
[  446.545623][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.545636][ T9204] R13: 00007f7e1c026038 R14: 00007f7e1c025fa0 R15: 00007ffd5cac0de8
[  446.545662][ T9204]  </TASK>
[  446.613977][ T9010] usb 2-1: USB disconnect, device number 59
[  446.738713][ T9204] yurex 2-1:0.50: yurex_write - failed to send bulk msg, error -12
[  446.746893][ T9010] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  446.972637][    T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  447.123054][    T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  447.123761][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.123817][    T9] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  447.125295][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.125308][    T9] usb 5-1: Product: syz
[  447.125316][    T9] usb 5-1: Manufacturer: syz
[  447.125324][    T9] usb 5-1: SerialNumber: syz
[  447.131161][    T9] usb 5-1: selecting invalid altsetting 1
[  447.131176][    T9] snd-usb-caiaq 5-1:1.0: can't set alt interface.
[  447.131187][    T9] usb 5-1: unable to init card! (ret=-5)
[  447.131412][    T9] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  447.229166][ T5713] usb 1-1: USB disconnect, device number 66
[  447.229854][ T5713] cypress_cy7c63 1-1:2.124: Cypress CY7C63xxx device now disconnected
[  447.296229][    T9] usb 3-1: USB disconnect, device number 62
[  448.604354][ T9279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  448.604382][ T9279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  448.605542][ T9279] vhci_hcd vhci_hcd.0: Device attached
[  448.721991][ T9279] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.963'.
[  448.753450][    T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  448.903263][    T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.01
[  448.904078][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.904101][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  448.904115][    T9] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  448.904130][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[  448.905544][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.905556][    T9] usb 3-1: Product: syz
[  448.905564][    T9] usb 3-1: Manufacturer: syz
[  448.905573][    T9] usb 3-1: SerialNumber: syz
[  448.908495][ T9274] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  448.927092][    T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  448.956847][ T5713] usb 33-1: new high-speed USB device number 6 using vhci_hcd
[  448.983119][ T5692] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  449.125989][    T9] usb 3-1: USB disconnect, device number 63
[  449.127628][ T8887] usb 3-1: Failed to submit usb control message: -71
[  449.127659][ T8887] usb 3-1: unable to send the bmi data to the device: -71
[  449.127674][ T8887] usb 3-1: unable to get target info from device
[  449.127688][ T8887] usb 3-1: could not get target info (-71)
[  449.127885][ T8887] usb 3-1: could not probe fw (-71)
[  449.133642][ T5692] usb 4-1: Using ep0 maxpacket: 32
[  449.135415][ T5692] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  449.136494][ T5692] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.136517][ T5692] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  449.136538][ T5692] usb 4-1: config 0 interface 0 has no altsetting 0
[  449.136562][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.180328][ T5692] usb 4-1: config 0 descriptor??
[  449.403744][ T9280] vhci_hcd: connection reset by peer
[  449.405386][ T6877] vhci_hcd vhci_hcd.0: stop threads
[  449.405810][ T6877] vhci_hcd vhci_hcd.0: release socket
[  449.406810][ T6877] vhci_hcd vhci_hcd.0: disconnect device
[  449.587728][    C0] raw-gadget.2 gadget.3: ignoring, device is not running
[  449.589776][ T5692] usbhid 4-1:0.0: can't add hid device: -71
[  449.589859][ T5692] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  449.593641][ T5692] usb 4-1: USB disconnect, device number 60
[  449.730803][   T31] kauditd_printk_skb: 213 callbacks suppressed
[  449.730819][   T31] audit: type=1400 audit(1790800129.545:596): avc:  denied  { getopt } for  pid=9290 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  449.762028][ T6870] usb 5-1: USB disconnect, device number 56
[  449.814330][   T31] audit: type=1400 audit(1790800129.635:597): avc:  denied  { name_connect } for  pid=9294 comm="syz.4.967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  449.838951][   T31] audit: type=1400 audit(1790800129.655:598): avc:  denied  { accept } for  pid=9294 comm="syz.4.967" lport=55697 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  449.839490][   T31] audit: type=1400 audit(1790800129.655:599): avc:  denied  { ioctl } for  pid=9294 comm="syz.4.967" path="socket:[22838]" dev="sockfs" ino=22838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  450.024727][   T31] audit: type=1400 audit(1790800129.825:600): avc:  denied  { ioctl } for  pid=9294 comm="syz.4.967" path="socket:[22839]" dev="sockfs" ino=22839 ioctlcmd=0x563b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  450.299530][   T31] audit: type=1400 audit(1790800130.115:601): avc:  denied  { read } for  pid=9300 comm="syz.1.968" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  450.301806][   T31] audit: type=1400 audit(1790800130.115:602): avc:  denied  { open } for  pid=9300 comm="syz.1.968" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  450.831317][ T9308] fuse: Unknown parameter '0x0000000000000003'
[  451.092922][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'.
[  451.096066][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.973'.
[  451.488013][   T30] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  451.611939][ T1430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.643481][   T30] usb 3-1: Using ep0 maxpacket: 8
[  451.644213][   T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  451.645208][   T30] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  451.645247][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.827525][ T1430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.967680][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  451.972218][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  451.983480][ T1430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.997387][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  451.999529][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  451.999991][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  452.050337][ T9329] FAULT_INJECTION: forcing a failure.
[  452.050337][ T9329] name failslab, interval 1, probability 0, space 0, times 0
[  452.050369][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.4.980 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.050393][ T9329] Tainted: [L]=SOFTLOCKUP
[  452.050400][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  452.050410][ T9329] Call Trace:
[  452.050417][ T9329]  <TASK>
[  452.050425][ T9329]  dump_stack_lvl+0x100/0x190
[  452.050456][ T9329]  should_fail_ex.cold+0x5/0xa
[  452.050482][ T9329]  should_failslab+0xc2/0x120
[  452.050508][ T9329]  kmem_cache_alloc_node_noprof+0x94/0x6e0
[  452.050530][ T9329]  ? __alloc_skb+0x5b7/0x710
[  452.050554][ T9329]  ? __alloc_skb+0x140/0x710
[  452.050582][ T9329]  __alloc_skb+0x140/0x710
[  452.050604][ T9329]  ? __alloc_skb+0x5b7/0x710
[  452.050626][ T9329]  ? __pfx___alloc_skb+0x10/0x10
[  452.050658][ T9329]  netlink_alloc_large_skb+0x69/0x150
[  452.050684][ T9329]  netlink_sendmsg+0x680/0xda0
[  452.050711][ T9329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.050738][ T9329]  ? selinux_socket_sendmsg+0x198/0x2f0
[  452.050765][ T9329]  ____sys_sendmsg+0xa4d/0xbe0
[  452.050782][ T9329]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.050807][ T9329]  ? __pfx_____sys_sendmsg+0x10/0x10
[  452.050832][ T9329]  ? lock_acquire+0x1d1/0x380
[  452.050853][ T9329]  ? get_pid_task+0x2a/0x250
[  452.050881][ T9329]  ___sys_sendmsg+0x190/0x1e0
[  452.050903][ T9329]  ? __pfx____sys_sendmsg+0x10/0x10
[  452.050923][ T9329]  ? get_pid_task+0x106/0x250
[  452.050957][ T9329]  ? find_held_lock+0x2b/0x80
[  452.050999][ T9329]  __sys_sendmsg+0x160/0x210
[  452.051025][ T9329]  ? __pfx___sys_sendmsg+0x10/0x10
[  452.051065][ T9329]  do_syscall_64+0x123/0x790
[  452.051086][ T9329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.051105][ T9329] RIP: 0033:0x7fcc5f99e159
[  452.051121][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.051137][ T9329] RSP: 002b:00007fcc6079e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.051156][ T9329] RAX: ffffffffffffffda RBX: 00007fcc5fc25fa0 RCX: 00007fcc5f99e159
[  452.051168][ T9329] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000004
[  452.051179][ T9329] RBP: 00007fcc6079e090 R08: 0000000000000000 R09: 0000000000000000
[  452.051190][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.051200][ T9329] R13: 00007fcc5fc26038 R14: 00007fcc5fc25fa0 R15: 00007ffe4b8d15c8
[  452.051225][ T9329]  </TASK>
[  452.092297][ T9333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.144477][ T9333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.152857][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'.
