last executing test programs:

2m33.857225404s ago: executing program 4 (id=623):
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0xdf0a})
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe7f, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', 0x0})
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @in6={0xa, 0x4e24, 0x5, @private1}}}, 0x118)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000)
syz_emit_ethernet(0x66, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0xa3, 0xff, @mcast2, @mcast2}}}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
acct(0x0)
set_mempolicy(0x4005, 0x0, 0x9)
set_mempolicy(0x2, 0x0, 0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x7d80)
writev(0xffffffffffffffff, 0x0, 0x0)

2m33.438487723s ago: executing program 4 (id=626):
set_mempolicy(0x3, 0x0, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2m32.322816727s ago: executing program 4 (id=629):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
setresuid(0x0, 0xee00, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000300120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2m31.181354472s ago: executing program 4 (id=633):
r0 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x460002)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x1000000}}, 0x20)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0xfffffffffffffffe)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read(r6, &(0x7f0000000040)=""/148, 0xffffff96)
syz_io_uring_setup(0x3b7e, &(0x7f0000000180)={0x0, 0x8e1e, 0x200, 0x2, 0x302, 0x0, r6}, &(0x7f0000000300), &(0x7f0000000340))
syz_emit_ethernet(0x5e, &(0x7f00000009c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000090a010400000000000000000100000008000a40000000000900020073810000000000000000010073797a30000001d25e0000080005400000001f440000000c0a01020000000000000000010000000900020073797a32000000001800038014000080040001800c00054000000000000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0)

2m29.599315443s ago: executing program 4 (id=638):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
close(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fanotify_init(0x20, 0x81000)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, <r6=>0x41424344}, 0x5513, 0x98)
syz_emit_ethernet(0xa3, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa88480000000000000000000000000000000000000000000000000000040048870079006400000506907800000000ac1414aa01010007071cac1e010101004e234e22", @ANYRES32=r6, @ANYRES32=0x41424344, @ANYBLOB="51400001907800031312acd54d4458ffacb5a62b6dd41fffdae1020481001312385921b89afdd7b95b91d89f21000000220654e1206f040201080a000000020000000304020000009e90d56d134a69764996e7ef0693f272e36b6383c750e97a7a55d0aaba83fd6584e67c525fa5fbb860042ede63"], &(0x7f00000003c0)={0x0, 0x4, [0x452, 0x9e0, 0xc41, 0x7cb]})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028000000aea9615e668fc64f00000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

2m28.241544288s ago: executing program 4 (id=641):
sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffffe}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000001a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r3, r3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
splice(r4, 0x0, r6, 0x0, 0x1fffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffc0b}]})
close_range(r7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660000007fffff0900000000008000000000000000009500000000001000180100002020782500000f305d47d7250a000000000007010000f8fffff5b702000008000000b50a000000000000850000002e6da6c8a600"/110], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m13.139516341s ago: executing program 32 (id=641):
sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffffe}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000001a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r3, r3, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
splice(r4, 0x0, r6, 0x0, 0x1fffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffc0b}]})
close_range(r7, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660000007fffff0900000000008000000000000000009500000000001000180100002020782500000f305d47d7250a000000000007010000f8fffff5b702000008000000b50a000000000000850000002e6da6c8a600"/110], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

11.171473903s ago: executing program 1 (id=1086):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x2, "679f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "045197"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "157877"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '?'}, &(0x7f0000000500)=ANY=[@ANYBLOB="2084040000009e19d3606e4e72bec8e1a53edf351cad1575a5214df148ead41436a100f00d38ae282310ae63c76eb73c665b05b38f0300000000000000e883a44d40e680fcd0338e024109f3303fd2a6221145594ced83e168d96c6fc3a1"], &(0x7f0000000440)={0x20, 0x85, 0x3, "e1c9e0"}})

7.919470721s ago: executing program 3 (id=1099):
prlimit64(0x0, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300500c2fbfe8f2f3dae7bd46627000000ee18e95857af3b7e32e801103071e3a89621263522c6a86573311663e4e4b9e9f227f34252a4ad36d580de0ef42a11e5364fe2539775d6cb7e84ef1e17e5e4e77c82f451883e994685ed9790aebc3a1b17ec09783ee115bd5a4f72107c89d7e17f6166343b5909241000aeab168e4e95133cbbfac4464a822abe7350c70f4454552b5af7b0bafa2804234b8f5f5771ca3b6963e94fdda88eb7ee266b5958ef", @ANYRES16=r1, @ANYBLOB="010002000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000800350000000000"], 0x30}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

7.895982131s ago: executing program 1 (id=1100):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0x7fffffff, "ea561b9ff2a5932884c007d34261dcad2c4e674b4c25316f846ba6d910ead926", 0x200, 0x3, 0x6, 0x2, 0x3})
r1 = socket$isdn(0x22, 0x3, 0x25)
io_setup(0x59, &(0x7f00000000c0)=<r2=>0x0)
r3 = eventfd2(0x4, 0x40000)
io_submit(r2, 0x3, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x9d, r0, &(0x7f0000000100)="decd22f909f17c5c033e05f8dd33188dd43bebe8abdeec5b0086d943713e1127b62f2757e3a0c3751550efe0db1049ab9e2a4b0688e4ac2de3c0db327189fd4803f054f64784f0f93ce85f9eec2adc37", 0x50, 0x1, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0xfff, r1, &(0x7f00000001c0)="45492810059344c0f07c45ff228cf002e312ba3d9b5aee970a2839d1", 0x1c, 0x7, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000240)="ed37cb71faa9118a2002bf06e17288439e2bcaf411b1dda629b04d7291571a88b8fdf5e7486b7fd4a7c519ac18de3a2bdeb7c1b9f45c59e5c92095ccb62b6d67f2cb30a39dcb0664c8cc23997067dd22969f25085489", 0x56, 0xf, 0x0, 0x3, r0}])
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000340)={0x1, 0x51, "9b06bb6d31ec41f15713fcd72b895e03a4ff0284e6f35dc7f51394da2363f1a3f3a800fa5622ba3d417c3267be0cabddec055b47c457e856404b02b66d76dcd750d4e7f6441f0aee63d64eb252cc6f3729"})
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000003c0)={0xfffffff8, 0xe})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/ldiscs\x00', 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000440)=""/126, 0x7e, 0x40000000, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/partitions\x00', 0x0, 0x0)
shmget(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x2, 0x2, 0x140000000000000, 0xc41, 0x8, 0x3}, {0x80, 0x3, 0x2547c711, 0x6, 0x6, 0xa}], ['\x00', '\x00', '\x00']})
r6 = accept4$unix(r0, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e, 0x800)
recvmmsg$unix(r6, &(0x7f0000001000)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/188, 0xbc}], 0x4}}, {{&(0x7f0000000b00), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/5, 0x5}], 0x2, &(0x7f0000000cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/59, 0x3b}, {&(0x7f0000000e00)=""/141, 0x8d}], 0x2, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x3, 0x2000, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f00000010c0)={0x1, @raw_data="4e1ceae79915517254d08b9bb16a5b6205e5452a465a4d58c5d94f911a050948a59f2409b3066042cb24bf3fcec9cce526c06b58c3a6ace54c6d8ee947e130ab9d3c0040bc4baa53993ea244aeb55e89dd90b65ae4af2b55fb60e581e2388bb5891865f52ed76d9cd8bf9fff7959e3da8025f0959f7e4e48a19d00ee7bf6879f704baaee57fb4868d9593fd5a1e9327f8e38d6e249104cd0611adfbc37b07029b1137e8979177f0acc2c76bdb62490e9650045036e7aaa911857b68508a1e47cb178dce852d3c211"})
r13 = syz_open_dev$evdev(&(0x7f00000011c0), 0x111, 0x109000)
ioctl$EVIOCGKEY(r13, 0x80404518, &(0x7f0000001200)=""/169)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x4000010, r10, 0x42848000)
setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f00000012c0)=@req3={0x8000000, 0x6, 0x9, 0x9, 0x7875, 0x4, 0x6}, 0x1c)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000001300)={0xc, 0x0, <r14=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000001400)={0x28, 0x2, r14, 0x0, &(0x7f0000001340)="56e9877c8128938bf17c60f6bca44c1974c52892caf465d9277137b0ae24e2de6df92c1d86fdccfb5ac95d9b15227bc4959db21f2c5e6225b6cc1970a48aee646a81dbed419636d182cb6e006668d720a3c6b616e5ab1afdd12d1a3be60bd2574fecc663f69b196810c0c81fecee2ad1bdc52df25162c2feb40d4419e21b2942235bc30896beb35ab17bce9512c5ee46a8b2e07d5d5ed963", 0x98, 0x7})
eventfd2(0x7fffffff, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000001440)=""/235, &(0x7f0000001540)=0xeb)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r15, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r16, 0x813, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x30000840)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000016c0)={r8, 0xf, 0x3, r9})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001840)={'caif0\x00', <r17=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x9, 0x2, &(0x7f0000001700)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x9, 0x2, 0x8, 0x0, 0x1}], &(0x7f0000001740)='syzkaller\x00', 0x6, 0x8d, &(0x7f0000001780)=""/141, 0x40f00, 0x1, '\x00', r17, @fallback=0x6, r8, 0x8, &(0x7f0000001880)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x5, 0xa, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001940)=[r11, r4, r9, r11, r12], &(0x7f0000001980)=[{0x1, 0x3, 0xd, 0x5}], 0x10, 0xe, @void, @value}, 0x94)

7.49353695s ago: executing program 1 (id=1102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10041, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0)
accept4(r4, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000000000000000000d0e000000000000000100"/40], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xff)
r6 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d5}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
unshare(0x68060200)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffb4)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x402202, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r8, 0x3b65, 0xa)

7.417982178s ago: executing program 3 (id=1103):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2)
r3 = syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2(0x0, 0x0)
sendmsg$nl_generic(r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdir(0x0, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x2f)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)

7.131954376s ago: executing program 1 (id=1104):
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x13, 0x1, 0x80000000, 0x8a, 0x8002, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @value, @void, @void, @value}, 0x50)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x4008801}, 0x40810)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x254083, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
write$cgroup_int(r4, 0x0, 0x0)
syz_usb_disconnect(r2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x260, 0x260, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_to_bridge\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @rand_addr=0x64010182, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
accept4$unix(r5, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @start={0x0, 0x1}})
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x13, 0x1, 0x80000000, 0x8a, 0x8002, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, @value, @void, @void, @value}, 0x50) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x4008801}, 0x40810) (async)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x254083, 0x0) (async)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
dup(r3) (async)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async)
write$cgroup_int(r4, 0x0, 0x0) (async)
syz_usb_disconnect(r2) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x98, 0x260, 0x260, 0x260, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_to_bridge\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @rand_addr=0x64010182, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async)
accept4$unix(r5, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x800) (async)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @start={0x0, 0x1}}) (async)

6.835748158s ago: executing program 2 (id=1106):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev\x00')
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4008004)
syz_open_dev$sndmidi(&(0x7f0000000280), 0x1000000004, 0x31f0c3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f000055d000/0x2000)=nil, 0x2000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)

5.052911925s ago: executing program 3 (id=1112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x10)
bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x1500, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xfffd}}}, 0x24}}, 0x40044)

4.981137087s ago: executing program 1 (id=1113):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14a)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
inotify_init1(0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x3, 0x2)
shmctl$IPC_RMID(0x0, 0x0)

4.811950299s ago: executing program 3 (id=1115):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x328, 0x2, 0x2}, 0x18, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0xfe, 0x9, 0x70a})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='mm_migrate_pages\x00', r5, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
syz_emit_ethernet(0x8d, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x57, 0x3a, 0xfe, @loopback, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c10300c9110d0dc875566453e6e0da258a8b07dd77abd54bfc62d7a72e0ea0d318c37a10263e"}}}}}}}, 0x0)

4.631448211s ago: executing program 5 (id=1116):
set_mempolicy(0x3, 0x0, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x0, 0x6, 0x303, 0xfffc, 0x0, 0xfffffffe, 0x0})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

3.920243042s ago: executing program 3 (id=1117):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x1, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x5, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x5, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x5, 0x226, 0x1, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0x9, 0xfff]}, 0x45c)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
userfaultfd(0x801)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.707404217s ago: executing program 0 (id=1119):
syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x508786cc})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008a}, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, <r4=>0x0})
sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000480)={'sit0\x00', <r6=>0x0, 0x8016, 0x8, 0x2, 0x7f, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x467, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x8, r6, 0x8}, 0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$inet(r8, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0x1}], 0x2}}], 0x1, 0x20000000)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000190091002cbd7000fcdbdf2500000000b816646c12bc20084c002a50e3fe238fd398bf5b753a28811d226c460c426d7d02f32cb1ecfce9a25656c70c7f206611c166a181087a65af7172c44641514e67dea642e9080eb83554c7932845b3ef33a1dcc0bbc0478a69d7cd343007782a7a72ade900d3349bf68678303bf4d21aafb41e65da07e2c64387e4f55eafa5c1d048c1ca7372ed6c34c49dac52bcced31185f014a61e2d91e29bdb379002a19b6f882bb7e3b0c1fe9c626bc28e0dcd1dd31b64d90108003300d8970000"], 0x38}, 0x1, 0x0, 0x0, 0x41804}, 0x4000000)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)

3.684212533s ago: executing program 5 (id=1120):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
iopl(0x3)
r1 = socket$rds(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r7 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil)
shmat(r7, &(0x7f0000ffa000/0x2000)=nil, 0xc000)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x1, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x88, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x48, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0xf5, 0x3, 0x6}}, @val={0x6, 0x2, 0x7}, @val={0x2d, 0x1a, {0x8, 0x3, 0x2, 0x0, {0x6, 0x80f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x3, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0xf3, 0x60}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xba4820d6f6815606}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r10=>r5})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r11=>0x0, 0x4, 0x7, 0x6, 0x4, 0x0, @rand_addr=' \x01\x00', @remote, 0x7800, 0x8707, 0x0, 0x6}})
sendmsg$nl_route_sched_retired(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@delqdisc={0x108, 0x25, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x1}, {0x5, 0x6}, {0xfff1, 0xffe0}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x664}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x24040005)

3.450930476s ago: executing program 2 (id=1121):
mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mounts\x00')
lseek(r0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x100})
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x3c, 0x31, 0x1, 0x2000, 0x0, "", [@typed={0x8, 0xa3, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x5b, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @pid=r3}, @nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x30}]}]}]}]}, 0x3c}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd60d4c9b}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0xf7e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9, 0x0, 0x1}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
memfd_secret(0x0)