[  452.237285][ T1430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.303220][ T9330] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[  452.497508][   T31] audit: type=1400 audit(1790800132.315:603): avc:  denied  { mount } for  pid=9344 comm="syz.4.982" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  452.507544][   T31] audit: type=1400 audit(1790800132.325:604): avc:  denied  { search } for  pid=9344 comm="syz.4.982" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  452.511380][   T31] audit: type=1400 audit(1790800132.325:605): avc:  denied  { read } for  pid=9344 comm="syz.4.982" name="trace_pipe" dev="tracefs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  452.758466][ T1430] bridge_slave_1: left allmulticast mode
[  452.758500][ T1430] bridge_slave_1: left promiscuous mode
[  452.759815][ T1430] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.785985][ T1430] bridge_slave_0: left allmulticast mode
[  452.786005][ T1430] bridge_slave_0: left promiscuous mode
[  452.786167][ T1430] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.949510][ T5615] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  453.151797][ T1430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.187534][ T1430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.189353][ T1430] bond0 (unregistering): Released all slaves
[  453.229694][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1
[  454.124464][ T5615] Bluetooth: hci1: command tx timeout
[  454.212656][ T5713] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  454.368340][   T30] usb 3-1: USB disconnect, device number 64
[  455.443311][   T31] kauditd_printk_skb: 4 callbacks suppressed
[  455.443330][   T31] audit: type=1400 audit(1790800134.765:610): avc:  denied  { read } for  pid=9391 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  455.979319][   T31] audit: type=1400 audit(1790800135.795:611): avc:  denied  { write } for  pid=9384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.083181][ T1430] hsr_slave_0: left promiscuous mode
[  456.102496][ T1430] hsr_slave_1: left promiscuous mode
[  456.103330][ T1430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.103355][ T1430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.132876][ T5726] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  456.203985][ T5615] Bluetooth: hci1: command tx timeout
[  456.257197][ T1430] veth1_macvtap: left promiscuous mode
[  456.257249][ T1430] veth0_macvtap: left promiscuous mode
[  456.257336][ T1430] veth1_vlan: left promiscuous mode
[  456.257408][ T1430] veth0_vlan: left promiscuous mode
[  456.302593][ T5726] usb 1-1: Using ep0 maxpacket: 8
[  456.303927][ T5726] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  456.307111][ T5726] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  456.307135][ T5726] usb 1-1: config 0 has no interface number 0
[  456.307167][ T5726] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  456.307188][ T5726] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  456.307210][ T5726] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  456.307234][ T5726] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  456.307268][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.312055][ T5726] usb 1-1: config 0 descriptor??
[  456.378698][   T31] audit: type=1400 audit(1790800136.195:612): avc:  denied  { write } for  pid=9415 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  456.430563][ T5726] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  456.577166][ T9422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input87
[  456.666940][   T31] audit: type=1400 audit(1790800136.475:613): avc:  denied  { read } for  pid=4956 comm="acpid" name="mouse1" dev="devtmpfs" ino=3858 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  456.738193][   T31] audit: type=1400 audit(1790800136.545:614): avc:  denied  { open } for  pid=4956 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3858 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  456.802662][   T31] audit: type=1400 audit(1790800136.615:615): avc:  denied  { ioctl } for  pid=4956 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3858 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  457.169089][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'.
[  458.007630][ T1430] team0 (unregistering): Port device team_slave_1 removed
[  458.029589][ T1430] team0 (unregistering): Port device team_slave_0 removed
[  458.162835][ T6870] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  458.267439][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'.
[  458.274710][ T9443] netlink: 36 bytes leftover after parsing attributes in process `syz.4.997'.
[  458.362852][ T5615] Bluetooth: hci1: command tx timeout
[  458.382931][ T6870] usb 4-1: Using ep0 maxpacket: 8
[  458.386089][ T6870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  458.445651][ T6870] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  458.445688][ T6870] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  458.445745][ T6870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.477621][ T6870] usbtmc 4-1:16.0: bulk endpoints not found
[  458.494700][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2
[  458.495064][ T9405] i: renamed from virt_wifi0
[  458.615003][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.615080][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.615210][ T9325] bridge_slave_0: entered allmulticast mode
[  458.616995][ T9325] bridge_slave_0: entered promiscuous mode
[  458.624260][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.624354][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.624431][ T9325] bridge_slave_1: entered allmulticast mode
[  458.625568][ T9325] bridge_slave_1: entered promiscuous mode
[  458.708193][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.710820][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.808650][ T9325] team0: Port device team_slave_0 added
[  458.817731][ T9325] team0: Port device team_slave_1 added
[  458.903276][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.903293][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.903315][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.906487][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.906500][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.906521][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.933238][ T5615] Bluetooth: hci0: unexpected event for opcode 0x0403
[  458.962695][   T31] audit: type=1400 audit(1790800138.755:616): avc:  denied  { block_suspend } for  pid=9455 comm="syz.4.999" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  459.009728][   T31] audit: type=1400 audit(1790800138.825:617): avc:  denied  { remount } for  pid=9455 comm="syz.4.999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  459.115514][ T9325] hsr_slave_0: entered promiscuous mode
[  459.117487][ T9325] hsr_slave_1: entered promiscuous mode
[  459.120466][ T9325] debugfs: 'hsr0' already exists in 'hsr'
[  459.120485][ T9325] Cannot create hsr debugfs directory
[  459.265195][ T9464] xt_hashlimit: max too large, truncated to 1048576
[  459.265208][ T9464] xt_hashlimit: overflow, try lower: 0/0
[  459.268493][ T9464] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  460.443833][ T5615] Bluetooth: hci1: command tx timeout
[  460.499504][ T5713] usb 1-1: USB disconnect, device number 67
[  460.625379][ T5713] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  461.010055][   T31] audit: type=1400 audit(1790800140.825:618): avc:  denied  { create } for  pid=9465 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  461.169984][   T31] audit: type=1400 audit(1790800140.985:619): avc:  denied  { read } for  pid=9465 comm="syz.4.1001" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  461.170151][   T31] audit: type=1400 audit(1790800140.985:620): avc:  denied  { open } for  pid=9465 comm="syz.4.1001" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  461.221834][ T5713] usb 4-1: USB disconnect, device number 61
[  461.452654][ T5692] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  461.611834][ T9481] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input88
[  461.633702][   T31] audit: type=1400 audit(1790800141.435:621): avc:  denied  { write } for  pid=9449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  461.794973][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'.
[  461.800636][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1004'.
[  462.206389][ T5692] usb 1-1: device descriptor read/64, error -71
[  462.314265][ T9325] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  462.417003][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  462.419655][ T9325] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  462.442309][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.455117][ T9325] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  462.472905][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  462.472939][ T5692] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  462.477076][ T9325] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  462.508166][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  462.531310][   T31] audit: type=1400 audit(1790800142.345:622): avc:  denied  { write } for  pid=9492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  462.608760][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3
[  462.621044][ T5692] usb 1-1: device descriptor read/64, error -71
[  462.722816][ T5692] usb usb1-port1: attempt power cycle
[  463.462623][ T5692] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  463.474771][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.587601][ T5692] usb 1-1: device descriptor read/8, error -71
[  463.665686][ T9325] 8021q: adding VLAN 0 to HW filter on device team0
[  463.705998][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.706086][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.852625][ T5692] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  463.890527][ T5692] usb 1-1: device descriptor read/8, error -71
[  463.890939][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.891015][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.994544][ T5692] usb usb1-port1: unable to enumerate USB device
[  464.112943][   T31] audit: type=1400 audit(1790800143.925:623): avc:  denied  { ioctl } for  pid=9521 comm="syz.4.1013" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  464.244505][ T5692] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  464.792611][ T5692] usb 3-1: Using ep0 maxpacket: 8
[  464.798839][ T5692] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  464.802940][ T5692] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  464.802976][ T5692] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  464.803007][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.832172][ T5692] usbtmc 3-1:16.0: bulk endpoints not found
[  465.129601][ T9535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input89
[  465.358347][   T31] audit: type=1400 audit(1790800145.175:624): avc:  denied  { write } for  pid=9515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  465.486428][   T31] audit: type=1400 audit(1790800145.305:625): avc:  denied  { write } for  pid=9548 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  465.599865][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4
[  466.230991][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.675499][   T31] audit: type=1400 audit(1790800146.495:626): avc:  denied  { write } for  pid=9558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  466.935891][ T9325] veth0_vlan: entered promiscuous mode
[  466.952447][   T31] audit: type=1400 audit(1790800146.765:627): avc:  denied  { write } for  pid=9591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  466.981239][ T9325] veth1_vlan: entered promiscuous mode
[  467.031307][ T9325] veth0_macvtap: entered promiscuous mode
[  467.060399][ T9325] veth1_macvtap: entered promiscuous mode
[  467.095861][    T9] usb 3-1: USB disconnect, device number 65
[  467.098135][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'.