3.17583572s ago: executing program 0 (id=1122):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x30, r2, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r8 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r8, &(0x7f0000000080)={0x11, 0x1b, r7}, 0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0)

2.583473306s ago: executing program 5 (id=1123):
prlimit64(0x0, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
fstat(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300500c2fbfe8f2f3dae7bd46627000000ee18e95857af3b7e32e801103071e3a89621263522c6a86573311663e4e4b9e9f227f34252a4ad36d580de0ef42a11e5364fe2539775d6cb7e84ef1e17e5e4e77c82f451883e994685ed9790aebc3a1b17ec09783ee115bd5a4f72107c89d7e17f6166343b5909241000aeab168e4e95133cbbfac4464a822abe7350c70f4454552b5af7b0bafa2804234b8f5f5771ca3b6963e94fdda88eb7ee266b5958ef", @ANYRES16=r1, @ANYBLOB="010002000000000000002500000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000800350000000000"], 0x30}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
listen(0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2.583064422s ago: executing program 2 (id=1124):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x10008, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(&(0x7f00000001c0)=@sg0, 0x0, 0x0, 0x24011, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xc4)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x8d)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r6}, 0x10)
prlimit64(r2, 0x9, &(0x7f0000000180)={0x9, 0xc}, 0x0)
recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2}, 0xe}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendfile(r0, r0, 0x0, 0xb)

2.540918404s ago: executing program 0 (id=1125):
r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xf, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x157a, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x1, 0x5}, {0x5, 0x1, 0x8, 0xa}], 0x10, 0x0, @void, @value}, 0x94)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x1c)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x0, 0x211}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

2.005103544s ago: executing program 2 (id=1126):
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f4260723", 0x2a}], 0x1)

1.778714838s ago: executing program 5 (id=1127):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000320001002abd7000fedbdb25050000000800040002000000e34174180636828df45fecaedb2e5e9c9848764a98ef74330e95c2192923d6b39e46de325d14279943b4e4b2813e7e66c41a70e8cc778571a83c7baffc56c45a4b38dce9306ec67ee08ae5ff39235152a7681986e3bec93b5c7379331f"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x9b9, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20044000}], 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa08cd2553c54d08004600002c00000000050690780a010102ffffffff0703000000000000ecc4d3fb71f81b67f63d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000790780000"], 0x0)

1.72752451s ago: executing program 2 (id=1128):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x80000001, 0x2002)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000001040500000000000000000003000000080003400000fd2c060006400000000008000340000000000a0002000000000502"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x2000004)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c0001800800fffffffe0000"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

1.355613708s ago: executing program 5 (id=1129):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
close(0xffffffffffffffff)

1.283502694s ago: executing program 0 (id=1130):
set_mempolicy(0x3, 0x0, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x0, 0x6, 0x303, 0xfffc, 0x0, 0xfffffffe, 0x0})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.18347242s ago: executing program 5 (id=1131):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x2, "679f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "045197"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "157877"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, '?'}, &(0x7f0000000500)=ANY=[@ANYBLOB="2084040000009e19d3606e4e72bec8e1a53edf351cad1575a5214df148ead41436a100f00d38ae282310ae63c76eb73c665b05b38f0300000000000000e883a44d40e680fcd0338e024109f3303fd2a6221145594ced83e168d96c6fc3a1"], &(0x7f0000000440)={0x20, 0x85, 0x3, "e1c9e0"}})

1.086330864s ago: executing program 1 (id=1132):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev\x00')
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4008004)
syz_open_dev$sndmidi(&(0x7f0000000280), 0x1000000004, 0x31f0c3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f000055d000/0x2000)=nil, 0x2000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)

1.048642091s ago: executing program 0 (id=1133):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_rr_get_interval(r0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x40000000000000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000004c0)={0x0, "69dcaf20127e82eacd4c98458ee835be51682e30944313e2ca73845d2aba081880221daeccfda56b75cf2236da7d88ea07c9ee0000000000008c0a00", 0x8000001e}, 0x48, 0xfffffffffffffff9)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x82100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x62040200)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108)
open_tree(r4, &(0x7f00000003c0)='./file0\x00', 0x1001)
close_range(r6, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x0)

367.962539ms ago: executing program 2 (id=1134):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(r3, r3, 0x0)
ioctl$KDSKBLED(r1, 0x4b65, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_connect(0x1, 0x186, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x6, 0x94, 0x28, 0xff, 0x19d2, 0x157, 0x4e4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x1, 0x0, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x51, 0x79, 0x7, 0xff, 0xff, 0xff, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x5}}], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x40, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0x2, 0x20, [@generic={0xf0, 0x22, "e3a79b578e0d9a86cdf80a6defa8b6f7dd8a008f5e3a22890e762cb35a51ec4cc8cd4f112035fa1810b008873f6a5d9c55ed72b6d10f728ae58e4cf2ea2cd8127e7cd77d4059e6027f7a379793e213dc15392f1ba79ec5c4e5b5632a900409ba2dc1dd65abf9b82acddaee6a7220275a26cc721ad3e9070f296d39b13c17329c8478baa47291327b363a2f94ad6b897bf684aa94b6d199fb4769e6eb7aee07e68d81f951ccf9cfb16db0e1440ef51c101b7c24b52af0595b13323f90c226c6e8356ba62d713ca8426e3c82db2b784925d2ec068d059232cc8048fa767621d289a6d5fd9d77f1d508a8236acfc085"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7f}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xc, 0x78, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xfef7}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xd7, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xfff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0xd, 0x8, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x4}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0x5, 0x9, 0x8, 0x2b}, 0x5c, &(0x7f0000000280)={0x5, 0xf, 0x5c, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x9, 0xe, 0x3ff, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x1, 0xf00, 0x1, [0x30, 0x30, 0x0, 0xc000, 0x5f00, 0x7f8000]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x5522, 0xf00f, 0x9, [0xff0000, 0x30, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x69cd, 0xf0f, 0xff, [0x3ff0]}]}, 0x2, [{0x2e, &(0x7f0000000300)=@string={0x2e, 0x3, "75933fb33dbc2427e2e35bfebddd9a3f005c8047a1ee03492969dc6692a801b8d14083ea8d691f806067f2a9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}]})
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r4, 0x0, 0x0, 0x0, 0x0)

182.55489ms ago: executing program 0 (id=1135):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xf6}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff7", 0xd8}, {&(0x7f0000001000)="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", 0x16a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf", 0x20}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltfilter={0x68, 0x2d, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x4}, {0xd, 0xa}, {0x2, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffe7}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x7c}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4)
r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x44)
fsetxattr(r6, &(0x7f0000000400)=@random={'osx.', '*$\':-ca@@\x1e'}, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=1136):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_rr_get_interval(r0, &(0x7f00000001c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x40000000000000}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000004c0)={0x0, "69dcaf20127e82eacd4c98458ee835be51682e30944313e2ca73845d2aba081880221daeccfda56b75cf2236da7d88ea07c9ee0000000000008c0a00", 0x8000001e}, 0x48, 0xfffffffffffffff9)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
getrlimit(0x4, &(0x7f0000000240))
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x82100, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
unshare(0x62040200)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108)
open_tree(r4, 0x0, 0x1001)
close_range(r6, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