[  467.098181][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'.
[  467.141325][ T5266] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  467.208646][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.233962][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.282632][ T8887] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.282674][ T8887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.283746][ T8887] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.343208][ T8887] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.413824][ T9603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1023'.
[  467.429051][ T9603] netlink: 75 bytes leftover after parsing attributes in process `syz.0.1023'.
[  467.522130][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.522153][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.563261][    T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  467.617103][ T8887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.617123][ T8887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.694360][   T31] audit: type=1400 audit(1790800147.515:628): avc:  denied  { mounton } for  pid=9325 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  467.695517][   T31] audit: type=1400 audit(1790800147.515:629): avc:  denied  { mount } for  pid=9325 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  467.715533][    T9] usb 3-1: Using ep0 maxpacket: 16
[  467.724335][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  467.729564][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  467.729598][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.729619][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.729636][    T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  467.729657][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  467.729682][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.752399][    T9] usb 3-1: config 0 descriptor??
[  468.393581][   T31] audit: type=1400 audit(1790800148.205:630): avc:  denied  { write } for  pid=9605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  468.953820][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.954160][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.981457][   T31] audit: type=1400 audit(1790800148.795:631): avc:  denied  { write } for  pid=9628 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  469.056651][ T9598] netlink: 'syz.2.1022': attribute type 5 has an invalid length.
[  469.056671][ T9598] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  469.056731][ T9598] nbd: couldn't find device at index 65544
[  469.121082][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1022'.
[  469.121105][ T9598] nbd: must specify at least one socket
[  469.260159][    T9] logitech-djreceiver 0003:046D:C53A.0024: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[  469.323049][ T5713] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  469.356254][    T9] usb 3-1: USB disconnect, device number 66
[  469.483640][ T5713] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  469.484491][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.484532][ T5713] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  469.486211][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.486233][ T5713] usb 6-1: Product: syz
[  469.486248][ T5713] usb 6-1: Manufacturer: syz
[  469.486262][ T5713] usb 6-1: SerialNumber: syz
[  469.551110][ T5713] usb 6-1: selecting invalid altsetting 1
[  469.551133][ T5713] snd-usb-caiaq 6-1:1.0: can't set alt interface.
[  469.551147][ T5713] usb 6-1: unable to init card! (ret=-5)
[  469.551422][ T5713] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  469.571578][ T9637] fido_id[9637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  469.682748][ T5726] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  469.832601][ T5726] usb 1-1: Using ep0 maxpacket: 8
[  469.835842][ T5726] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  469.846108][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.846128][ T5726] usb 1-1: Product: syz
[  469.846139][ T5726] usb 1-1: Manufacturer: syz
[  469.846152][ T5726] usb 1-1: SerialNumber: syz
[  469.848486][ T5726] usb 1-1: config 0 descriptor??
[  469.918927][   T31] audit: type=1400 audit(1790800149.735:632): avc:  denied  { write } for  pid=9651 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  470.013902][ T5713] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  470.057059][ T5726] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  470.082297][ T9654] FAULT_INJECTION: forcing a failure.
[  470.082297][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.082328][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.3.1033 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  470.082368][ T9654] Tainted: [L]=SOFTLOCKUP
[  470.082375][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  470.082385][ T9654] Call Trace:
[  470.082391][ T9654]  <TASK>
[  470.082399][ T9654]  dump_stack_lvl+0x100/0x190
[  470.082429][ T9654]  should_fail_ex.cold+0x5/0xa
[  470.082455][ T9654]  _copy_from_user+0x2e/0xd0
[  470.082479][ T9654]  do_ip_setsockopt+0xb22/0x3310
[  470.082505][ T9654]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  470.082527][ T9654]  ? sock_has_perm+0x25a/0x2f0
[  470.082546][ T9654]  ? __pfx_sock_has_perm+0x10/0x10
[  470.082564][ T9654]  ? selinux_netlbl_socket_setsockopt+0x134/0x470
[  470.082588][ T9654]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  470.082616][ T9654]  ip_setsockopt+0x5a/0xf0
[  470.082637][ T9654]  ipv6_setsockopt+0x155/0x170
[  470.082665][ T9654]  udpv6_setsockopt+0x64/0xb0
[  470.082683][ T9654]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  470.082704][ T9654]  do_sock_setsockopt+0xf3/0x1d0
[  470.082735][ T9654]  __sys_setsockopt+0x195/0x220
[  470.082765][ T9654]  __x64_sys_setsockopt+0xbd/0x160
[  470.082789][ T9654]  ? do_syscall_64+0xae/0x790
[  470.082807][ T9654]  ? lockdep_hardirqs_on+0x7d/0x110
[  470.082825][ T9654]  do_syscall_64+0x123/0x790
[  470.082846][ T9654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.082864][ T9654] RIP: 0033:0x7f649819e159
[  470.082879][ T9654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.082897][ T9654] RSP: 002b:00007f64963f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  470.082915][ T9654] RAX: ffffffffffffffda RBX: 00007f6498425fa0 RCX: 00007f649819e159
[  470.082927][ T9654] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000003
[  470.082938][ T9654] RBP: 00007f64963f6090 R08: 0000000000000004 R09: 0000000000000000
[  470.082949][ T9654] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  470.082960][ T9654] R13: 00007f6498426038 R14: 00007f6498425fa0 R15: 00007fff961babc8
[  470.082985][ T9654]  </TASK>
[  470.240961][ T5713] usb 3-1: Using ep0 maxpacket: 8
[  470.267548][ T5713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  470.311975][ T5713] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  470.312015][ T5713] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  470.312047][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.317883][ T5713] usbtmc 3-1:16.0: bulk endpoints not found
[  471.072653][ T5692] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  471.222974][ T5692] usb 5-1: Using ep0 maxpacket: 16
[  471.248242][ T5692] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=d3.1f
[  471.253221][ T5692] usb 5-1: config index 0 descriptor too short (asked for 9, got 0)
[  471.253275][ T5692] usb 5-1: can't read configurations, error -22
[  471.404233][ T5692] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  471.575286][ T5692] usb 5-1: Using ep0 maxpacket: 16
[  471.576873][ T5692] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=d3.1f
[  471.597634][ T5692] usb 5-1: config index 0 descriptor too short (asked for 9, got 0)
[  471.597687][ T5692] usb 5-1: can't read configurations, error -22
[  471.598054][ T5692] usb usb5-port1: attempt power cycle
[  471.952949][ T5692] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  472.082165][ T5692] usb 5-1: Using ep0 maxpacket: 16
[  472.091341][ T5692] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=d3.1f
[  472.106568][ T5692] usb 5-1: config index 0 descriptor too short (asked for 9, got 0)
[  472.106621][ T5692] usb 5-1: can't read configurations, error -22
[  472.246061][ T9640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.251511][ T9640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.632365][ T5726] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  472.649608][ T5726] usb 1-1: USB disconnect, device number 72
[  472.672900][ T5692] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  472.676662][    T9] usb 6-1: USB disconnect, device number 2
[  472.694374][ T5692] usb 5-1: Using ep0 maxpacket: 16
[  472.707012][ T5692] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=d3.1f
[  472.710855][ T5692] usb 5-1: config index 0 descriptor too short (asked for 9, got 0)
[  472.710882][ T5692] usb 5-1: can't read configurations, error -22
[  472.711086][ T5692] usb usb5-port1: unable to enumerate USB device
[  472.795097][   T30] usb 3-1: USB disconnect, device number 67
[  473.302715][ T5713] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  474.004303][ T5713] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  474.010504][ T5713] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  474.010675][ T5713] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  474.097730][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.097759][ T5713] usb 1-1: Product: syz
[  474.097804][ T5713] usb 1-1: Manufacturer: syz
[  474.097866][ T5713] usb 1-1: SerialNumber: syz
[  474.419436][ T9685] ªªªªªª: renamed from vlan0 (while UP)
[  476.051723][   T31] audit: type=1400 audit(1790800155.865:633): avc:  denied  { read write } for  pid=9697 comm="syz.4.1043" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  476.051962][   T31] audit: type=1400 audit(1790800155.865:634): avc:  denied  { open } for  pid=9697 comm="syz.4.1043" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  476.162605][ T5784] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  476.574863][ T5784] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  476.581833][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.581849][ T5784] usb 4-1: Product: syz
[  476.581857][ T5784] usb 4-1: Manufacturer: syz
[  476.581865][ T5784] usb 4-1: SerialNumber: syz
[  476.638236][ T9676] xt_hashlimit: max too large, truncated to 1048576
[  476.638253][ T9676] xt_hashlimit: overflow, try lower: 0/0
[  476.639219][ T5784] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected
[  476.666406][ T9676] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  476.688159][ T5784] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  476.717612][ T5784] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  476.732496][ T5784] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  476.895392][ T5784] usb 4-1: USB disconnect, device number 62
[  476.958658][ T5784] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  476.977467][ T5784] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  476.994482][ T5784] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  476.999521][ T5784] digi_acceleport 4-1:1.0: device disconnected
[  477.242501][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.242964][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.248389][ T5692] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  477.494129][ T5692] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  477.496068][ T5692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.496186][ T5692] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  477.951859][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.951886][ T5692] usb 3-1: Product: syz
[  477.951900][ T5692] usb 3-1: Manufacturer: syz
[  477.951920][ T5692] usb 3-1: SerialNumber: syz
[  477.997436][    C1] usb 1-1: received EP1 urb->status = -71
[  478.037461][ T5692] usb 3-1: selecting invalid altsetting 1
[  478.037475][ T5692] snd-usb-caiaq 3-1:1.0: can't set alt interface.