rch=c000003e syscall=257 compat=0 ip=0x7ff4e6b8bad0 code=0x7ffc0000
[  270.906610][   T30] audit: type=1326 audit(1743139264.048:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  270.932062][   T30] audit: type=1326 audit(1743139264.048:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  271.091773][   T30] audit: type=1326 audit(1743139264.048:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  271.922967][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'.
[  271.932018][   T30] audit: type=1326 audit(1743139264.048:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  272.077162][   T30] audit: type=1326 audit(1743139264.048:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  272.196335][   T30] audit: type=1326 audit(1743139264.048:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  272.255614][   T30] audit: type=1326 audit(1743139264.048:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8586 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  272.451422][   T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  272.460256][ T8613] usb usb8: usbfs: process 8613 (syz.3.661) did not claim interface 0 before use
[  272.638584][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'.
[  273.041191][   T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[  273.049552][   T10] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  273.059839][   T10] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 2
[  273.068878][   T10] usb 2-1: config 150 has no interface number 0
[  273.076030][   T10] usb 2-1: config 150 interface 204 has no altsetting 0
[  273.084696][   T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  273.093788][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.102118][   T10] usb 2-1: Product: syz
[  273.106293][   T10] usb 2-1: Manufacturer: syz
[  273.111909][   T10] usb 2-1: SerialNumber: syz
[  273.400734][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.409341][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.197483][ T8634] netlink: 'syz.0.668': attribute type 1 has an invalid length.
[  274.644158][ T5869] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  275.497237][ T5869] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  275.517303][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.532101][ T5869] usb 3-1: Product: syz
[  275.536377][ T5869] usb 3-1: Manufacturer: syz
[  275.543299][ T5869] usb 3-1: SerialNumber: syz
[  275.552569][ T5869] r8152-cfgselector 3-1: Unknown version 0x0000
[  275.558857][ T5869] r8152-cfgselector 3-1: config 0 descriptor??
[  275.701946][   T10] usb 2-1: USB disconnect, device number 9
[  275.731395][ T8652] xt_connbytes: Forcing CT accounting to be enabled
[  275.744348][ T8652] Cannot find set identified by id 0 to match
[  275.820329][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'.
[  276.050151][ T8659] netlink: 'syz.3.674': attribute type 1 has an invalid length.
[  276.801291][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  276.883910][ T8666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  276.890445][ T8666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  276.971207][ T8666] vhci_hcd vhci_hcd.0: Device attached
[  276.983306][   T10] usb 2-1: Using ep0 maxpacket: 8
[  276.992494][ T8666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  276.999861][ T8670] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11)
[  277.007443][ T8670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  277.016799][   T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  277.025508][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  277.037736][ T8666] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15)
[  277.044363][ T8666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  277.049853][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  277.061916][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  277.072215][ T8670] vhci_hcd vhci_hcd.0: Device attached
[  277.085292][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  277.115329][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  277.143022][ T8666] vhci_hcd vhci_hcd.0: Device attached
[  277.150130][  T972] vhci_hcd: vhci_device speed not set
[  277.171480][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.235132][  T972] usb 39-1: new high-speed USB device number 3 using vhci_hcd
[  277.260338][ T8666] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17)
[  277.266981][ T8666] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  277.304738][ T8666] vhci_hcd vhci_hcd.0: Device attached
[  277.333195][ T8670] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20)
[  277.339839][ T8670] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  277.414076][ T8683] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  277.478612][   T10] usb 2-1: usb_control_msg returned -32
[  277.506742][ T8666] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  277.517292][   T10] usbtmc 2-1:16.0: can't read capabilities
[  277.576763][ T8683] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  277.657113][ T8670] vhci_hcd vhci_hcd.0: Device attached
[  278.035385][ T8685] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  278.072394][ T8681] vhci_hcd: connection closed
[  278.083418][   T82] vhci_hcd: stop threads
[  278.093267][ T8667] vhci_hcd: connection reset by peer
[  278.093538][ T8678] vhci_hcd: connection closed
[  278.099468][ T8673] vhci_hcd: connection closed
[  278.106580][ T8671] vhci_hcd: connection closed
[  278.184522][   T82] vhci_hcd: release socket
[  278.199160][   T10] r8152-cfgselector 3-1: USB disconnect, device number 17
[  278.202346][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  278.202361][   T30] audit: type=1400 audit(1743139271.428:805): avc:  denied  { watch watch_reads } for  pid=8687 comm="syz.2.678" path="/127/file0" dev="tmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  278.253945][   T82] vhci_hcd: disconnect device
[  278.354324][   T82] vhci_hcd: stop threads
[  278.446580][   T82] vhci_hcd: release socket
[  278.515106][   T82] vhci_hcd: disconnect device
[  278.537446][   T82] vhci_hcd: stop threads
[  278.629324][   T82] vhci_hcd: release socket
[  278.634869][   T30] audit: type=1400 audit(1743139271.568:806): avc:  denied  { bind } for  pid=8688 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  278.647800][   T82] vhci_hcd: disconnect device
[  278.659023][   T30] audit: type=1400 audit(1743139271.578:807): avc:  denied  { listen } for  pid=8688 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  278.720830][ T8699] netlink: 'syz.3.680': attribute type 1 has an invalid length.
[  279.139457][   T82] vhci_hcd: stop threads
[  279.144808][   T82] vhci_hcd: release socket
[  279.155162][   T82] vhci_hcd: disconnect device
[  279.161775][   T82] vhci_hcd: stop threads
[  279.166118][   T82] vhci_hcd: release socket
[  279.172443][   T82] vhci_hcd: disconnect device
[  279.322367][ T3184] usb 2-1: USB disconnect, device number 10
[  279.755151][   T30] audit: type=1400 audit(1743139272.688:808): avc:  denied  { getopt } for  pid=8701 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  280.059912][ T5898] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  280.331212][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  280.347338][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'.
[  280.350647][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  280.415559][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  280.489891][ T5898] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  280.498963][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.542099][ T8714] ubi: mtd0 is already attached to ubi31
[  280.584991][ T5898] usb 4-1: config 0 descriptor??
[  280.599086][ T8711] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  280.651569][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.698331][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.706623][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.714257][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.722582][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.808583][   T30] audit: type=1400 audit(1743139273.968:809): avc:  denied  { mounton } for  pid=8722 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  280.899685][ T8730] netlink: 'syz.2.687': attribute type 1 has an invalid length.
[  281.312375][ T5898] usbhid 4-1:0.0: can't add hid device: -71
[  281.318392][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  281.376769][ T5898] usb 4-1: USB disconnect, device number 19
[  281.667372][ T8722] chnl_net:caif_netlink_parms(): no params data found
[  281.867997][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.875372][ T5867] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  281.965648][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.975270][ T8722] bridge_slave_0: entered allmulticast mode
[  281.993290][ T8722] bridge_slave_0: entered promiscuous mode
[  282.006609][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.017971][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.033812][ T8722] bridge_slave_1: entered allmulticast mode
[  282.044149][ T8722] bridge_slave_1: entered promiscuous mode
[  282.081793][ T8722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.106159][ T8722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.120097][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  282.129165][ T5867] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  282.170124][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  282.192403][ T8722] team0: Port device team_slave_0 added
[  282.199773][ T8722] team0: Port device team_slave_1 added
[  282.200409][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  282.235224][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  282.246592][ T8722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.253629][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  282.261794][ T8722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.300113][ T5867] usb 3-1: Product: syz
[  282.320970][ T5867] usb 3-1: Manufacturer: syz
[  282.348708][ T8722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.360723][ T5867] cdc_wdm 3-1:1.0: skipping garbage
[  282.365938][ T5867] cdc_wdm 3-1:1.0: skipping garbage
[  282.381540][ T5867] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  282.410100][  T972] vhci_hcd: vhci_device speed not set
[  282.424132][ T8722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.455540][ T8722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.457717][ T8744] FAULT_INJECTION: forcing a failure.
[  282.457717][ T8744] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  282.531105][ T8722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.543852][ T8744] CPU: 0 UID: 0 PID: 8744 Comm: syz.0.691 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  282.543879][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  282.543889][ T8744] Call Trace:
[  282.543894][ T8744]  <TASK>
[  282.543901][ T8744]  dump_stack_lvl+0x16c/0x1f0
[  282.543934][ T8744]  should_fail_ex+0x512/0x640
[  282.543955][ T8744]  should_fail_alloc_page+0xe7/0x130
[  282.543976][ T8744]  prepare_alloc_pages.constprop.0+0x172/0x570
[  282.544003][ T8744]  __alloc_frozen_pages_noprof+0x18f/0x24d0
[  282.544023][ T8744]  ? stack_trace_save+0x8e/0xc0
[  282.544041][ T8744]  ? __pfx_stack_trace_save+0x10/0x10
[  282.544059][ T8744]  ? stack_depot_save_flags+0x29/0x9c0
[  282.544082][ T8744]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  282.544106][ T8744]  ? cgroup_rstat_updated+0x2a/0xb20
[  282.544126][ T8744]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  282.544153][ T8744]  ? policy_nodemask+0xea/0x4e0
[  282.544173][ T8744]  alloc_pages_mpol+0x1fb/0x540
[  282.544192][ T8744]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  282.544214][ T8744]  alloc_pages_noprof+0x131/0x390
[  282.544233][ T8744]  pgd_alloc+0x3b/0x4e0
[  282.544255][ T8744]  mm_init+0x6cc/0x1210
[  282.544273][ T8744]  ? mm_alloc+0x1c/0xc0
[  282.544293][ T8744]  mm_alloc+0x9f/0xc0
[  282.544311][ T8744]  alloc_bprm+0x2ab/0xdd0
[  282.544335][ T8744]  ? strncpy_from_user+0x20a/0x2d0
[  282.544353][ T8744]  do_execveat_common.isra.0+0x1ce/0x610
[  282.544382][ T8744]  __x64_sys_execveat+0xda/0x120
[  282.544409][ T8744]  do_syscall_64+0xcd/0x260
[  282.544425][ T8744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.544442][ T8744] RIP: 0033:0x7ff4e6b8d169
[  282.544456][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.544472][ T8744] RSP: 002b:00007ff4e7a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  282.544488][ T8744] RAX: ffffffffffffffda RBX: 00007ff4e6da5fa0 RCX: 00007ff4e6b8d169
[  282.544499][ T8744] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  282.544510][ T8744] RBP: 00007ff4e7a38090 R08: 0000000000000000 R09: 0000000000000000
[  282.544519][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.544529][ T8744] R13: 0000000000000000 R14: 00007ff4e6da5fa0 R15: 00007ffc702ab6e8
[  282.544548][ T8744]  </TASK>
[  282.982773][ T5141] Bluetooth: hci5: command tx timeout
[  283.014915][ T8722] hsr_slave_0: entered promiscuous mode
[  283.021168][ T8722] hsr_slave_1: entered promiscuous mode
[  283.089953][   T30] audit: type=1400 audit(1743139276.248:810): avc:  denied  { write } for  pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.319195][   T30] audit: type=1400 audit(1743139276.248:811): avc:  denied  { remove_name } for  pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.400455][ T8722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.409067][ T8722] Cannot create hsr debugfs directory
[  283.502047][   T30] audit: type=1400 audit(1743139276.248:812): avc:  denied  { rename } for  pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  283.529430][   T30] audit: type=1400 audit(1743139276.248:813): avc:  denied  { add_name } for  pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  283.997533][   T30] audit: type=1400 audit(1743139276.248:814): avc:  denied  { unlink } for  pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  284.028122][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.693'.
[  284.039415][   T30] audit: type=1400 audit(1743139276.248:815): avc:  denied  { create } for  pid=5172 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  284.167836][   T30] audit: type=1400 audit(1743139277.258:816): avc:  denied  { ioctl } for  pid=8756 comm="syz.0.693" path="socket:[19027]" dev="sockfs" ino=19027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  284.355272][ T8722] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  284.364884][ T8722] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  284.374037][ T8722] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  284.433748][ T8769] netlink: 'syz.3.694': attribute type 1 has an invalid length.
[  284.781307][ T8771] netlink: 'syz.0.696': attribute type 1 has an invalid length.
[  285.200346][ T5141] Bluetooth: hci5: command tx timeout
[  285.248018][ T3184] usb 3-1: USB disconnect, device number 18
[  285.279160][ T8722] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  285.522897][ T8722] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.538087][ T8722] 8021q: adding VLAN 0 to HW filter on device team0
[  285.651107][ T8782] netlink: 'syz.3.700': attribute type 1 has an invalid length.
[  285.831220][ T8784] netlink: 'syz.1.699': attribute type 1 has an invalid length.
[  285.886048][ T8722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  286.003212][ T8722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.128826][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.136899][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.278352][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.285486][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.771851][   T30] audit: type=1400 audit(1743139279.998:817): avc:  denied  { write } for  pid=8806 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  286.820749][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.860845][ T3184] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  286.872208][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[  287.139896][ T3184] usb 3-1: Using ep0 maxpacket: 8
[  287.149691][ T3184] usb 3-1: config index 0 descriptor too short (expected 82, got 18)
[  287.159918][ T3184] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  287.170317][ T3184] usb 3-1: config 13 has 0 interfaces, different from the descriptor's value: 3
[  287.181357][ T3184] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=fb.f4
[  287.193906][ T3184] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  287.210310][ T5141] Bluetooth: hci5: command tx timeout
[  287.221087][ T3184] usb 3-1: Product: syz
[  287.225270][ T3184] usb 3-1: Manufacturer: syz
[  287.228652][ T8722] veth0_vlan: entered promiscuous mode
[  287.242859][ T3184] usb 3-1: SerialNumber: syz
[  287.257243][ T8722] veth1_vlan: entered promiscuous mode
[  287.312015][ T8722] veth0_macvtap: entered promiscuous mode
[  287.323763][ T8722] veth1_macvtap: entered promiscuous mode
[  287.344581][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.360783][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.375269][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.387295][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.401204][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.417872][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.429499][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.444134][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.466540][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.485661][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.498558][ T8722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.515397][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.533182][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.544722][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.559609][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.573307][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.584178][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.597283][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.608135][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.621386][ T8722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.643546][ T8722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.652179][   T30] audit: type=1400 audit(1743139280.888:818): avc:  denied  { connect } for  pid=8826 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  287.663177][ T8722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.674666][   T30] audit: type=1400 audit(1743139280.908:819): avc:  denied  { write } for  pid=8826 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  287.718312][ T8722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.757849][   T30] audit: type=1400 audit(1743139280.958:820): avc:  denied  { read } for  pid=8826 comm="syz.0.711" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  287.758251][ T8722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.815438][ T8722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.849910][ T8722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.976607][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.988435][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.152643][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.172787][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.185478][ T8841] netlink: 'syz.3.713': attribute type 1 has an invalid length.
[  288.346853][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  288.346893][   T30] audit: type=1400 audit(1743139281.578:824): avc:  denied  { mounton } for  pid=8722 comm="syz-executor" path="/root/syzkaller.k4xcpw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  288.380244][   T30] audit: type=1400 audit(1743139281.578:825): avc:  denied  { mounton } for  pid=8722 comm="syz-executor" path="/root/syzkaller.k4xcpw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  288.600063][   T30] audit: type=1400 audit(1743139281.828:826): avc:  denied  { mounton } for  pid=8722 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  289.080040][   T30] audit: type=1400 audit(1743139281.838:827): avc:  denied  { mount } for  pid=8722 comm="syz-executor" name="/" dev="gadgetfs" ino=7328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  289.116655][   T30] audit: type=1400 audit(1743139281.938:828): avc:  denied  { mounton } for  pid=8722 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  289.290900][ T5141] Bluetooth: hci5: command tx timeout
[  289.373632][ T8861] veth0_vlan: entered allmulticast mode
[  289.437510][ T8861] veth0_vlan: left promiscuous mode
[  289.449377][ T8861] veth0_vlan: entered promiscuous mode
[  289.821209][  T972] usb 3-1: USB disconnect, device number 19
[  291.610024][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  291.781596][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.816484][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.836713][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  291.867407][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.907075][   T10] usb 1-1: config 0 descriptor??
[  292.014611][   T30] audit: type=1400 audit(1743139285.248:829): avc:  denied  { read } for  pid=8883 comm="syz.3.724" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  292.767092][   T30] audit: type=1400 audit(1743139285.528:830): avc:  denied  { write } for  pid=8883 comm="syz.3.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  292.786302][    C1] vkms_vblank_simulate: vblank timer overrun
[  292.810525][   T30] audit: type=1400 audit(1743139286.048:831): avc:  denied  { map } for  pid=8876 comm="syz.0.721" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  292.820155][ T8875] ALSA: mixer_oss: invalid OSS volume ''
[  292.899468][   T10] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  292.920102][   T10] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  293.099202][   T10] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE
[  293.964886][   T30] audit: type=1400 audit(1743139287.198:832): avc:  denied  { unmount } for  pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  294.227478][   T30] audit: type=1400 audit(1743139287.458:833): avc:  denied  { bind } for  pid=8897 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  294.311864][ T5898] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  294.326136][ T8904] netlink: 'syz.3.730': attribute type 1 has an invalid length.
[  294.334123][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'.
[  294.344300][ T5141] Bluetooth: hci1: unexpected event for opcode 0x1405
[  294.357246][   T30] audit: type=1400 audit(1743139287.478:834): avc:  denied  { name_bind } for  pid=8897 comm="syz.1.727" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  294.380661][   T30] audit: type=1400 audit(1743139287.478:835): avc:  denied  { node_bind } for  pid=8897 comm="syz.1.727" saddr=fc01::8 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  294.403331][    C1] vkms_vblank_simulate: vblank timer overrun
[  294.526362][   T30] audit: type=1400 audit(1743139287.668:836): avc:  denied  { bind } for  pid=8903 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  294.597771][   T30] audit: type=1400 audit(1743139287.668:837): avc:  denied  { node_bind } for  pid=8903 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  294.630501][   T10] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71
[  294.639671][   T10] usb 1-1: USB disconnect, device number 11
[  294.642777][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.685459][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.775427][ T5898] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  294.786452][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.905346][   T30] audit: type=1326 audit(1743139288.088:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc678d169 code=0x7ffc0000
[  294.947793][ T5898] usb 3-1: config 0 descriptor??
[  294.974816][   T30] audit: type=1326 audit(1743139288.088:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8bc678d169 code=0x7ffc0000
[  295.002173][   T30] audit: type=1326 audit(1743139288.088:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc678d169 code=0x7ffc0000
[  295.479748][   T30] audit: type=1326 audit(1743139288.088:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc678bad0 code=0x7ffc0000
[  295.734644][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'.
[  296.550411][ T5898] usb 3-1: language id specifier not provided by device, defaulting to English
[  296.652869][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[  296.661892][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  296.688047][ T8932] netlink: 'syz.1.738': attribute type 29 has an invalid length.
[  297.327863][ T5898] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71
[  297.352001][ T5898] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71
[  297.692500][ T5898] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71
[  297.787938][ T5898] uclogic 0003:256C:006D.000C: failed probing parameters: -71
[  297.810775][ T5898] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71
[  297.841856][ T5898] usb 3-1: USB disconnect, device number 20
[  301.446413][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  302.299914][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  302.299928][   T30] audit: type=1326 audit(1743139295.528:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  302.386211][   T30] audit: type=1326 audit(1743139295.528:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  302.415099][  T972] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  302.593948][   T30] audit: type=1326 audit(1743139295.528:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  302.620875][ T9014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9014 comm=syz.3.760
[  302.689466][   T30] audit: type=1326 audit(1743139295.528:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8243d8bad0 code=0x7ffc0000
[  302.763190][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  302.784430][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.817222][   T30] audit: type=1326 audit(1743139295.538:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  302.849910][  T972] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  302.879255][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.910141][   T30] audit: type=1326 audit(1743139295.538:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  302.934563][  T972] usb 2-1: config 0 descriptor??
[  302.974393][   T30] audit: type=1326 audit(1743139295.538:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  303.062771][   T30] audit: type=1326 audit(1743139295.538:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  303.108517][   T30] audit: type=1326 audit(1743139295.538:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  303.184633][   T30] audit: type=1326 audit(1743139295.538:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8243d8d169 code=0x7ffc0000
[  303.506218][ T9014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  303.522075][ T9014] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  303.626923][ T9014] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  303.697715][ T9014] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  303.765424][ T9014] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  303.805916][ T9014] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  303.852655][ T9014] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  303.877916][ T9014] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  303.960945][ T9054] syzkaller0: entered promiscuous mode
[  304.051464][ T9054] syzkaller0: entered allmulticast mode
[  304.595941][  T972] usbhid 2-1:0.0: can't add hid device: -71
[  304.607801][  T972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  304.630435][ T9014] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  304.638625][  T972] usb 2-1: USB disconnect, device number 11
[  304.658752][ T9014] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  305.129099][  T972] libceph: connect (1)[c::]:6789 error -101
[  305.135801][  T972] libceph: mon0 (1)[c::]:6789 connect error
[  305.161910][ T9090] ceph: No mds server is up or the cluster is laggy
[  306.598402][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'.
[  306.891862][ T5141] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  307.643823][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  307.643839][   T30] audit: type=1400 audit(1743139300.878:866): avc:  denied  { load_policy } for  pid=9139 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  307.644002][ T9140] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  307.693286][ T9141] netlink: 'syz.0.775': attribute type 13 has an invalid length.
[  307.701309][ T9141] netlink: 'syz.0.775': attribute type 27 has an invalid length.
[  307.715083][ T9141] UHID_CREATE from different security context by process 584 (syz.0.775), this is not allowed.
[  307.727267][   T30] audit: type=1400 audit(1743139300.948:867): avc:  denied  { write } for  pid=9139 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  307.751086][ T9140] SELinux: failed to load policy
[  307.791139][  T972] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  307.980050][  T972] usb 3-1: Using ep0 maxpacket: 8
[  307.992510][  T972] usb 3-1: config index 0 descriptor too short (expected 119, got 27)
[  308.101863][  T972] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8
[  308.171443][ T9156] autofs: Unknown parameter 'ì9Ú'
[  308.189848][  T972] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.264894][  T972] usb 3-1: config 1 interface 0 has no altsetting 0
[  308.298214][  T972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  308.327884][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.379846][   T30] audit: type=1326 audit(1743139301.588:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  308.410456][  T972] usb 3-1: Product: �䮔�玳祦�蠧뵟�듗ࠖ�婃㲔뤎㌚ꊶ嫅祛짆Ƹ鱨�険�렯�ত��㡳建�⇎㨖ﳆ솯趩�䶤⥓슢崹믨箥�ᷠ际콨檑裀䥎�펛ϊ�짛᯼�턒볰䰓痫ffl蹑쇟᠓Ὃᡴ᠕᜵�쀸䩞굮㔚霌ꆳ魄嬥룆��蘱ꅮ﮳ĉ鋬ლ뽇㥛໽ᤴ᷵佯
[  308.519958][   T30] audit: type=1326 audit(1743139301.588:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  308.558543][  T972] usb 3-1: Manufacturer: â°�
[  308.580217][ T9134] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  309.096932][   T30] audit: type=1326 audit(1743139301.728:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  309.120375][   T30] audit: type=1326 audit(1743139301.728:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  309.144073][   T30] audit: type=1326 audit(1743139301.728:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fcfb8bad0 code=0x7ffc0000
[  309.383733][   T30] audit: type=1326 audit(1743139301.728:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  309.426838][   T30] audit: type=1326 audit(1743139301.728:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  309.550602][   T30] audit: type=1326 audit(1743139301.728:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.3.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  309.735696][  T972] usb 3-1: USB disconnect, device number 21
[  309.779068][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'.
[  310.599902][   T24] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  310.780007][ T5818] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  310.821316][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'.
[  310.880057][   T24] usb 3-1: config 7 has an invalid interface number: 34 but max is 0
[  311.345367][   T24] usb 3-1: config 7 has no interface number 0
[  311.365741][   T24] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  311.383336][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.404433][   T24] usb 3-1: Product: syz
[  311.408707][   T24] usb 3-1: Manufacturer: syz
[  311.414656][   T24] usb 3-1: SerialNumber: syz
[  311.421285][ T5818] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  311.432734][ T5818] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  311.443273][ T5818] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  311.459968][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.471269][ T9188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  311.639310][ T5818] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  311.759753][ T9215] netlink: 56 bytes leftover after parsing attributes in process `syz.5.790'.
[  312.398739][   T24] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  312.419894][  T972] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  312.860533][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  312.860553][   T30] audit: type=1400 audit(1743139305.778:881): avc:  denied  { read } for  pid=9189 comm="syz.2.784" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  312.891906][   T30] audit: type=1400 audit(1743139305.778:882): avc:  denied  { open } for  pid=9189 comm="syz.2.784" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  312.916761][   T30] audit: type=1400 audit(1743139305.778:883): avc:  denied  { ioctl } for  pid=9189 comm="syz.2.784" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  313.198797][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  313.216045][   T24] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  313.225459][   T24] dvb_usb_cxusb 3-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  313.247522][    T9] usb 3-1: USB disconnect, device number 22
[  313.266963][ T5819] udevd[5819]: setting mode of /dev/bus/usb/003/022 to 020664 failed: No such file or directory
[  313.287767][ T5819] udevd[5819]: setting owner of /dev/bus/usb/003/022 to uid=0, gid=0 failed: No such file or directory
[  314.374122][  T972] usb 6-1: Using ep0 maxpacket: 8
[  314.390379][  T972] usb 6-1: config 0 has no interfaces?
[  314.400052][  T972] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  314.409971][  T972] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  314.418097][  T972] usb 6-1: Product: syz
[  314.428214][  T972] usb 6-1: Manufacturer: syz
[  314.433665][  T972] usb 6-1: SerialNumber: syz
[  314.450484][  T972] usb 6-1: config 0 descriptor??
[  314.632967][ T9246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9246 comm=syz.3.797
[  314.672386][   T24] usb 1-1: USB disconnect, device number 12
[  314.684388][   T30] audit: type=1400 audit(1743139307.898:884): avc:  denied  { nlmsg_write } for  pid=9214 comm="syz.5.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  314.778446][ T5867] usb 6-1: USB disconnect, device number 2
[  314.784791][   T30] audit: type=1400 audit(1743139307.908:885): avc:  denied  { read } for  pid=9244 comm="syz.3.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  314.836406][   T30] audit: type=1400 audit(1743139308.058:886): avc:  denied  { setopt } for  pid=9247 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  314.858277][   T30] audit: type=1400 audit(1743139308.058:887): avc:  denied  { append } for  pid=9247 comm="syz.2.798" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  314.858311][   T30] audit: type=1400 audit(1743139308.058:888): avc:  denied  { ioctl } for  pid=9247 comm="syz.2.798" path="socket:[21831]" dev="sockfs" ino=21831 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  314.962981][   T30] audit: type=1326 audit(1743139308.198:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  315.027513][   T30] audit: type=1326 audit(1743139308.198:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9242 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  315.050742][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.090993][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'.
[  316.742107][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  316.748573][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.770295][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'.
[  317.820461][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'.
[  318.001125][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  318.001139][   T30] audit: type=1400 audit(1743139311.238:911): avc:  denied  { read } for  pid=9281 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  318.036495][   T30] audit: type=1400 audit(1743139311.258:912): avc:  denied  { setopt } for  pid=9281 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  318.161196][ T9308] capability: warning: `syz.2.811' uses 32-bit capabilities (legacy support in use)
[  318.215755][ T5898] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  318.501109][   T30] audit: type=1400 audit(1743139311.408:913): avc:  denied  { watch } for  pid=9305 comm="syz.2.811" path="/153" dev="tmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  318.549881][   T30] audit: type=1400 audit(1743139311.408:914): avc:  denied  { watch_sb } for  pid=9305 comm="syz.2.811" path="/153" dev="tmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  318.642130][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  318.663935][ T5898] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  318.679691][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.694125][ T5898] usb 6-1: config 0 descriptor??
[  318.708967][ T9299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  318.750469][  T972] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  318.849136][ T9319] syz_tun: entered allmulticast mode
[  318.865042][ T9319] pimreg: entered allmulticast mode
[  318.923101][  T972] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  318.936826][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.938481][ T9318] syz_tun: left allmulticast mode
[  318.945108][  T972] usb 3-1: Product: syz
[  318.971167][ T9318] pimreg: left allmulticast mode
[  318.974978][  T972] usb 3-1: Manufacturer: syz
[  318.986971][  T972] usb 3-1: SerialNumber: syz
[  319.005028][  T972] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  319.106246][   T30] audit: type=1400 audit(1743139312.338:915): avc:  denied  { firmware_load } for  pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  319.127210][ T5898] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  319.147121][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  319.730383][ T5898] usb 3-1: USB disconnect, device number 23
[  320.143549][ T5818] usb 6-1: USB disconnect, device number 3
[  320.262421][   T30] audit: type=1326 audit(1743139313.498:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  320.284817][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  320.293413][    T9] ath9k_htc: Failed to initialize the device
[  320.303730][   T30] audit: type=1326 audit(1743139313.528:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  320.330052][ T5898] usb 3-1: ath9k_htc: USB layer deinitialized
[  321.089969][ T5141] Bluetooth: hci6: command 0x1003 tx timeout