[  478.037483][ T5692] usb 3-1: unable to init card! (ret=-5)
[  478.049290][ T5692] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[  478.129204][ T5713] usb 1-1: unable to init card! (ret=-19)
[  478.134795][ T5713] usb 1-1: USB disconnect, device number 73
[  478.263491][ T5784] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  478.473243][ T5784] usb 4-1: Using ep0 maxpacket: 32
[  478.474914][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short
[  478.474949][ T5784] usb 4-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da
[  478.475819][ T5784] usb 4-1: config 4 has an invalid interface number: 224 but max is 0
[  478.475840][ T5784] usb 4-1: config 4 has no interface number 0
[  478.475863][ T5784] usb 4-1: config 4 interface 224 has no altsetting 0
[  478.480100][   T31] audit: type=1400 audit(1790800158.295:635): avc:  denied  { read } for  pid=9725 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  478.480576][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.480597][ T5784] usb 4-1: Product: syz
[  478.480612][ T5784] usb 4-1: Manufacturer: syz
[  478.480626][ T5784] usb 4-1: SerialNumber: syz
[  478.582685][   T30] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  478.672643][   T31] audit: type=1400 audit(1790800158.485:636): avc:  denied  { read } for  pid=5266 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  478.732602][   T30] usb 5-1: Using ep0 maxpacket: 8
[  478.733100][   T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  478.733938][   T30] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  478.733974][   T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  478.733991][   T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  478.734005][   T30] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  478.734041][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.737472][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.737668][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.741201][   T30] usbtmc 5-1:16.0: bulk endpoints not found
[  478.946641][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.946873][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.961189][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.964696][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.000607][ T5784] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware
[  479.004036][ T5784] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  479.004065][ T5784] dib0700: firmware download failed at 7 with -22
[  479.025669][ T5784] usb 4-1: USB disconnect, device number 63
[  479.478476][   T31] audit: type=1400 audit(1790800159.295:637): avc:  denied  { write } for  pid=9731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.574097][ T5784] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  479.781085][ T5784] usb 1-1: Using ep0 maxpacket: 8
[  479.784227][ T5784] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  479.786962][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.786981][ T5784] usb 1-1: Product: syz
[  479.786993][ T5784] usb 1-1: Manufacturer: syz
[  479.787005][ T5784] usb 1-1: SerialNumber: syz
[  479.788506][   T31] audit: type=1400 audit(1790800159.605:638): avc:  denied  { write } for  pid=9745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  479.792363][ T5784] usb 1-1: config 0 descriptor??
[  480.105682][ T5784] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  480.305193][ T1214] usb 3-1: USB disconnect, device number 68
[  480.361848][   T31] audit: type=1400 audit(1790800160.175:639): avc:  denied  { connect } for  pid=9751 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  480.362081][   T31] audit: type=1400 audit(1790800160.175:640): avc:  denied  { write } for  pid=9751 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  481.112663][   T30] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  481.272642][   T30] usb 4-1: device descriptor read/64, error -71
[  481.537816][ T5726] usb 5-1: USB disconnect, device number 61
[  481.562679][   T30] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  481.766485][   T30] usb 4-1: device descriptor read/64, error -71
[  481.874751][   T30] usb usb4-port1: attempt power cycle
[  482.026582][ T9774] FAULT_INJECTION: forcing a failure.
[  482.026582][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.026604][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.2.1056 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  482.026619][ T9774] Tainted: [L]=SOFTLOCKUP
[  482.026623][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  482.026629][ T9774] Call Trace:
[  482.026633][ T9774]  <TASK>
[  482.026637][ T9774]  dump_stack_lvl+0x100/0x190
[  482.026660][ T9774]  should_fail_ex.cold+0x5/0xa
[  482.026676][ T9774]  _copy_to_user+0x32/0xd0
[  482.026691][ T9774]  simple_read_from_buffer+0xcb/0x170
[  482.026712][ T9774]  proc_fail_nth_read+0x1af/0x230
[  482.026729][ T9774]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.026745][ T9774]  ? rw_verify_area+0xce/0x6d0
[  482.026756][ T9774]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  482.026771][ T9774]  vfs_read+0x1e4/0xb40
[  482.026784][ T9774]  ? lock_acquire+0x1d1/0x380
[  482.026796][ T9774]  ? __fget_files+0x34/0x3d0
[  482.026811][ T9774]  ? __pfx_vfs_read+0x10/0x10
[  482.026822][ T9774]  ? find_held_lock+0x2b/0x80
[  482.026839][ T9774]  ? __fget_files+0x215/0x3d0
[  482.026857][ T9774]  ? __fget_files+0x21f/0x3d0
[  482.026875][ T9774]  ksys_read+0x12a/0x250
[  482.026888][ T9774]  ? __pfx_ksys_read+0x10/0x10
[  482.026904][ T9774]  do_syscall_64+0x123/0x790
[  482.026917][ T9774]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.026929][ T9774] RIP: 0033:0x7f4d1475e98e
[  482.026938][ T9774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  482.026949][ T9774] RSP: 002b:00007f4d1559efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  482.026960][ T9774] RAX: ffffffffffffffda RBX: 00007f4d1559f6c0 RCX: 00007f4d1475e98e
[  482.026967][ T9774] RDX: 000000000000000f RSI: 00007f4d1559f0a0 RDI: 0000000000000003
[  482.026974][ T9774] RBP: 00007f4d1559f090 R08: 0000000000000000 R09: 0000000000000000
[  482.026980][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.026986][ T9774] R13: 00007f4d14a26038 R14: 00007f4d14a25fa0 R15: 00007ffdcf045ea8
[  482.027001][ T9774]  </TASK>
[  482.263408][   T30] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  482.293159][   T30] usb 4-1: device descriptor read/8, error -71
[  482.309204][ T9778] raw_sendmsg: syz.4.1057 forgot to set AF_INET. Fix it!