[  321.096286][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  321.134515][   T30] audit: type=1326 audit(1743139313.528:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  321.157872][   T30] audit: type=1326 audit(1743139313.528:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  321.181144][   T30] audit: type=1326 audit(1743139313.528:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.1.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99e078bad0 code=0x7ffc0000
[  322.571757][ T9360] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  322.597261][ T9360] overlay: ./bus is not a directory
[  323.842605][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  323.842627][   T30] audit: type=1400 audit(1743139317.058:941): avc:  denied  { setopt } for  pid=9376 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  323.924756][   T30] audit: type=1400 audit(1743139317.108:942): avc:  denied  { write } for  pid=9380 comm="syz.1.833" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  324.002251][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'.
[  324.609942][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  324.935645][ T9395] overlayfs: missing 'lowerdir'
[  324.990178][   T30] audit: type=1326 audit(1743139317.918:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  325.139873][   T30] audit: type=1326 audit(1743139317.918:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  325.176484][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.240766][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.789010][    T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  325.812399][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.865909][    T9] usb 6-1: config 0 descriptor??
[  327.081161][   T30] audit: type=1326 audit(1743139317.918:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.177795][    T9] usbhid 6-1:0.0: can't add hid device: -32
[  327.207995][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  327.209018][   T30] audit: type=1326 audit(1743139317.918:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.239731][   T30] audit: type=1326 audit(1743139317.918:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.263325][   T30] audit: type=1326 audit(1743139317.918:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.616052][    T9] usb 6-1: USB disconnect, device number 4
[  327.623189][   T30] audit: type=1326 audit(1743139317.918:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.727659][   T30] audit: type=1326 audit(1743139317.918:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9391 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99e078d169 code=0x7ffc0000
[  327.784656][ T9411] o2cb: This node has not been configured.
[  327.791756][ T9411] o2cb: Cluster check failed. Fix errors before retrying.
[  327.803404][ T9411] (syz.0.842,9411,0):user_dlm_register:674 ERROR: status = -22
[  327.811529][ T9411] (syz.0.842,9411,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1"
[  328.681768][ T9430] XFS (nullb0): Invalid superblock magic number
[  328.806896][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.848'.
[  328.906859][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  328.906874][   T30] audit: type=1326 audit(1743139322.138:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  328.939512][   T30] audit: type=1326 audit(1743139322.138:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  328.979948][   T30] audit: type=1400 audit(1743139322.208:982): avc:  denied  { block_suspend } for  pid=9445 comm="syz.0.849" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  329.010199][   T30] audit: type=1326 audit(1743139322.238:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.040546][   T30] audit: type=1326 audit(1743139322.238:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.335000][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  329.347920][   T30] audit: type=1326 audit(1743139322.238:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fcfb8bad0 code=0x7ffc0000
[  329.371256][   T30] audit: type=1326 audit(1743139322.238:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.399280][   T30] audit: type=1326 audit(1743139322.238:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.456457][   T30] audit: type=1326 audit(1743139322.238:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.503932][   T30] audit: type=1326 audit(1743139322.238:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9409 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  329.624418][    T9] usb 6-1: config 0 has an invalid interface number: 53 but max is 0
[  329.639926][    T9] usb 6-1: config 0 has no interface number 0
[  329.646609][    T9] usb 6-1: config 0 interface 53 has no altsetting 0
[  329.668590][    T9] usb 6-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice= 0.ec
[  330.164542][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.432695][    T9] usb 6-1: config 0 descriptor??
[  331.061304][    T9] usb 6-1: string descriptor 0 read error: -71
[  331.081948][    T9] ftdi_sio 6-1:0.53: FTDI USB Serial Device converter detected
[  331.135556][    T9] usb 6-1: Detected SIO
[  331.143556][    T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  331.164764][    T9] usb 6-1: USB disconnect, device number 5
[  331.224840][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  331.629990][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  331.690527][    T9] ftdi_sio 6-1:0.53: device disconnected
[  331.861269][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.899100][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.936037][   T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  331.950001][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.034563][   T24] usb 3-1: config 0 descriptor??
[  332.625751][ T9479] netlink: 80 bytes leftover after parsing attributes in process `syz.5.856'.
[  332.835759][   T24] usbhid 3-1:0.0: can't add hid device: -32
[  333.189771][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  333.216900][   T24] usb 3-1: USB disconnect, device number 24
[  333.309995][ T3184] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  333.397245][ T9496] FAULT_INJECTION: forcing a failure.
[  333.397245][ T9496] name failslab, interval 1, probability 0, space 0, times 0
[  333.413564][ T9496] CPU: 1 UID: 0 PID: 9496 Comm: syz.2.861 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  333.413589][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.413600][ T9496] Call Trace:
[  333.413605][ T9496]  <TASK>
[  333.413611][ T9496]  dump_stack_lvl+0x16c/0x1f0
[  333.413642][ T9496]  should_fail_ex+0x512/0x640
[  333.413662][ T9496]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  333.413681][ T9496]  should_failslab+0xc2/0x120
[  333.413699][ T9496]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  333.413715][ T9496]  ? getname_flags.part.0+0x48/0x540
[  333.413739][ T9496]  getname_flags.part.0+0x48/0x540
[  333.413762][ T9496]  getname_flags+0x93/0xf0
[  333.413787][ T9496]  user_path_at+0x24/0x60
[  333.413803][ T9496]  __x64_sys_mount+0x1fc/0x310
[  333.413822][ T9496]  ? __pfx___x64_sys_mount+0x10/0x10
[  333.413839][ T9496]  ? rcu_is_watching+0x12/0xc0
[  333.413868][ T9496]  do_syscall_64+0xcd/0x260
[  333.413885][ T9496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.413901][ T9496] RIP: 0033:0x7f8243d8d169
[  333.413914][ T9496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.413931][ T9496] RSP: 002b:00007f8244ca3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  333.413949][ T9496] RAX: ffffffffffffffda RBX: 00007f8243fa5fa0 RCX: 00007f8243d8d169
[  333.413960][ T9496] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  333.413971][ T9496] RBP: 00007f8244ca3090 R08: 0000200000000400 R09: 0000000000000000
[  333.413982][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.413992][ T9496] R13: 0000000000000000 R14: 00007f8243fa5fa0 R15: 00007ffc87bfa7b8
[  333.414011][ T9496]  </TASK>
[  333.675993][ T3184] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.686237][ T3184] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  333.695489][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  333.715706][ T3184] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  333.724826][ T3184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  333.733111][ T3184] usb 1-1: SerialNumber: syz
[  333.833410][ T9503] sctp: [Deprecated]: syz.2.862 (pid 9503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.833410][ T9503] Use struct sctp_sack_info instead
[  333.905034][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  333.917713][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  333.929022][ T5898] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  333.995339][ T5898] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  334.078181][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.170265][ T5898] usb 6-1: Product: syz
[  334.174824][ T5898] usb 6-1: Manufacturer: syz
[  334.195423][ T5898] usb 6-1: SerialNumber: syz
[  334.227761][ T9508] FAULT_INJECTION: forcing a failure.
[  334.227761][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.249996][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.3.863 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  334.250027][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  334.250038][ T9508] Call Trace:
[  334.250043][ T9508]  <TASK>
[  334.250051][ T9508]  dump_stack_lvl+0x16c/0x1f0
[  334.250089][ T9508]  should_fail_ex+0x512/0x640
[  334.250112][ T9508]  _copy_to_iter+0x477/0x15a0
[  334.250137][ T9508]  ? find_held_lock+0x2b/0x80
[  334.250156][ T9508]  ? __pfx__copy_to_iter+0x10/0x10
[  334.250182][ T9508]  ? __virt_addr_valid+0x5e/0x590
[  334.250208][ T9508]  ? __phys_addr_symbol+0x30/0x80
[  334.250232][ T9508]  ? __check_object_size+0x4c7/0x710
[  334.250255][ T9508]  seq_read_iter+0xd02/0x12b0
[  334.250289][ T9508]  seq_read+0x39e/0x4e0
[  334.250314][ T9508]  ? __pfx_seq_read+0x10/0x10
[  334.250345][ T9508]  ? avc_policy_seqno+0x9/0x20
[  334.250369][ T9508]  ? rw_verify_area+0xcf/0x680
[  334.250394][ T9508]  ? __pfx_seq_read+0x10/0x10
[  334.250420][ T9508]  vfs_read+0x1de/0xc70
[  334.250447][ T9508]  ? fdget_pos+0x2a2/0x370
[  334.250466][ T9508]  ? __pfx___mutex_lock+0x10/0x10
[  334.250482][ T9508]  ? __pfx_vfs_read+0x10/0x10
[  334.250514][ T9508]  ? __fget_files+0x20e/0x3c0
[  334.250535][ T9508]  ksys_read+0x12a/0x240
[  334.250561][ T9508]  ? __pfx_ksys_read+0x10/0x10
[  334.250587][ T9508]  ? rcu_is_watching+0x12/0xc0
[  334.250612][ T9508]  do_syscall_64+0xcd/0x260
[  334.250630][ T9508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.250649][ T9508] RIP: 0033:0x7f9fcfb8d169
[  334.250666][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.250684][ T9508] RSP: 002b:00007f9fd0a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  334.250703][ T9508] RAX: ffffffffffffffda RBX: 00007f9fcfda6160 RCX: 00007f9fcfb8d169
[  334.250714][ T9508] RDX: 00000000fffffcfd RSI: 0000200000000200 RDI: 0000000000000004
[  334.250726][ T9508] RBP: 00007f9fd0a20090 R08: 0000000000000000 R09: 0000000000000000
[  334.250736][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.250747][ T9508] R13: 0000000000000000 R14: 00007f9fcfda6160 R15: 00007ffd0edd05e8
[  334.250768][ T9508]  </TASK>
[  334.560732][ T5898] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  334.567632][ T5898] cdc_ncm 6-1:1.0: bind() failure
[  334.834852][    T9] usb 6-1: USB disconnect, device number 6
[  334.863849][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  334.863872][   T30] audit: type=1400 audit(1743139328.068:998): avc:  denied  { setopt } for  pid=9492 comm="syz.5.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  335.029962][ T3184] usb 1-1: invalid UAC_HEADER (v1)
[  335.045397][ T3184] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  335.060661][ T3184] usb 1-1: USB disconnect, device number 13
[  335.250633][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  335.619273][   T30] audit: type=1400 audit(1743139328.848:999): avc:  denied  { write } for  pid=9525 comm="syz.5.869" path="socket:[23489]" dev="sockfs" ino=23489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  336.491427][ T9532] syz.0.867 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  336.650404][ T9535] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  336.741793][   T30] audit: type=1400 audit(1743139329.978:1000): avc:  denied  { setopt } for  pid=9533 comm="syz.5.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  338.022577][  T972] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  338.159964][  T972] usb 2-1: device descriptor read/64, error -71
[  338.890029][  T972] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  339.150012][   T30] audit: type=1400 audit(1743139332.378:1001): avc:  denied  { create } for  pid=9568 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  339.180058][  T972] usb 2-1: device descriptor read/64, error -71
[  339.276271][ T9566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  339.304271][  T972] usb usb2-port1: attempt power cycle
[  339.660275][  T972] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  340.040571][  T972] usb 2-1: device descriptor read/8, error -71
[  340.300246][  T972] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  340.363073][  T972] usb 2-1: device descriptor read/8, error -71
[  340.432267][   T30] audit: type=1400 audit(1743139333.668:1002): avc:  denied  { getopt } for  pid=9595 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  340.461023][ T9578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  340.468724][ T9578] IPv6: NLM_F_CREATE should be set when creating new route
[  340.521199][  T972] usb usb2-port1: unable to enumerate USB device
[  340.543202][   T30] audit: type=1400 audit(1743139333.688:1003): avc:  denied  { compute_member } for  pid=9595 comm="syz.5.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  340.595081][   T10] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  340.751274][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  340.759605][   T10] usb 4-1: config 0 has no interface number 0
[  340.782594][   T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12703, setting to 8
[  341.229924][   T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  341.239027][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.250170][   T10] usb 4-1: config 0 descriptor??
[  341.259080][ T9591] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  341.280327][   T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  341.490455][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.511059][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.779881][ T3184] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  341.875384][ T5818] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  342.203114][   T10] usb 4-1: USB disconnect, device number 20
[  342.459850][   T30] audit: type=1400 audit(1743139335.678:1004): avc:  denied  { append } for  pid=9621 comm="syz.5.894" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  342.530925][ T5818] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  342.552933][ T3184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.564008][ T5818] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  342.585849][ T3184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.606837][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  342.616374][ T3184] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  342.627234][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  342.641787][ T3184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.652555][ T5818] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  342.666045][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  342.675910][ T3184] usb 1-1: config 0 descriptor??
[  342.690054][ T5818] usb 3-1: Product: syz
[  342.703808][ T5818] usb 3-1: Manufacturer: syz
[  342.719607][ T5818] cdc_wdm 3-1:1.0: skipping garbage
[  342.725388][ T5818] cdc_wdm 3-1:1.0: skipping garbage
[  342.739904][ T5818] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  342.802994][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[  342.839930][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  343.174162][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  343.691983][ T3184] usbhid 1-1:0.0: can't add hid device: -32
[  343.698365][   T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  343.713502][ T3184] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  343.926814][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  343.936602][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  343.953968][ T3184] usb 1-1: USB disconnect, device number 14
[  343.980367][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  343.989481][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  344.027192][   T10] usb 4-1: Product: syz
[  344.035537][   T10] usb 4-1: Manufacturer: syz
[  344.122947][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  344.154144][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  344.159510][   T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  344.187362][ T9644] FAULT_INJECTION: forcing a failure.
[  344.187362][ T9644] name failslab, interval 1, probability 0, space 0, times 0
[  344.200287][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.1.899 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  344.200302][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  344.200308][ T9644] Call Trace:
[  344.200313][ T9644]  <TASK>
[  344.200317][ T9644]  dump_stack_lvl+0x16c/0x1f0
[  344.200340][ T9644]  should_fail_ex+0x512/0x640
[  344.200354][ T9644]  should_failslab+0xc2/0x120
[  344.200367][ T9644]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  344.200379][ T9644]  ? inet_bind_bucket_create+0x2d/0x280
[  344.200393][ T9644]  inet_bind_bucket_create+0x2d/0x280
[  344.200405][ T9644]  inet_csk_get_port+0x116a/0x28d0
[  344.200422][ T9644]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  344.200442][ T9644]  ? __local_bh_enable_ip+0xa4/0x120
[  344.200456][ T9644]  __inet6_bind+0x57e/0x1ab0
[  344.200469][ T9644]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  344.200489][ T9644]  inet6_bind_sk+0x179/0x230
[  344.200502][ T9644]  ? __pfx_inet6_bind_sk+0x10/0x10
[  344.200518][ T9644]  __sys_bind+0x211/0x260
[  344.200531][ T9644]  ? __pfx___sys_bind+0x10/0x10
[  344.200540][ T9644]  ? __fget_files+0x20e/0x3c0
[  344.200554][ T9644]  ? __pfx_ksys_write+0x10/0x10
[  344.200573][ T9644]  __x64_sys_bind+0x72/0xb0
[  344.200582][ T9644]  ? lockdep_hardirqs_on+0x7c/0x110
[  344.200599][ T9644]  do_syscall_64+0xcd/0x260
[  344.200609][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.200620][ T9644] RIP: 0033:0x7f99e078d169
[  344.200630][ T9644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.200640][ T9644] RSP: 002b:00007f99e157f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  344.200650][ T9644] RAX: ffffffffffffffda RBX: 00007f99e09a6080 RCX: 00007f99e078d169
[  344.200657][ T9644] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000008
[  344.200663][ T9644] RBP: 00007f99e157f090 R08: 0000000000000000 R09: 0000000000000000
[  344.200669][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.200675][ T9644] R13: 0000000000000000 R14: 00007f99e09a6080 R15: 00007ffdfec7c3f8
[  344.200687][ T9644]  </TASK>
[  344.202742][   T30] audit: type=1400 audit(1743139337.438:1005): avc:  denied  { setopt } for  pid=9642 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  344.451586][   T30] audit: type=1400 audit(1743139337.668:1006): avc:  denied  { connect } for  pid=9642 comm="syz.1.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  344.487928][   T30] audit: type=1400 audit(1743139337.668:1007): avc:  denied  { name_connect } for  pid=9642 comm="syz.1.899" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  344.531344][   T30] audit: type=1400 audit(1743139337.668:1008): avc:  denied  { accept } for  pid=9642 comm="syz.1.899" lport=57063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  344.699912][  T972] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  345.259685][ T5818] usb 3-1: USB disconnect, device number 25
[  345.270118][  T972] usb 1-1: Using ep0 maxpacket: 8
[  345.276783][  T972] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  345.306280][  T972] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.330202][  T972] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  345.341745][  T972] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  345.352879][  T972] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  345.375204][  T972] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  345.659583][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.883757][  T972] usb 1-1: GET_CAPABILITIES returned 0
[  345.889288][  T972] usbtmc 1-1:16.0: can't read capabilities
[  346.080968][ T9668] mkiss: ax0: crc mode is auto.
[  346.342809][  T972] usb 1-1: USB disconnect, device number 15
[  346.388695][ T5818] usb 4-1: USB disconnect, device number 21
[  346.523507][ T9674] netlink: 'syz.3.906': attribute type 2 has an invalid length.
[  346.904515][ T9680] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.909'.
[  347.101027][ T9683] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  348.146093][ T9695] 9pnet_fd: p9_fd_create_tcp (9695): problem connecting socket to 127.0.0.1
[  348.551645][ T9694] use of bytesused == 0 is deprecated and will be removed in the future,
[  348.569959][ T9694] use the actual size instead.
[  348.624902][   T30] audit: type=1400 audit(1743139341.858:1009): avc:  denied  { audit_write } for  pid=9687 comm="syz.0.911" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  349.307758][ T9710] netlink: 80 bytes leftover after parsing attributes in process `syz.5.912'.
[  349.317336][ T9710] netlink: 80 bytes leftover after parsing attributes in process `syz.5.912'.
[  349.488214][   T30] audit: type=1400 audit(1743139342.588:1010): avc:  denied  { accept } for  pid=9698 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  351.697666][ T9735] netlink: 'syz.2.920': attribute type 1 has an invalid length.
[  351.995018][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.917'.
[  353.087915][ T9748] virtio-fs: tag <(null)> not found
[  353.558924][   T30] audit: type=1326 audit(1743139346.778:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  353.903559][   T30] audit: type=1326 audit(1743139346.778:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4e6b8bad0 code=0x7ffc0000
[  354.064854][   T30] audit: type=1326 audit(1743139346.788:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  354.102113][   T30] audit: type=1326 audit(1743139346.788:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  354.165708][   T30] audit: type=1326 audit(1743139346.788:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  354.199396][   T30] audit: type=1326 audit(1743139346.788:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  354.284669][   T30] audit: type=1326 audit(1743139346.788:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  354.314936][   T30] audit: type=1326 audit(1743139346.788:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  355.011490][   T30] audit: type=1400 audit(1743139347.798:1019): avc:  denied  { mount } for  pid=9759 comm="syz.5.927" name="/" dev="ramfs" ino=25249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  355.862761][ T3184] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  356.881215][ T3184] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.891530][ T3184] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  356.906860][ T3184] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  356.922294][ T3184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  356.982848][ T9780] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  357.379118][ T3184] usb 3-1: SerialNumber: syz
[  357.433598][ T3184] usb 3-1: can't set config #1, error -71
[  357.504308][ T9786] input: syz0 as /devices/virtual/input/input9
[  357.672687][ T3184] usb 3-1: USB disconnect, device number 26
[  357.679690][ T9784] netlink: 'syz.5.934': attribute type 1 has an invalid length.
[  358.830196][ T5867] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  358.908137][ T9802] vlan0: entered allmulticast mode
[  359.193850][ T9803] netlink: 80 bytes leftover after parsing attributes in process `syz.5.939'.
[  359.261873][   T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  359.293738][ T5867] usb 4-1: config 0 has no interfaces?
[  359.305165][ T5867] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  359.335603][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.355279][ T5867] usb 4-1: Product: syz
[  359.359649][ T5867] usb 4-1: Manufacturer: syz
[  359.374855][ T5867] usb 4-1: SerialNumber: syz
[  359.429596][ T5867] usb 4-1: config 0 descriptor??
[  359.452064][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  359.489691][   T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  359.529604][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.565896][   T10] usb 2-1: config 0 descriptor??
[  360.748490][ T3184] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  360.792845][ T9793] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  360.911032][ T3184] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  360.957555][ T3184] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  360.972443][ T3184] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  360.986376][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  360.997249][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  361.000227][ T3184] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  361.028719][   T10] usb 2-1: USB disconnect, device number 16
[  361.049924][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  361.066106][ T3184] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  361.075465][ T3184] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  361.085152][ T3184] usb 6-1: Product: syz
[  361.089299][ T3184] usb 6-1: Manufacturer: syz
[  361.097591][ T3184] cdc_wdm 6-1:1.0: skipping garbage
[  361.126515][ T3184] cdc_wdm 6-1:1.0: skipping garbage
[  361.132265][ T3184] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  361.208720][    T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  361.217785][    T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  361.239216][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  361.248941][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  361.261933][    T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  361.271603][    T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  361.283241][    T9] usb 1-1: Product: syz
[  361.417889][    T9] usb 1-1: Manufacturer: syz
[  361.431243][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  361.436939][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  361.442645][    T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  361.999919][  T972] usb 4-1: USB disconnect, device number 22
[  363.991830][ T5866] usb 1-1: USB disconnect, device number 16
[  364.129154][ T9855] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  364.144764][ T9855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  364.150379][ T5865] usb 6-1: USB disconnect, device number 7
[  364.344213][ T9865] KVM: debugfs: duplicate directory 9865-4
[  364.428630][  T972] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  365.272069][  T972] usb 3-1: Using ep0 maxpacket: 16
[  365.449064][  T972] usb 3-1: config 160 has an invalid interface number: 4 but max is 0
[  365.482370][  T972] usb 3-1: config 160 has no interface number 0
[  365.513938][  T972] usb 3-1: config 160 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  365.549828][  T972] usb 3-1: config 160 interface 4 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  365.626702][  T972] usb 3-1: config 160 interface 4 altsetting 5 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  365.658841][  T972] usb 3-1: config 160 interface 4 altsetting 5 bulk endpoint 0x8 has invalid maxpacket 16
[  365.669265][  T972] usb 3-1: config 160 interface 4 altsetting 5 endpoint 0x3 has invalid maxpacket 544, setting to 64
[  365.880814][   T30] audit: type=1400 audit(1743139358.958:1020): avc:  denied  { read } for  pid=9889 comm="syz.0.964" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  365.906951][ T9890] sd 0:0:1:0: PR command failed: 1026
[  366.029402][ T9890] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  366.086783][  T972] usb 3-1: config 160 interface 4 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  366.110198][ T9890] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  366.151120][  T972] usb 3-1: config 160 interface 4 altsetting 5 endpoint 0xA has invalid maxpacket 2047, setting to 1024
[  366.162781][  T972] usb 3-1: config 160 interface 4 altsetting 5 has a duplicate endpoint with address 0x3, skipping
[  366.175770][  T972] usb 3-1: config 160 interface 4 has no altsetting 0
[  366.180642][   T30] audit: type=1400 audit(1743139358.958:1021): avc:  denied  { open } for  pid=9889 comm="syz.0.964" path="/192/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  366.211892][   T30] audit: type=1400 audit(1743139359.138:1022): avc:  denied  { ioctl } for  pid=9889 comm="syz.0.964" path="/192/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  366.242586][  T972] usb 3-1: New USB device found, idVendor=19d2, idProduct=1247, bcdDevice=2d.66
[  366.255720][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.288402][  T972] usb 3-1: Product: syz
[  366.292771][  T972] usb 3-1: Manufacturer: syz
[  366.297370][  T972] usb 3-1: SerialNumber: syz
[  366.313508][ T9855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  366.321441][ T9855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  366.925495][  T972] usb 3-1: USB disconnect, device number 27
[  366.935335][ T9916] fuse: Bad value for 'rootmode'
[  366.958261][   T30] audit: type=1400 audit(1743139360.188:1023): avc:  denied  { map } for  pid=9915 comm="syz.5.968" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  367.190072][ T9922] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  367.209093][ T9922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  367.232955][ T9922] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  367.258120][ T9922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  367.543049][  T972] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  367.833642][  T972] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  367.866198][  T972] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  367.876594][  T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  367.885700][  T972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  367.934101][  T972] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  367.967779][  T972] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  367.999346][  T972] usb 3-1: Product: syz
[  368.019604][  T972] usb 3-1: Manufacturer: syz
[  368.045651][  T972] cdc_wdm 3-1:1.0: skipping garbage
[  368.059886][  T972] cdc_wdm 3-1:1.0: skipping garbage
[  368.071777][  T972] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  368.154997][ T5866] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  368.289481][ T9939] netlink: 'syz.3.975': attribute type 8 has an invalid length.
[  369.164096][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.969743][ T5866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  369.980584][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.193465][ T5866] usb 2-1: config 0 descriptor??
[  370.313619][  T972] usb 3-1: USB disconnect, device number 28
[  370.489431][   T30] audit: type=1400 audit(1743139363.718:1024): avc:  denied  { getopt } for  pid=9965 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  370.522491][ T9968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  370.537604][ T9968] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  370.564028][   T30] audit: type=1326 audit(1743139363.798:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9965 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  370.612685][   T30] audit: type=1326 audit(1743139363.798:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9965 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  370.648654][ T5866] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[  370.664593][   T30] audit: type=1326 audit(1743139363.798:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9965 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  370.695174][   T30] audit: type=1326 audit(1743139363.798:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9965 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  370.698768][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input10
[  370.740279][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  370.754874][   T30] audit: type=1326 audit(1743139363.798:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9965 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e6b8d169 code=0x7ffc0000
[  370.954520][ T5866] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  371.027618][ T5866] usb 2-1: USB disconnect, device number 17
[  371.027961][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.084101][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.210308][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'.
[  371.229165][    T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  371.248130][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.276560][    T9] usb 6-1: config 0 descriptor??
[  371.356540][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  371.356555][   T30] audit: type=1400 audit(1743139364.588:1045): avc:  denied  { ioctl } for  pid=9986 comm="syz.3.988" path="socket:[24484]" dev="sockfs" ino=24484 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  372.246167][    T9] usb 6-1: language id specifier not provided by device, defaulting to English
[  372.493125][    T9] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71
[  372.512239][    T9] uclogic 0003:256C:006D.000F: failed probing parameters: -71
[  373.502614][    T9] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71
[  373.619965][ T3184] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  373.898022][    T9] usb 6-1: USB disconnect, device number 8
[  373.921028][ T3184] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  373.946073][ T3184] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  373.963196][ T3184] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  373.975012][ T3184] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  373.989035][ T3184] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  374.002384][ T3184] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  374.016080][ T3184] usb 4-1: Product: syz
[  374.022945][ T3184] usb 4-1: Manufacturer: syz
[  374.027570][   T30] audit: type=1400 audit(1743139367.258:1046): avc:  denied  { ioctl } for  pid=10011 comm="syz.1.994" path="socket:[25915]" dev="sockfs" ino=25915 ioctlcmd=0x5104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  374.101685][ T3184] cdc_wdm 4-1:1.0: skipping garbage
[  374.149406][ T3184] cdc_wdm 4-1:1.0: skipping garbage
[  374.159993][ T5866] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  374.201003][ T3184] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  374.226470][T10017] ntfs3(nullb0): Primary boot signature is not NTFS.
[  374.235315][T10017] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  374.962419][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.996312][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.272061][T10029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  375.644649][ T5866] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  375.645931][T10030] sctp: [Deprecated]: syz.1.997 (pid 10030) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.645931][T10030] Use struct sctp_sack_info instead
[  375.693271][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  375.786366][ T5866] usb 3-1: SerialNumber: syz
[  376.079626][  T972] usb 4-1: USB disconnect, device number 23
[  376.278728][T10034] FAULT_INJECTION: forcing a failure.
[  376.278728][T10034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  376.291860][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.0.999 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  376.291883][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  376.291892][T10034] Call Trace:
[  376.291898][T10034]  <TASK>
[  376.291906][T10034]  dump_stack_lvl+0x16c/0x1f0
[  376.291936][T10034]  should_fail_ex+0x512/0x640
[  376.291957][T10034]  _copy_from_user+0x2e/0xd0
[  376.291978][T10034]  copy_msghdr_from_user+0x98/0x160
[  376.292000][T10034]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  376.292021][T10034]  ? __lock_acquire+0x5ca/0x1ba0
[  376.292047][T10034]  ___sys_recvmsg+0xdb/0x1a0
[  376.292067][T10034]  ? __pfx____sys_recvmsg+0x10/0x10
[  376.292088][T10034]  ? find_held_lock+0x2b/0x80
[  376.292127][T10034]  do_recvmmsg+0x2fe/0x740
[  376.292143][T10034]  ? __pfx_do_recvmmsg+0x10/0x10
[  376.292159][T10034]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  376.292185][T10034]  ? __fget_files+0x20e/0x3c0
[  376.292207][T10034]  __x64_sys_recvmmsg+0x22a/0x280
[  376.292228][T10034]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  376.292248][T10034]  ? rcu_is_watching+0x12/0xc0
[  376.292265][T10034]  do_syscall_64+0xcd/0x260
[  376.292276][T10034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.292288][T10034] RIP: 0033:0x7ff4e6b8d169
[  376.292298][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.292310][T10034] RSP: 002b:00007ff4e7a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  376.292323][T10034] RAX: ffffffffffffffda RBX: 00007ff4e6da5fa0 RCX: 00007ff4e6b8d169
[  376.292334][T10034] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000007
[  376.292344][T10034] RBP: 00007ff4e7a38090 R08: 0000000000000000 R09: 0000000000000000
[  376.292354][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  376.292363][T10034] R13: 0000000000000000 R14: 00007ff4e6da5fa0 R15: 00007ffc702ab6e8
[  376.292381][T10034]  </TASK>
[  377.548354][  T972] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  377.646767][ T5866] usb 3-1: invalid UAC_HEADER (v1)
[  377.719464][T10045] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1005'.
[  377.744718][ T5866] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  377.851927][ T5866] usb 3-1: USB disconnect, device number 29
[  377.868271][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.890153][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'.
[  378.062401][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.170878][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  378.294121][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.303976][  T972] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  378.306838][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  378.313142][  T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.843031][  T972] usb 4-1: config 0 descriptor??
[  380.037059][  T972] uclogic 0003:256C:006D.0010: interface is invalid, ignoring
[  380.101946][  T972] usb 4-1: USB disconnect, device number 24