[  482.322060][ T9778] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  482.322102][ T9778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.364486][ T9780] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  482.364914][ T9780] bridge: RTM_NEWNEIGH with invalid ether address
[  482.523888][ T9786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9786 comm=syz.4.1061
[  482.545171][   T30] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  482.558311][ T9786] netlink: 'syz.4.1061': attribute type 1 has an invalid length.
[  482.572656][   T30] usb 4-1: device descriptor read/8, error -71
[  482.600945][   T31] audit: type=1400 audit(1790800162.415:641): avc:  denied  { write } for  pid=9758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  482.682857][   T30] usb usb4-port1: unable to enumerate USB device
[  482.713109][   T31] audit: type=1400 audit(1790800162.525:642): avc:  denied  { write } for  pid=9793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  482.753156][ T5713] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  482.803554][ T1214] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  482.833824][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.835334][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.840858][ T5784] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  482.873594][ T5784] usb 1-1: USB disconnect, device number 74
[  482.912699][ T5713] usb 3-1: Using ep0 maxpacket: 16
[  482.920060][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  482.921090][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.921117][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.921137][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  482.921171][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.986905][ T1214] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  482.987919][ T1214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.987968][ T1214] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  482.988329][ T5713] usb 3-1: config 0 descriptor??
[  482.990241][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.990254][ T1214] usb 6-1: Product: syz
[  482.990263][ T1214] usb 6-1: Manufacturer: syz
[  482.990271][ T1214] usb 6-1: SerialNumber: syz
[  483.384793][ T9807] xt_hashlimit: max too large, truncated to 1048576
[  483.384817][ T9807] xt_hashlimit: overflow, try lower: 0/0
[  483.389919][ T9807] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  483.435938][ T5784] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  483.643025][ T5784] usb 5-1: Using ep0 maxpacket: 32
[  483.650935][ T5784] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  483.687540][ T5784] usb 5-1: config index 0 descriptor too short (expected 27632, got 27)
[  483.687570][ T5784] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  483.687595][ T5784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.687621][ T5784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  483.688216][ T5713] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max
[  483.688866][ T5784] usb 5-1: config 1 has no interface number 0
[  483.690806][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.822769][ T5713] microsoft 0003:045E:07DA.0025: unsupported Resolution Multiplier 0
[  484.005821][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.008055][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.061779][ T5713] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  484.328353][ T5713] usb 3-1: USB disconnect, device number 69
[  484.616202][ T5784] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  484.816560][   T31] audit: type=1400 audit(1790800164.635:643): avc:  denied  { write } for  pid=9796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  485.005367][    C1] usb 6-1: received EP1 urb->status = -2
[  485.007516][ T1214] usb 6-1: unable to init card! (ret=-19)
[  485.234100][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.284940][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.443108][ T9803] netlink: 'syz.4.1062': attribute type 10 has an invalid length.
[  485.489224][ T9814] fido_id[9814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  485.508031][ T5784] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  485.508190][ T5784] snd_usb_pod 5-1:1.1: invalid control EP
[  485.508198][ T5784] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  485.508294][ T5784] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  485.508502][ T5784] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  485.558445][ T9803] team0 (unregistering): Port device team_slave_0 removed
[  485.562787][ T1214] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  485.582283][ T9803] team0 (unregistering): Port device team_slave_1 removed
[  485.692260][   T31] audit: type=1400 audit(1790800165.505:644): avc:  denied  { write } for  pid=9817 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  485.720746][ T5784] usb 6-1: USB disconnect, device number 3
[  486.243688][ T1214] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  486.250727][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.250751][ T1214] usb 4-1: Product: syz
[  486.250765][ T1214] usb 4-1: Manufacturer: syz
[  486.250778][ T1214] usb 4-1: SerialNumber: syz
[  486.300343][ T1214] digi_acceleport 4-1:1.0: Digi 2 port USB adapter converter detected
[  486.318781][ T1214] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB0
[  486.605973][ T1214] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB1
[  486.664833][ T1214] usb 4-1: Digi 2 port USB adapter converter now attached to ttyUSB2
[  486.893697][ T9832] xt_hashlimit: max too large, truncated to 1048576
[  486.893720][ T9832] xt_hashlimit: overflow, try lower: 0/0
[  486.896269][ T9832] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  487.175870][ T1214] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[  487.241320][ T5784] usb 5-1: USB disconnect, device number 62
[  487.327726][ T1214] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=88.e1
[  487.350900][ T1214] usb 3-1: config 8 has an invalid interface number: 252 but max is 0
[  487.352046][ T1214] usb 3-1: config 8 has no interface number 0
[  487.369199][ T1214] usb 3-1: config 8 interface 252 has no altsetting 0
[  487.399541][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.401674][ T1214] usb 3-1: Product: syz
[  487.402502][ T1214] usb 3-1: Manufacturer: syz
[  487.417378][ T1214] usb 3-1: SerialNumber: syz
[  488.034247][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.089294][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.202146][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.257779][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.585698][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.688309][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.810231][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.843936][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.106917][ T1214] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[  489.106973][ T1214] dvb-usb: bulk message failed: -22 (4/0)
[  489.108968][ T1214] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  489.109063][ T1214] dvb-usb: bulk message failed: -22 (5/0)
[  489.109076][ T1214] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  489.233078][ T1214] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  489.557130][ T1214] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19)
[  489.577069][ T1214] usb 3-1: USB disconnect, device number 70
[  489.766712][ T9851] mmap: syz.5.1072 (9851): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  489.770448][ T9851] netlink: 'syz.5.1072': attribute type 14 has an invalid length.
[  489.954319][   T31] audit: type=1400 audit(1790800169.775:645): avc:  denied  { write } for  pid=9834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  490.114877][ T1214] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  490.122779][ T5726] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  490.214407][   T31] audit: type=1400 audit(1790800170.035:646): avc:  denied  { write } for  pid=9867 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  490.272617][ T5726] usb 5-1: Using ep0 maxpacket: 8
[  490.277917][ T1214] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  490.278400][ T5726] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  490.279678][ T1214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  490.279716][ T1214] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  490.279741][ T1214] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  490.279773][ T1214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.306264][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.306287][ T5726] usb 5-1: Product: syz
[  490.306301][ T5726] usb 5-1: Manufacturer: syz
[  490.306314][ T5726] usb 5-1: SerialNumber: syz
[  490.398033][ T5726] usb 5-1: config 0 descriptor??
[  490.495826][ T5692] usb 4-1: USB disconnect, device number 68
[  490.515077][   T31] audit: type=1400 audit(1790800170.325:647): avc:  denied  { write } for  pid=9855 comm="syz.0.1073" name="functions" dev="configfs" ino=21532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  490.522155][ T5692] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0
[  490.557392][ T5692] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1
[  490.575228][ T5692] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2
[  490.581601][ T5692] digi_acceleport 4-1:1.0: device disconnected
[  490.598240][   T31] audit: type=1400 audit(1790800170.405:648): avc:  denied  { write } for  pid=9855 comm="syz.0.1073" name="c.1" dev="configfs" ino=21538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  490.598287][   T31] audit: type=1400 audit(1790800170.405:649): avc:  denied  { write } for  pid=9855 comm="syz.0.1073" name="c.1" dev="configfs" ino=21538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  490.651277][ T5726] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  490.668594][   T31] audit: type=1400 audit(1790800170.485:650): avc:  denied  { create } for  pid=9855 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  491.039195][ T1214] cxacru 1-1:1.0: send of cm 0x91 failed (-71)
[  491.039676][ T1214] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  491.039777][ T1214] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  491.283327][ T1214] cxacru 1-1:1.0: probe with driver cxacru failed with error -71
[  491.296519][ T1214] usb 1-1: USB disconnect, device number 75
[  492.444792][   T31] audit: type=1400 audit(1790800172.265:651): avc:  denied  { cmd } for  pid=9889 comm="syz.0.1081" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  492.485096][   T31] audit: type=1400 audit(1790800172.305:652): avc:  denied  { listen } for  pid=9886 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  492.487266][   T31] audit: type=1400 audit(1790800172.305:653): avc:  denied  { setopt } for  pid=9886 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  492.637624][ T9899] FAULT_INJECTION: forcing a failure.