[  380.474956][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  383.910076][ T5865] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  383.982445][   T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  384.135014][ T5865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  384.144866][ T5865] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  384.156629][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  384.261723][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  384.300367][ T5865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  384.311110][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  384.319087][ T5865] usb 2-1: Product: syz
[  384.343642][ T5865] usb 2-1: Manufacturer: syz
[  384.356034][ T5865] cdc_wdm 2-1:1.0: skipping garbage
[  384.474394][   T10] usb 3-1: Using ep0 maxpacket: 8
[  384.484027][ T5865] cdc_wdm 2-1:1.0: skipping garbage
[  384.548113][ T5865] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  384.700041][T10122] netlink: 'syz.3.1022': attribute type 1 has an invalid length.
[  384.727635][T10122] usb usb8: usbfs: process 10122 (syz.3.1022) did not claim interface 0 before use
[  385.366196][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.388443][   T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  385.399059][   T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  385.799997][ T5867] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  386.159410][   T10] usb 3-1: string descriptor 0 read error: -71
[  386.442680][T10123] syz.1.1020 (10123) used greatest stack depth: 21736 bytes left
[  386.470187][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  386.483782][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  386.508792][ T5865] usb 2-1: USB disconnect, device number 18
[  386.559942][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  386.589926][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.599111][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  386.619983][   T10] usb 3-1: can't set config #1, error -71
[  386.630531][   T10] usb 3-1: USB disconnect, device number 30
[  386.637036][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  386.710895][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  386.723638][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  386.732504][ T5867] usb 1-1: Product: syz
[  386.736760][ T5867] usb 1-1: Manufacturer: syz
[  386.758399][ T5867] cdc_wdm 1-1:1.0: skipping garbage
[  386.769012][ T5867] cdc_wdm 1-1:1.0: skipping garbage
[  387.334587][ T5867] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  388.986558][T10166] sctp: [Deprecated]: syz.3.1032 (pid 10166) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.986558][T10166] Use struct sctp_sack_info instead
[  389.322104][T10159] usb 1-1: USB disconnect, device number 17
[  389.560854][T10172] netlink: 'syz.1.1033': attribute type 1 has an invalid length.
[  390.724856][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'.
[  391.604056][   T30] audit: type=1400 audit(1743139383.918:1047): avc:  denied  { connect } for  pid=10181 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  391.662893][T10187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1039'.
[  391.698229][   T30] audit: type=1400 audit(1743139383.918:1048): avc:  denied  { write } for  pid=10181 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  391.727077][T10183] befs: (nullb0): No write support. Marking filesystem read-only
[  391.739966][T10183] befs: (nullb0): invalid magic header
[  391.994309][   T30] audit: type=1400 audit(1743139385.198:1049): avc:  denied  { setattr } for  pid=10188 comm="syz.5.1040" path="socket:[26183]" dev="sockfs" ino=26183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  392.144159][   T30] audit: type=1400 audit(1743139385.288:1050): avc:  denied  { map } for  pid=10188 comm="syz.5.1040" path="socket:[26183]" dev="sockfs" ino=26183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  392.217684][   T30] audit: type=1400 audit(1743139385.288:1051): avc:  denied  { read } for  pid=10188 comm="syz.5.1040" path="socket:[26183]" dev="sockfs" ino=26183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  392.423934][T10216] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  393.186220][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1043'.
[  393.282752][T10222] openvswitch: netlink: IP tunnel dst address not specified
[  393.750117][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1052'.
[  394.433622][ T5867] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  394.681430][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.700902][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  394.981522][ T5898] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  395.083871][ T5867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  395.102306][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  395.119912][ T5867] usb 3-1: SerialNumber: syz
[  395.228018][ T5898] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[  395.263418][ T5898] usb 2-1: config 0 has no interface number 0
[  395.292439][ T5898] usb 2-1: config 0 interface 11 has no altsetting 0
[  395.299178][ T5898] usb 2-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.d2
[  395.328306][T10250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1056'.
[  395.330370][   T30] audit: type=1400 audit(1743139388.558:1052): avc:  denied  { create } for  pid=10249 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  395.357327][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.372426][T10251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1056'.
[  395.381650][T10251] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1056'.
[  395.391339][T10251] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1056'.
[  395.392307][ T5898] usb 2-1: config 0 descriptor??
[  395.756157][T10262] netlink: 'syz.3.1059': attribute type 1 has an invalid length.
[  395.839128][ T5867] usb 3-1: invalid UAC_HEADER (v1)
[  395.882697][ T5898] usb 2-1: string descriptor 0 read error: -71
[  395.896546][ T5898] usb 2-1: Found UVC 0.00 device <unnamed> (1871:0306)
[  395.896889][ T5867] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  395.912953][ T5898] usb 2-1: No valid video chain found.
[  395.914716][ T5898] usb 2-1: USB disconnect, device number 19
[  396.749562][   T30] audit: type=1400 audit(1743139389.218:1053): avc:  denied  { mount } for  pid=10263 comm="syz.2.1060" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  396.805436][ T5867] usb 3-1: USB disconnect, device number 31
[  396.841639][   T30] audit: type=1400 audit(1743139389.228:1054): avc:  denied  { mounton } for  pid=10263 comm="syz.2.1060" path="/200/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  396.886873][   T30] audit: type=1400 audit(1743139389.228:1055): avc:  denied  { read } for  pid=10263 comm="syz.2.1060" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  396.972853][   T30] audit: type=1400 audit(1743139389.228:1056): avc:  denied  { open } for  pid=10263 comm="syz.2.1060" path="/200/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  397.179742][   T30] audit: type=1400 audit(1743139390.068:1057): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  397.289850][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  397.290070][ T5141] Bluetooth: hci6: command 0x1003 tx timeout
[  397.434313][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'.
[  397.587649][   T30] audit: type=1326 audit(1743139390.818:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  397.616609][   T30] audit: type=1326 audit(1743139390.838:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  397.661138][   T30] audit: type=1326 audit(1743139390.838:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  397.687018][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  397.970746][   T30] audit: type=1326 audit(1743139390.838:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fcfb8d169 code=0x7ffc0000
[  397.999823][   T30] audit: type=1326 audit(1743139390.848:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.3.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fcfb8bad0 code=0x7ffc0000
[  398.142307][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  398.151150][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  398.161520][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  398.171823][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  398.185525][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  398.196556][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  398.214619][    T9] usb 6-1: Product: syz
[  398.218859][    T9] usb 6-1: Manufacturer: syz
[  398.226349][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  398.229858][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  398.231647][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  398.231697][    T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  398.412975][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  398.422298][   T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  398.437556][   T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  398.467726][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  398.487072][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  398.488477][   T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  398.488504][   T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  398.488522][   T24] usb 4-1: Product: syz
[  398.488537][   T24] usb 4-1: Manufacturer: syz
[  398.492061][   T24] cdc_wdm 4-1:1.0: skipping garbage
[  398.492079][   T24] cdc_wdm 4-1:1.0: skipping garbage
[  398.492120][   T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  398.620882][ T5898] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  398.790020][ T5898] usb 3-1: Using ep0 maxpacket: 8
[  398.824630][ T5898] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  398.945193][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  399.098685][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  399.139817][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  399.149924][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  399.165284][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  399.166019][T10304] sctp: [Deprecated]: syz.0.1072 (pid 10304) Use of struct sctp_assoc_value in delayed_ack socket option.
[  399.166019][T10304] Use struct sctp_sack_info instead
[  399.191708][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.495728][ T5898] usb 3-1: usb_control_msg returned -32
[  399.506614][ T5898] usbtmc 3-1:16.0: can't read capabilities
[  399.779947][  T972] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  399.787617][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  399.859031][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.868062][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.942007][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.953175][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.963260][  T972] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  399.972566][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.982115][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  399.992635][  T972] usb 1-1: config 0 descriptor??
[  399.997688][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  400.009866][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  400.019506][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  400.027672][    T9] usb 2-1: SerialNumber: syz
[  400.490909][ T5898] usb 6-1: USB disconnect, device number 9
[  400.948727][    T9] usb 2-1: invalid UAC_HEADER (v1)
[  401.126049][ T5898] usb 4-1: USB disconnect, device number 25
[  401.134255][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  401.153644][  T972] uclogic 0003:256C:006D.0011: interface is invalid, ignoring
[  401.162909][    T9] usb 2-1: USB disconnect, device number 20
[  401.177025][  T972] usb 1-1: USB disconnect, device number 18
[  401.257679][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  401.422234][ T5898] usb 3-1: USB disconnect, device number 32
[  401.944444][ T3184] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  401.945117][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  402.129871][ T3184] usb 4-1: Using ep0 maxpacket: 8
[  402.144979][ T3184] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  402.349243][ T3184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.362372][    T9] usb 6-1: Using ep0 maxpacket: 8
[  402.368713][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.382517][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  402.388666][ T3184] usb 4-1: Product: syz
[  402.393617][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  402.400275][ T3184] usb 4-1: Manufacturer: syz
[  402.405522][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.413852][ T3184] usb 4-1: SerialNumber: syz
[  402.417990][    T9] usb 6-1: Product: syz
[  402.427304][    T9] usb 6-1: Manufacturer: syz
[  402.432068][    T9] usb 6-1: SerialNumber: syz
[  402.470765][    T9] usb 6-1: config 0 descriptor??
[  402.479947][  T972] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  402.516917][ T3184] usb 4-1: config 0 descriptor??
[  402.534804][    T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  402.826413][ T3184] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  403.056923][ T2325] usb 6-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  403.123370][    T9] usb 6-1: USB disconnect, device number 10
[  403.132820][ T2325] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  403.140812][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  403.140827][   T30] audit: type=1400 audit(1743139396.368:1072): avc:  denied  { firmware_load } for  pid=2325 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  403.232661][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.344308][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.355368][  T972] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  403.379965][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  403.393758][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.411014][  T972] usb 2-1: config 0 descriptor??
[  403.540704][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  403.549702][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  403.560103][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  403.569179][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  403.590785][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  403.602424][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  403.616920][ T5867] usb 1-1: Product: syz
[  403.623769][ T5867] usb 1-1: Manufacturer: syz
[  403.633580][ T5867] cdc_wdm 1-1:1.0: skipping garbage
[  403.638860][ T5867] cdc_wdm 1-1:1.0: skipping garbage
[  403.644592][ T5867] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  403.659922][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  403.749312][T10370] sctp: [Deprecated]: syz.5.1093 (pid 10370) Use of int in maxseg socket option.
[  403.749312][T10370] Use struct sctp_assoc_value instead
[  403.821414][   T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  403.830359][   T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  403.851491][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  403.862558][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1094'.
[  403.872488][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  403.885302][   T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  403.894858][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  403.903044][   T10] usb 3-1: Product: syz
[  403.907533][   T10] usb 3-1: Manufacturer: syz
[  403.915500][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  403.921055][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  403.926400][   T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  404.315055][ T3184] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  404.326870][ T3184] usb 4-1: USB disconnect, device number 26
[  404.884569][  T972] uclogic 0003:256C:006D.0012: interface is invalid, ignoring
[  404.896315][  T972] usb 2-1: USB disconnect, device number 21
[  404.992366][   T30] audit: type=1400 audit(1743139398.228:1073): avc:  denied  { listen } for  pid=10378 comm="syz.5.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  405.418314][T10388] overlayfs: missing 'lowerdir'
[  405.442856][T10388] overlayfs: missing 'lowerdir'
[  405.448286][T10388] overlayfs: missing 'lowerdir'
[  405.456402][T10388] overlayfs: missing 'lowerdir'
[  405.463617][T10388] overlayfs: missing 'lowerdir'
[  405.476610][T10388] overlayfs: failed to resolve './file1': -2
[  405.476969][T10387] overlayfs: missing 'lowerdir'
[  405.491481][   T30] audit: type=1400 audit(1743139398.718:1074): avc:  denied  { create } for  pid=10391 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  406.020379][T10398] sp0: Synchronizing with TNC
[  406.197588][ T3184] usb 1-1: USB disconnect, device number 19
[  406.486254][ T3184] usb 3-1: USB disconnect, device number 33
[  406.569888][  T972] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  406.822996][  T972] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  406.837650][  T972] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  406.847922][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.355440][  T972] usb 2-1: Product: syz
[  407.360094][  T972] usb 2-1: Manufacturer: syz
[  407.365835][  T972] usb 2-1: SerialNumber: syz
[  407.716775][  T972] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  407.828344][   T30] audit: type=1326 audit(1743139401.058:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.5.1109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bc678d169 code=0x0
[  407.988660][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1109'.
[  408.019473][ T3184] usb 2-1: USB disconnect, device number 22
[  408.069014][ T3184] usblp0: removed
[  408.317420][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'.
[  408.436492][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'.
[  409.447654][T10459] Invalid option length (0) for dns_resolver key
[  409.491337][   T30] audit: type=1400 audit(1743139402.688:1076): avc:  denied  { open } for  pid=10444 comm="syz.1.1113" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  409.719931][ T5898] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  409.896659][T10468] ip6t_srh: unknown srh match flags  4000
[  409.954213][ T5898] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  409.979964][ T5898] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  410.000031][ T5898] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  410.008186][   T30] audit: type=1400 audit(1743139403.238:1077): avc:  denied  { mount } for  pid=10469 comm="syz.2.1121" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  410.040448][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1121'.
[  410.167950][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  410.586195][   T30] audit: type=1800 audit(1743139403.458:1078): pid=10472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1120" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  410.643075][ T5898] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  410.689289][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  410.697778][ T5898] usb 4-1: Product: syz
[  410.704593][ T5898] usb 4-1: Manufacturer: syz
[  410.713084][ T5898] cdc_wdm 4-1:1.0: skipping garbage
[  410.719166][ T5898] cdc_wdm 4-1:1.0: skipping garbage