[  492.637624][ T9899] name failslab, interval 1, probability 0, space 0, times 0
[  492.637656][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.2.1082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.637681][ T9899] Tainted: [L]=SOFTLOCKUP
[  492.637687][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  492.637698][ T9899] Call Trace:
[  492.637704][ T9899]  <TASK>
[  492.637711][ T9899]  dump_stack_lvl+0x100/0x190
[  492.637742][ T9899]  should_fail_ex.cold+0x5/0xa
[  492.637767][ T9899]  should_failslab+0xc2/0x120
[  492.637792][ T9899]  __kmalloc_noprof+0xfc/0x840
[  492.637814][ T9899]  ? tomoyo_encode2+0xfb/0x3c0
[  492.637843][ T9899]  tomoyo_encode2+0xfb/0x3c0
[  492.637871][ T9899]  tomoyo_encode+0x29/0x50
[  492.637894][ T9899]  tomoyo_realpath_from_path+0x18c/0x690
[  492.637925][ T9899]  tomoyo_path_number_perm+0x23c/0x580
[  492.637946][ T9899]  ? tomoyo_path_number_perm+0x22e/0x580
[  492.637969][ T9899]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  492.638003][ T9899]  ? __lock_acquire+0x5c0/0x1f40
[  492.638035][ T9899]  ? __fget_files+0x34/0x3d0
[  492.638059][ T9899]  ? find_held_lock+0x2b/0x80
[  492.638084][ T9899]  ? hook_file_ioctl_common+0x140/0x440
[  492.638118][ T9899]  ? __fget_files+0x21f/0x3d0
[  492.638146][ T9899]  security_file_ioctl+0xd3/0x230
[  492.638170][ T9899]  __x64_sys_ioctl+0xb7/0x210
[  492.638193][ T9899]  do_syscall_64+0x123/0x790
[  492.638215][ T9899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.638234][ T9899] RIP: 0033:0x7f4d1479e159
[  492.638249][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.638266][ T9899] RSP: 002b:00007f4d1559f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.638284][ T9899] RAX: ffffffffffffffda RBX: 00007f4d14a25fa0 RCX: 00007f4d1479e159
[  492.638296][ T9899] RDX: 0000000000000003 RSI: 0000000000004b45 RDI: 0000000000000003
[  492.638306][ T9899] RBP: 00007f4d1559f090 R08: 0000000000000000 R09: 0000000000000000
[  492.638317][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.638327][ T9899] R13: 00007f4d14a26038 R14: 00007f4d14a25fa0 R15: 00007ffdcf045ea8
[  492.638353][ T9899]  </TASK>
[  492.639543][ T9899] ERROR: Out of memory at tomoyo_realpath_from_path.
[  492.653113][ T9894] netlink: 810 bytes leftover after parsing attributes in process `syz.0.1081'.
[  492.910544][ T9911] FAULT_INJECTION: forcing a failure.
[  492.910544][ T9911] name failslab, interval 1, probability 0, space 0, times 0
[  492.910580][ T9911] CPU: 1 UID: 0 PID: 9911 Comm: syz.0.1085 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  492.910603][ T9911] Tainted: [L]=SOFTLOCKUP
[  492.910609][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  492.910616][ T9911] Call Trace:
[  492.910619][ T9911]  <TASK>
[  492.910624][ T9911]  dump_stack_lvl+0x100/0x190
[  492.910644][ T9911]  should_fail_ex.cold+0x5/0xa
[  492.910660][ T9911]  should_failslab+0xc2/0x120
[  492.910679][ T9911]  __kmalloc_noprof+0xfc/0x840
[  492.910703][ T9911]  ? tomoyo_encode2+0xfb/0x3c0
[  492.910730][ T9911]  tomoyo_encode2+0xfb/0x3c0
[  492.910755][ T9911]  tomoyo_encode+0x29/0x50
[  492.910770][ T9911]  tomoyo_realpath_from_path+0x18c/0x690
[  492.910789][ T9911]  tomoyo_path_number_perm+0x23c/0x580
[  492.910802][ T9911]  ? tomoyo_path_number_perm+0x22e/0x580
[  492.910815][ T9911]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  492.910844][ T9911]  ? __lock_acquire+0x5c0/0x1f40
[  492.910876][ T9911]  ? __fget_files+0x34/0x3d0
[  492.910899][ T9911]  ? find_held_lock+0x2b/0x80
[  492.910916][ T9911]  ? hook_file_ioctl_common+0x140/0x440
[  492.910936][ T9911]  ? __fget_files+0x21f/0x3d0
[  492.910953][ T9911]  security_file_ioctl+0xd3/0x230
[  492.910971][ T9911]  __x64_sys_ioctl+0xb7/0x210
[  492.910993][ T9911]  do_syscall_64+0x123/0x790
[  492.911013][ T9911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.911029][ T9911] RIP: 0033:0x7f79c279e159
[  492.911044][ T9911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  492.911056][ T9911] RSP: 002b:00007f79c3640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  492.911068][ T9911] RAX: ffffffffffffffda RBX: 00007f79c2a26090 RCX: 00007f79c279e159
[  492.911075][ T9911] RDX: 0000200000000300 RSI: 00000000c06c4124 RDI: 0000000000000005
[  492.911081][ T9911] RBP: 00007f79c3640090 R08: 0000000000000000 R09: 0000000000000000
[  492.911088][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  492.911094][ T9911] R13: 00007f79c2a26128 R14: 00007f79c2a26090 R15: 00007ffed9903798
[  492.911111][ T9911]  </TASK>
[  492.912786][ T9911] ERROR: Out of memory at tomoyo_realpath_from_path.
[  492.940004][ T9901] jffs2: notice: (9901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  493.091226][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.091648][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.103279][ T5726] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  493.137939][ T5726] usb 5-1: USB disconnect, device number 63
[  493.167306][ T7865] udevd[7865]: setting mode of /dev/bus/usb/005/063 to 020664 failed: No such file or directory
[  493.167412][ T7865] udevd[7865]: setting owner of /dev/bus/usb/005/063 to uid=0, gid=0 failed: No such file or directory
[  493.560664][ T9923] syz.2.1087: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  493.563395][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.2.1087 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  493.563425][ T9923] Tainted: [L]=SOFTLOCKUP
[  493.563433][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  493.563446][ T9923] Call Trace:
[  493.563453][ T9923]  <TASK>
[  493.563461][ T9923]  dump_stack_lvl+0x100/0x190
[  493.563496][ T9923]  warn_alloc.cold+0x9e/0xb2
[  493.563519][ T9923]  ? __pfx_warn_alloc+0x10/0x10
[  493.563549][ T9923]  ? __kasan_kmalloc+0xaa/0xb0
[  493.563575][ T9923]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  493.563595][ T9923]  ? xskq_create+0x52/0x290
[  493.563624][ T9923]  ? do_sock_setsockopt+0xf
** replaying previous printk message **
[  493.563624][ T9923]  ? do_sock_setsockopt+0xf3/0x1d0
[  493.563655][ T9923]  ? do_syscall_64+0x123/0x790
[  493.563673][ T9923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.563708][ T9923]  ? xsk_setsockopt+0x743/0xab0
[  493.563736][ T9923]  __vmalloc_node_range_noprof+0x123b/0x1420
[  493.563775][ T9923]  ? xsk_setsockopt+0x743/0xab0
[  493.563808][ T9923]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  493.563836][ T9923]  ? kasan_save_track+0x14/0x30
[  493.563857][ T9923]  ? __kasan_kmalloc+0xaa/0xb0
[  493.563882][ T9923]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  493.563903][ T9923]  ? xskq_create+0x52/0x290
[  493.563932][ T9923]  ? xsk_setsockopt+0x743/0xab0
[  493.563958][ T9923]  xskq_create+0x18f/0x290
[  493.563986][ T9923]  ? xsk_setsockopt+0x743/0xab0
[  493.564015][ T9923]  xsk_setsockopt+0x743/0xab0
[  493.564043][ T9923]  ? __pfx_xsk_setsockopt+0x10/0x10
[  493.564069][ T9923]  ? __rcu_read_unlock+0x26a/0x5e0
[  493.564099][ T9923]  ? selinux_socket_setsockopt+0x6a/0x80
[  493.564124][ T9923]  ? __pfx_xsk_setsockopt+0x10/0x10
[  493.564153][ T9923]  do_sock_setsockopt+0xf3/0x1d0
[  493.564187][ T9923]  __sys_setsockopt+0x195/0x220
[  493.564219][ T9923]  __x64_sys_setsockopt+0xbd/0x160
[  493.564244][ T9923]  ? do_syscall_64+0xae/0x790
[  493.564263][ T9923]  ? lockdep_hardirqs_on+0x7d/0x110
[  493.564283][ T9923]  do_syscall_64+0x123/0x790
[  493.564306][ T9923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.564326][ T9923] RIP: 0033:0x7f4d1479e159
[  493.564344][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  493.564363][ T9923] RSP: 002b:00007f4d129f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  493.564382][ T9923] RAX: ffffffffffffffda RBX: 00007f4d14a26180 RCX: 00007f4d1479e159
[  493.564395][ T9923] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  493.564407][ T9923] RBP: 00007f4d1483506b R08: 0000000000000004 R09: 0000000000000000
[  493.564418][ T9923] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.564430][ T9923] R13: 00007f4d14a26218 R14: 00007f4d14a26180 R15: 00007ffdcf045ea8
[  493.564457][ T9923]  </TASK>
[  493.565015][ T9923] Mem-Info:
[  493.565052][ T9923] active_anon:13333 inactive_anon:7 isolated_anon:0
[  493.565052][ T9923]  active_file:575 inactive_file:62091 isolated_file:0
[  493.565052][ T9923]  unevictable:0 dirty:654 writeback:0
[  493.565052][ T9923]  slab_reclaimable:11908 slab_unreclaimable:98386
[  493.565052][ T9923]  mapped:33952 shmem:4157 pagetables:1410
[  493.565052][ T9923]  sec_pagetables:0 bounce:0
[  493.565052][ T9923]  kernel_misc_reclaimable:0
[  493.565052][ T9923]  free:1287917 free_pcp:10891 free_cma:0
[  493.565109][ T9923] Node 0 active_anon:53332kB inactive_anon:28kB active_file:2300kB inactive_file:248164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135808kB dirty:2616kB writeback:0kB shmem:16628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12892kB pagetables:5488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  493.565166][ T9923] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  493.565221][ T9923] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  493.565290][ T9923] lowmem_reserve[]: 0 2471 2471 2471 2471
[  493.565444][ T9923] Node 0 DMA32 free:1195396kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53332kB inactive_anon:28kB active_file:2300kB inactive_file:248164kB unevictable:0kB writepending:2616kB zspages:0kB present:3129332kB managed:2530388kB mlocked:0kB bounce:0kB free_pcp:43564kB local_pcp:23388kB free_cma:0kB
[  493.565580][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  493.565701][ T9923] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:64kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  493.565790][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  493.565901][ T9923] Node 1 Normal free:3940912kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  493.566027][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  493.568324][ T9923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  493.568841][ T9923] Node 0 DMA32: 2922*4kB (UM) 2597*8kB (UME) 2142*16kB (UME) 1589*32kB (UME) 935*64kB (UME) 485*128kB (UME) 262*256kB (UM) 102*512kB (UM) 29*1024kB (UME) 6*2048kB (UME) 194*4096kB (UM) = 1195408kB
[  493.569450][ T9923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  493.569857][ T9923] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 8*16kB (UM) 10*32kB (UM) 10*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940912kB
[  493.570356][ T9923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  493.570395][ T9923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  493.570431][ T9923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  493.570470][ T9923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  493.570505][ T9923] 66819 total pagecache pages
[  493.570548][ T9923] 0 pages in swap cache
[  493.570578][ T9923] Free swap  = 124996kB
[  493.570616][ T9923] Total swap = 124996kB
[  493.570650][ T9923] 2097051 pages RAM
[  493.570688][ T9923] 0 pages HighMem/MovableOnly
[  493.570694][ T9923] 432822 pages reserved
[  493.570725][ T9923] 0 pages cma reserved
[  493.680168][    C0] ------------[ cut here ]------------
[  493.680179][    C0] current_phy->suspended
[  493.680185][    C0] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0xcbf/0x1540, CPU#0: kworker/u8:17/8315
[  494.303237][    C0] Modules linked in:
[  494.307122][    C0] CPU: 0 UID: 0 PID: 8315 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.318235][    C0] Tainted: [L]=SOFTLOCKUP
[  494.322576][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  494.332644][    C0] Workqueue: phy0-mac-cmds mac802154_scan_worker
[  494.338981][    C0] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540
[  494.344448][    C0] Code: 48 c7 c2 00 4b c0 8c be 52 03 00 00 48 c7 c7 60 4b c0 8c c6 05 76 69 c5 09 01 e8 5c 5b 7f fa e9 c6 f8 ff ff e8 d2 9a a4 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 c4 9a a4 fa e8 ff 49 88 fa 31 ff 89 c5
[  494.364066][    C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010246
[  494.370109][    C0] RAX: 0000000000000000 RBX: ffff88802ac98d20 RCX: 0000000000000103
[  494.378091][    C0] RDX: ffff8880213d2580 RSI: ffffffff8767a9fe RDI: ffff8880213d2580
[  494.386071][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  494.394048][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff87679d40
[  494.402012][    C0] R13: 1ffff92000000f79 R14: ffff88802ac98720 R15: 000000000000002f
[  494.410024][    C0] FS:  0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000
[  494.418979][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  494.425575][    C0] CR2: 0000200000002000 CR3: 0000000078b71000 CR4: 00000000003526f0