[  410.728527][ T5898] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  410.738989][   T30] audit: type=1400 audit(1743139403.958:1079): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  410.756547][T10474] nbd: device at index 0 is going down
[  411.505153][   T30] audit: type=1400 audit(1743139404.738:1080): avc:  denied  { append } for  pid=10484 comm="syz.2.1126" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  411.920063][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'.
[  411.930486][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'.
[  413.291585][ T5912] usb 4-1: USB disconnect, device number 27
[  413.350714][ T5867] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  413.430053][   T31] INFO: task syz.4.641:8537 blocked for more than 143 seconds.
[  413.445986][   T31]       Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0
[  413.469806][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  413.479874][  T972] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  413.488313][   T31] task:syz.4.641       state:D stack:27704 pid:8537  tgid:8531  ppid:5825   task_flags:0x400740 flags:0x00000004
[  413.500705][   T31] Call Trace:
[  413.504277][   T31]  <TASK>
[  413.507215][   T31]  __schedule+0x1129/0x5c00
[  413.511789][   T31]  ? __lock_acquire+0x5ca/0x1ba0
[  413.516754][   T31]  ? __pfx___schedule+0x10/0x10
[  413.521668][   T31]  ? find_held_lock+0x2b/0x80
[  413.526360][   T31]  ? schedule+0x2d7/0x3a0
[  413.529887][ T5867] usb 3-1: Using ep0 maxpacket: 32
[  413.530811][   T31]  schedule+0xe7/0x3a0
[  413.539894][   T31]  schedule_timeout+0x242/0x280
[  413.544779][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  413.547237][ T5867] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  413.550192][   T31]  ? rcu_is_watching+0x12/0xc0
[  413.550216][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  413.550241][   T31]  __wait_for_common+0x3df/0x600
[  413.563139][ T5867] usb 3-1: config 0 has no interface number 0
[  413.576082][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  413.762660][   T31]  ? __pfx___wait_for_common+0x10/0x10
[  413.835896][   T31]  ? __pfx_try_to_wake_up+0x10/0x10
[  413.887710][   T31]  ? rcu_is_watching+0x12/0xc0
[  413.933009][   T31]  wait_for_completion_state+0x1c/0x40
[  413.986556][   T31]  do_coredump+0x887/0x44a0
[  414.000813][ T5867] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  414.012697][   T31]  ? __kernel_text_address+0xd/0x40
[  414.028218][   T31]  ? unwind_get_return_address+0x59/0xa0
[  414.038387][   T31]  ? __pfx_do_coredump+0x10/0x10
[  414.049477][   T31]  ? stack_trace_save+0x8e/0xc0
[  414.054510][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  414.062987][   T31]  ? stack_depot_save_flags+0x29/0x9c0
[  414.069069][ T5867] usb 3-1: config 0 interface 85 has no altsetting 0
[  414.072799][   T31]  ? __lock_acquire+0xaa4/0x1ba0
[  414.078005][  T972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  414.084649][   T31]  ? kasan_save_stack+0x42/0x60
[  414.091053][  T972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  414.097337][   T31]  ? kasan_save_stack+0x33/0x60
[  414.108698][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  414.113330][   T31]  ? kasan_save_track+0x14/0x30
[  414.118567][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.131465][   T31]  ? kasan_save_free_info+0x3b/0x60
[  414.134266][ T5867] usb 3-1: Product: syz
[  414.137020][   T31]  ? __kasan_slab_free+0x51/0x70
[  414.141096][  T972] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  414.146132][   T31]  ? kmem_cache_free+0x2d4/0x4d0
[  414.155087][ T5867] usb 3-1: Manufacturer: syz
[  414.160117][   T31]  ? __sigqueue_free+0xba/0x2a0
[  414.166904][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  414.169396][   T31]  ? get_signal+0xca9/0x26a0
[  414.177454][ T5867] usb 3-1: SerialNumber: syz
[  414.182123][   T31]  ? arch_do_signal_or_restart+0x8f/0x7d0
[  414.190050][ T5867] usb 3-1: config 0 descriptor??
[  414.192560][   T31]  ? proc_coredump_connector+0x2d1/0x4f0
[  414.197213][  T972] usb 1-1: SerialNumber: syz
[  414.203039][   T31]  ? __pfx_proc_coredump_connector+0x10/0x10
[  414.214057][   T31]  ? rcu_is_watching+0x12/0xc0
[  414.218865][   T31]  get_signal+0x22ed/0x26a0
[  414.223486][   T31]  ? __pfx_get_signal+0x10/0x10
[  414.228428][   T31]  arch_do_signal_or_restart+0x8f/0x7d0
[  414.234027][   T31]  ? __pfx___seccomp_filter+0x10/0x10
[  414.239448][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  414.245687][   T31]  syscall_exit_to_user_mode+0x150/0x2a0
[  414.251428][   T31]  do_syscall_64+0xda/0x260
[  414.255942][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.261926][   T31] RIP: 0033:0x7f441ed8d169
[  414.266340][   T31] RSP: 002b:00007f441fba00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  414.274800][   T31] RAX: 00000000000000ca RBX: 00007f441efa6088 RCX: 00007f441ed8d169
[  414.282830][   T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f441efa608c
[  414.290868][   T31] RBP: 00007f441efa6080 R08: 00007f441fbc2000 R09: 0000000000000000
[  414.298927][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f441efa608c
[  414.307053][   T31] R13: 0000000000000000 R14: 00007ffe94d76eb0 R15: 00007ffe94d76f98
[  414.315108][   T31]  </TASK>
[  414.319215][   T31] 
[  414.319215][   T31] Showing all locks held in the system:
[  414.339828][   T31] 6 locks held by kworker/0:0/9:
[  414.344819][   T31]  #0: ffff8880212ba148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  414.356835][   T31]  #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  414.370825][   T31]  #2: ffff88802955a190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  414.379734][   T31]  #3: ffff888029144190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920
[  414.389028][   T31]  #4: ffff888029142160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620
[  414.399583][   T31]  #5: ffff888046e54188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x8a/0x630
[  414.410323][   T31] 5 locks held by kworker/u8:1/13:
[  414.415511][   T31]  #0: ffff88801c2eb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  414.427713][   T31]  #1: ffffc90000127d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  414.437878][   T31]  #2: ffffffff900e53d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30
[  414.447280][   T31]  #3: ffffffff900fb268 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x50d/0xb30
[  414.456236][   T31]  #4: ffffffff8e3c9078 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0
[  414.466311][   T31] 1 lock held by khungtaskd/31:
[  414.471245][   T31]  #0: ffffffff8e3bdb40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  414.481169][   T31] 4 locks held by kworker/0:2/972:
[  414.486284][   T31]  #0: ffff8880212ba148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  414.497133][   T31]  #1: ffffc90003cd7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  414.508452][   T31]  #2: ffff8881453e2190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  414.517386][   T31]  #3: ffff8880464a6190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  414.526721][   T31] 2 locks held by pvrusb2-context/2325:
[  414.532330][   T31]  #0: ffff888046e54188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xb6/0x4510
[  414.545079][   T31]  #1: ffffffff8e274a30 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250
[  414.555502][   T31] 2 locks held by getty/5582:
[  414.560267][   T31]  #0: ffff8880321df0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  414.570089][   T31]  #1: ffffc900033532f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfa1/0x1450
[  414.580269][   T31] 5 locks held by kworker/0:3/5867:
[  414.585468][   T31]  #0: ffff8880212ba148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  414.596401][   T31]  #1: ffffc90004427d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  414.607683][   T31]  #2: ffff8880294d2190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  414.616594][   T31]  #3: ffff888027695190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  414.625856][   T31]  #4: ffff8880464a0160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[  414.635235][   T31] 
[  414.637611][   T31] =============================================
[  414.637611][   T31] 
[  414.648208][ T5867] appletouch 3-1:0.85: Failed to request geyser raw mode
[  414.648877][   T31] NMI backtrace for cpu 1
[  414.648890][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  414.648910][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  414.648919][   T31] Call Trace:
[  414.648924][   T31]  <TASK>
[  414.648930][   T31]  dump_stack_lvl+0x116/0x1f0
[  414.648959][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  414.648977][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  414.649018][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  414.649034][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  414.649055][   T31]  watchdog+0xf70/0x12c0
[  414.649079][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.649099][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.649121][   T31]  ? __kthread_parkme+0x148/0x220
[  414.649142][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.649162][   T31]  kthread+0x3a4/0x760
[  414.649184][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649210][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649231][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649251][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649272][   T31]  ? rcu_is_watching+0x12/0xc0
[  414.649288][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649310][   T31]  ret_from_fork+0x45/0x80
[  414.649323][   T31]  ? __pfx_kthread+0x10/0x10
[  414.649344][   T31]  ret_from_fork_asm+0x1a/0x30
[  414.649372][   T31]  </TASK>
[  414.649377][   T31] Sending NMI from CPU 1 to CPUs 0:
[  414.675556][ T5867] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  414.681288][    C0] NMI backtrace for cpu 0
[  414.681300][    C0] CPU: 0 UID: 0 PID: 5867 Comm: kworker/0:3 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  414.681317][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  414.681325][    C0] Workqueue: usb_hub_wq hub_event
[  414.681342][    C0] RIP: 0010:__run_timers+0x35a/0x960
[  414.681360][    C0] Code: 1c 52 13 00 83 44 24 08 01 4d 89 ef 49 c7 04 24 00 00 00 00 e8 07 52 13 00 49 89 ec 31 ff 41 83 e4 07 4c 89 e6 e8 56 4d 13 00 <4d> 85 e4 75 21 e8 ec 51 13 00 83 c3 01 bf 08 00 00 00 48 c1 ed 03
[  414.681372][    C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00000046
[  414.681381][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81a7c14a
[  414.681390][    C0] RDX: ffff888026824880 RSI: 0000000000000000 RDI: 0000000000000007
[  414.681398][    C0] RBP: 0000000100002c42 R08: 0000000000000007 R09: 0000000000000000
[  414.681405][    C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000002
[  414.681413][    C0] R13: ffffc90000007e10 R14: dffffc0000000000 R15: ffffc90000007e10
[  414.681422][    C0] FS:  0000000000000000(0000) GS:ffff888124a3d000(0000) knlGS:0000000000000000
[  414.681435][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.681452][    C0] CR2: 0000001b2f0efff8 CR3: 000000002771a000 CR4: 00000000003526f0
[  414.681461][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  414.681468][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  414.681476][    C0] Call Trace:
[  414.681481][    C0]  <NMI>
[  414.681486][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  414.681504][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  414.681516][    C0]  ? nmi_handle.part.0+0x1a7/0x5d0
[  414.681532][    C0]  ? nmi_handle+0x86/0xc0
[  414.681543][    C0]  ? __run_timers+0x35a/0x960
[  414.681556][    C0]  ? default_do_nmi+0x6a/0x160
[  414.681571][    C0]  ? exc_nmi+0x170/0x1e0
[  414.681584][    C0]  ? end_repeat_nmi+0xf/0x53
[  414.681599][    C0]  ? __run_timers+0x35a/0x960
[  414.681613][    C0]  ? __run_timers+0x35a/0x960
[  414.681627][    C0]  ? __run_timers+0x35a/0x960
[  414.681641][    C0]  ? __run_timers+0x35a/0x960
[  414.681655][    C0]  </NMI>
[  414.681659][    C0]  <IRQ>
[  414.681665][    C0]  ? __pfx___run_timers+0x10/0x10
[  414.681684][    C0]  run_timer_base+0x114/0x190
[  414.681698][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  414.681714][    C0]  run_timer_softirq+0x1a/0x40
[  414.681727][    C0]  handle_softirqs+0x216/0x8e0
[  414.681744][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  414.681759][    C0]  __irq_exit_rcu+0x109/0x170
[  414.681772][    C0]  irq_exit_rcu+0x9/0x30
[  414.681784][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  414.681801][    C0]  </IRQ>
[  414.681805][    C0]  <TASK>
[  414.681810][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  414.681823][    C0] RIP: 0010:vprintk_emit+0x61f/0x6f0
[  414.681836][    C0] Code: 85 ed 0f 85 81 00 00 00 e8 ce 22 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 1a 1e 20 00 4d 85 e4 0f 85 8d 00 00 00 <e8> ac 22 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
[  414.681847][    C0] RSP: 0018:ffffc90004426e38 EFLAGS: 00000246
[  414.681857][    C0] RAX: 0000000000100000 RBX: 0000000000000046 RCX: ffffc9001cea2000
[  414.681865][    C0] RDX: 0000000000100000 RSI: ffffffff819af116 RDI: 0000000000000007
[  414.681873][    C0] RBP: 1ffff92000884dc9 R08: 0000000000000007 R09: 0000000000000000
[  414.681881][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  414.681888][    C0] R13: 0000000000000200 R14: ffff88801e6b2440 R15: ffffc90004426f00
[  414.681899][    C0]  ? vprintk_emit+0x6a6/0x6f0
[  414.681912][    C0]  ? vprintk_emit+0x6a6/0x6f0
[  414.681924][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  414.681939][    C0]  dev_printk_emit+0xfa/0x140
[  414.681955][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  414.681970][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  414.681988][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  414.682006][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  414.682025][    C0]  __dev_printk+0xf5/0x270
[  414.682041][    C0]  _dev_err+0xe4/0x120
[  414.682056][    C0]  ? __pfx__dev_err+0x10/0x10
[  414.682072][    C0]  ? __pm_runtime_suspend+0xcc/0x1a0
[  414.682089][    C0]  ? usb_probe_interface+0x3a8/0x9c0
[  414.682106][    C0]  ? __pfx_usb_probe_interface+0x10/0x10
[  414.682120][    C0]  really_probe+0x7cb/0xa90
[  414.682137][    C0]  __driver_probe_device+0x1de/0x440
[  414.682155][    C0]  driver_probe_device+0x4c/0x1b0
[  414.682172][    C0]  __device_attach_driver+0x1df/0x310
[  414.682189][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  414.682206][    C0]  bus_for_each_drv+0x156/0x1e0
[  414.682220][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  414.682235][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.682252][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  414.682269][    C0]  __device_attach+0x1e4/0x4b0
[  414.682286][    C0]  ? __pfx___device_attach+0x10/0x10
[  414.682302][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  414.682315][    C0]  bus_probe_device+0x17f/0x1c0
[  414.682330][    C0]  device_add+0x1148/0x1a70
[  414.682343][    C0]  ? __pfx_device_add+0x10/0x10
[  414.682355][    C0]  ? mark_held_locks+0x49/0x80
[  414.682372][    C0]  usb_set_configuration+0x1187/0x1e20
[  414.682390][    C0]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  414.682407][    C0]  usb_generic_driver_probe+0xb1/0x110
[  414.682424][    C0]  usb_probe_device+0xec/0x3e0
[  414.682441][    C0]  ? __pfx_usb_probe_device+0x10/0x10
[  414.682455][    C0]  really_probe+0x23e/0xa90
[  414.682471][    C0]  __driver_probe_device+0x1de/0x440
[  414.682488][    C0]  ? usb_driver_applicable+0x1c7/0x220
[  414.682503][    C0]  driver_probe_device+0x4c/0x1b0
[  414.682519][    C0]  __device_attach_driver+0x1df/0x310
[  414.682537][    C0]  ? __pfx___device_attach_driver+0x10/0x10
[  414.682554][    C0]  bus_for_each_drv+0x156/0x1e0
[  414.682568][    C0]  ? __pfx_bus_for_each_drv+0x10/0x10
[  414.682582][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.682599][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  414.682616][    C0]  __device_attach+0x1e4/0x4b0
[  414.682633][    C0]  ? __pfx___device_attach+0x10/0x10
[  414.682650][    C0]  ? do_raw_spin_unlock+0x172/0x230
[  414.682662][    C0]  bus_probe_device+0x17f/0x1c0
[  414.682677][    C0]  device_add+0x1148/0x1a70
[  414.682690][    C0]  ? __pfx_device_add+0x10/0x10
[  414.682701][    C0]  ? add_device_randomness+0xb7/0xf0
[  414.682716][    C0]  ? __usb_get_extra_descriptor+0x158/0x1c0
[  414.682732][    C0]  usb_new_device+0xd07/0x1a20
[  414.682745][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  414.682762][    C0]  ? __pfx_usb_new_device+0x10/0x10
[  414.682775][    C0]  ? mark_held_locks+0x49/0x80
[  414.682791][    C0]  hub_event+0x2eb7/0x4fa0
[  414.682809][    C0]  ? __pfx_hub_event+0x10/0x10
[  414.682821][    C0]  ? debug_object_deactivate+0x1ec/0x3a0
[  414.682841][    C0]  ? rcu_is_watching+0x12/0xc0
[  414.682855][    C0]  process_one_work+0x9cc/0x1b70
[  414.682869][    C0]  ? __pfx_hcd_resume_work+0x10/0x10
[  414.682883][    C0]  ? __pfx_process_one_work+0x10/0x10
[  414.682897][    C0]  ? assign_work+0x1a0/0x250
[  414.682914][    C0]  worker_thread+0x6c1/0xef0
[  414.682928][    C0]  ? __kthread_parkme+0x148/0x220
[  414.682944][    C0]  ? __pfx_worker_thread+0x10/0x10
[  414.682956][    C0]  kthread+0x3a4/0x760
[  414.682973][    C0]  ? __pfx_kthread+0x10/0x10
[  414.682989][    C0]  ? __pfx_kthread+0x10/0x10
[  414.683005][    C0]  ? __pfx_kthread+0x10/0x10
[  414.683022][    C0]  ? __pfx_kthread+0x10/0x10
[  414.683038][    C0]  ? rcu_is_watching+0x12/0xc0
[  414.683050][    C0]  ? __pfx_kthread+0x10/0x10
[  414.683067][    C0]  ret_from_fork+0x45/0x80
[  414.683078][    C0]  ? __pfx_kthread+0x10/0x10
[  414.683094][    C0]  ret_from_fork_asm+0x1a/0x30
[  414.683114][    C0]  </TASK>
[  414.685677][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  414.685691][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) 
[  414.685710][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  414.685719][   T31] Call Trace:
[  414.685724][   T31]  <TASK>
[  414.685730][   T31]  dump_stack_lvl+0x3d/0x1f0
[  414.685757][   T31]  panic+0x71c/0x800
[  414.685778][   T31]  ? __pfx_panic+0x10/0x10
[  414.685797][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  414.685823][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  414.685837][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  414.685860][   T31]  ? watchdog+0xdda/0x12c0
[  414.685879][   T31]  ? watchdog+0xdcd/0x12c0
[  414.685901][   T31]  watchdog+0xdeb/0x12c0
[  414.685924][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.685943][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.685964][   T31]  ? __kthread_parkme+0x148/0x220
[  414.685984][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.686003][   T31]  kthread+0x3a4/0x760
[  414.686025][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686044][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686064][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686084][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686104][   T31]  ? rcu_is_watching+0x12/0xc0
[  414.686119][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686140][   T31]  ret_from_fork+0x45/0x80
[  414.686154][   T31]  ? __pfx_kthread+0x10/0x10
[  414.686174][   T31]  ret_from_fork_asm+0x1a/0x30
[  414.686206][   T31]  </TASK>
[  414.686858][   T31] Kernel Offset: disabled