[  494.433557][    C0] Call Trace:
[  494.436814][    C0]  <IRQ>
[  494.439634][    C0]  ? lock_acquire+0x1d1/0x380
[  494.444316][    C0]  ? ieee802154_hold_queue+0x100/0x450
[  494.449769][    C0]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[  494.454885][    C0]  ? ieee802154_hold_queue+0x2a4/0x450
[  494.460340][    C0]  ? mark_held_locks+0x40/0x70
[  494.465105][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  494.470898][    C0]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[  494.475999][    C0]  ieee802154_tx.isra.0+0x29f/0x570
[  494.481180][    C0]  ieee802154_subif_start_xmit+0xc8/0xf0
[  494.486813][    C0]  dev_hard_start_xmit+0x121/0x760
[  494.491904][    C0]  sch_direct_xmit+0x1b2/0xc70
[  494.496657][    C0]  ? lock_acquire+0x1d1/0x380
[  494.501309][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  494.506590][    C0]  ? do_raw_spin_lock+0x128/0x260
[  494.511592][    C0]  ? find_held_lock+0x2b/0x80
[  494.516276][    C0]  ? __qdisc_run+0xeea/0x1b20
[  494.520930][    C0]  ? __qdisc_run+0xeea/0x1b20
[  494.525605][    C0]  __qdisc_run+0x52d/0x1b20
[  494.530096][    C0]  net_tx_action+0x549/0xf50
[  494.534677][    C0]  handle_softirqs+0x1e6/0x9d0
[  494.539419][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  494.544689][    C0]  ? irqtime_account_delta+0x9a/0x110
[  494.550049][    C0]  ? hwsim_update_pib.isra.0+0x29f/0x410
[  494.555671][    C0]  do_softirq+0xaf/0xf0
[  494.559815][    C0]  </IRQ>
[  494.562733][    C0]  <TASK>
[  494.565640][    C0]  __local_bh_enable_ip+0xff/0x120
[  494.570725][    C0]  hwsim_update_pib.isra.0+0x29f/0x410
[  494.576182][    C0]  hwsim_hw_channel+0x126/0x360
[  494.581010][    C0]  drv_set_channel+0xef/0x2c0
[  494.585681][    C0]  mac802154_scan_cleanup_locked.isra.0+0x12f/0x640
[  494.592258][    C0]  mac802154_scan_worker+0xa36/0x1240
[  494.597633][    C0]  ? __pfx_mac802154_scan_worker+0x10/0x10
[  494.603428][    C0]  ? process_one_work+0x906/0x1b10
[  494.608527][    C0]  ? process_one_work+0x906/0x1b10
[  494.613655][    C0]  process_one_work+0xac7/0x1b10
[  494.618619][    C0]  ? __pfx_process_one_work+0x10/0x10
[  494.624007][    C0]  ? lock_acquire+0x1d1/0x380
[  494.628670][    C0]  ? __pfx_mac802154_scan_worker+0x10/0x10
[  494.634483][    C0]  worker_thread+0x5ef/0xe50
[  494.639075][    C0]  ? __pfx_worker_thread+0x10/0x10
[  494.644182][    C0]  ? kthread+0x13a/0x450
[  494.648402][    C0]  ? __pfx_worker_thread+0x10/0x10
[  494.653507][    C0]  kthread+0x373/0x450
[  494.657564][    C0]  ? __pfx_kthread+0x10/0x10
[  494.662138][    C0]  ret_from_fork+0x730/0xd60
[  494.666720][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  494.671806][    C0]  ? __switch_to+0x800/0x10f0
[  494.676484][    C0]  ? __pfx_kthread+0x10/0x10
[  494.681054][    C0]  ret_from_fork_asm+0x1a/0x30
[  494.685812][    C0]  </TASK>
[  494.688811][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  494.696065][    C0] CPU: 0 UID: 0 PID: 8315 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  494.707151][    C0] Tainted: [L]=SOFTLOCKUP
[  494.711445][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  494.721473][    C0] Workqueue: phy0-mac-cmds mac802154_scan_worker
[  494.727791][    C0] Call Trace:
[  494.731051][    C0]  <IRQ>
[  494.733881][    C0]  dump_stack_lvl+0x100/0x190
[  494.738536][    C0]  vpanic+0x553/0x970
[  494.742489][    C0]  ? __pfx_vpanic+0x10/0x10
[  494.746986][    C0]  panic+0xd1/0xe0
[  494.750696][    C0]  ? __pfx_panic+0x10/0x10
[  494.755093][    C0]  check_panic_on_warn.cold+0x19/0x34
[  494.760438][    C0]  ? hwsim_hw_xmit+0xcbf/0x1540
[  494.765266][    C0]  __warn.cold+0x191/0x318
[  494.769657][    C0]  __report_bug+0x30f/0x440
[  494.774134][    C0]  ? hwsim_hw_xmit+0xcbf/0x1540
[  494.778960][    C0]  ? __pfx___report_bug+0x10/0x10
[  494.783956][    C0]  ? stack_trace_save+0x8e/0xc0
[  494.788781][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  494.794139][    C0]  ? hwsim_hw_xmit+0xcbf/0x1540
[  494.798976][    C0]  report_bug+0xb3/0x220
[  494.803191][    C0]  ? hwsim_hw_xmit+0xcbf/0x1540
[  494.808017][    C0]  handle_bug+0x16a/0x2a0
[  494.812329][    C0]  exc_invalid_op+0x17/0x50
[  494.816806][    C0]  asm_exc_invalid_op+0x1a/0x20
[  494.821630][    C0] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540
[  494.827068][    C0] Code: 48 c7 c2 00 4b c0 8c be 52 03 00 00 48 c7 c7 60 4b c0 8c c6 05 76 69 c5 09 01 e8 5c 5b 7f fa e9 c6 f8 ff ff e8 d2 9a a4 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 c4 9a a4 fa e8 ff 49 88 fa 31 ff 89 c5
[  494.846676][    C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00010246
[  494.852746][    C0] RAX: 0000000000000000 RBX: ffff88802ac98d20 RCX: 0000000000000103
[  494.860708][    C0] RDX: ffff8880213d2580 RSI: ffffffff8767a9fe RDI: ffff8880213d2580
[  494.868664][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  494.876619][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff87679d40
[  494.884564][    C0] R13: 1ffff92000000f79 R14: ffff88802ac98720 R15: 000000000000002f
[  494.892528][    C0]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[  494.897640][    C0]  ? hwsim_hw_xmit+0xcbe/0x1540
[  494.902472][    C0]  ? hwsim_hw_xmit+0xcbe/0x1540
[  494.907320][    C0]  ? lock_acquire+0x1d1/0x380
[  494.912003][    C0]  ? ieee802154_hold_queue+0x100/0x450
[  494.917443][    C0]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[  494.922553][    C0]  ? ieee802154_hold_queue+0x2a4/0x450
[  494.927990][    C0]  ? mark_held_locks+0x40/0x70
[  494.932733][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  494.938519][    C0]  ? __pfx_hwsim_hw_xmit+0x10/0x10
[  494.943609][    C0]  ieee802154_tx.isra.0+0x29f/0x570
[  494.948792][    C0]  ieee802154_subif_start_xmit+0xc8/0xf0
[  494.954400][    C0]  dev_hard_start_xmit+0x121/0x760
[  494.959491][    C0]  sch_direct_xmit+0x1b2/0xc70
[  494.964231][    C0]  ? lock_acquire+0x1d1/0x380
[  494.968881][    C0]  ? __pfx_sch_direct_xmit+0x10/0x10
[  494.974137][    C0]  ? do_raw_spin_lock+0x128/0x260
[  494.979138][    C0]  ? find_held_lock+0x2b/0x80
[  494.983792][    C0]  ? __qdisc_run+0xeea/0x1b20
[  494.988450][    C0]  ? __qdisc_run+0xeea/0x1b20
[  494.993104][    C0]  __qdisc_run+0x52d/0x1b20
[  494.997590][    C0]  net_tx_action+0x549/0xf50
[  495.002161][    C0]  handle_softirqs+0x1e6/0x9d0
[  495.006902][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  495.012170][    C0]  ? irqtime_account_delta+0x9a/0x110
[  495.017523][    C0]  ? hwsim_update_pib.isra.0+0x29f/0x410
[  495.023132][    C0]  do_softirq+0xaf/0xf0
[  495.027264][    C0]  </IRQ>
[  495.030169][    C0]  <TASK>
[  495.033088][    C0]  __local_bh_enable_ip+0xff/0x120
[  495.038181][    C0]  hwsim_update_pib.isra.0+0x29f/0x410
[  495.043619][    C0]  hwsim_hw_channel+0x126/0x360
[  495.048449][    C0]  drv_set_channel+0xef/0x2c0
[  495.053108][    C0]  mac802154_scan_cleanup_locked.isra.0+0x12f/0x640
[  495.059688][    C0]  mac802154_scan_worker+0xa36/0x1240
[  495.065038][    C0]  ? __pfx_mac802154_scan_worker+0x10/0x10
[  495.070821][    C0]  ? process_one_work+0x906/0x1b10
[  495.075920][    C0]  ? process_one_work+0x906/0x1b10
[  495.081013][    C0]  process_one_work+0xac7/0x1b10
[  495.085935][    C0]  ? __pfx_process_one_work+0x10/0x10
[  495.091286][    C0]  ? lock_acquire+0x1d1/0x380
[  495.095951][    C0]  ? __pfx_mac802154_scan_worker+0x10/0x10
[  495.101736][    C0]  worker_thread+0x5ef/0xe50
[  495.106303][    C0]  ? __pfx_worker_thread+0x10/0x10
[  495.111392][    C0]  ? kthread+0x13a/0x450
[  495.115611][    C0]  ? __pfx_worker_thread+0x10/0x10
[  495.120700][    C0]  kthread+0x373/0x450
[  495.124757][    C0]  ? __pfx_kthread+0x10/0x10
[  495.129335][    C0]  ret_from_fork+0x730/0xd60
[  495.133902][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  495.138988][    C0]  ? __switch_to+0x800/0x10f0
[  495.143641][    C0]  ? __pfx_kthread+0x10/0x10
[  495.148210][    C0]  ret_from_fork_asm+0x1a/0x30
[  495.152955][    C0]  </TASK>
[  495.156139][    C0] Kernel Offset: disabled
[  495.160439][    C0] Rebooting in 86400 seconds..