last executing test programs:

12.778469987s ago: executing program 4 (id=1570):
socket$qrtr(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r1, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x800)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x47f9, 0x104000, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x1, 0x4, 0x8, 0x6, {}, {0x1, 0x2, 0x9, 0x6, 0x9, 0xfd, 'yT=7'}, 0x0, 0x4, {}, 0x4})
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x7, 0x2}, {0xfff}}}}, 0xf)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00000003000000000000040500060000"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)

11.07920543s ago: executing program 4 (id=1574):
r0 = socket(0x10, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="00000000b702007514000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000000000000b7020000020000008500000084000000b7000000000000009500"/96], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = signalfd4(r3, &(0x7f0000000840)={[0x8]}, 0x8, 0x100800)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2c, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7})
r9 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2, 0x40, 0xffffffda, 0x1, 0x0, r5})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x3)
ioctl$FIONREAD(r10, 0x541b, &(0x7f0000002300))
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000580)={0x1, 0x0, 0x9, 0x8, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xff, 0x8, 0x99, 0x0, 0x0, 0xd, 0x10, 0x0, 0x20006, 0xf0, 0x0, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x90, 0x30, 0x51b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_skbmod={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x800000, 0x0, 0x96}, 0x6}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1, 0x2}}}}]}]}, 0x90}}, 0x0)

10.049655428s ago: executing program 4 (id=1575):
r0 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000000)={0x0, 0x2, 0x4, "f8572d2c"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x15, 0x7, "629dc26bd12c14"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0xa, 0x39, &(0x7f0000000000)="4598679cb5db7d9bb52d90ec0158e36b10cdcb612a1b8062dcceef886f5b9192e5c17a14faf5e93fbd3d8f3f5429d606b3ffc053cd21e48ce3")
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

9.216098674s ago: executing program 0 (id=1578):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000200)=0x632a, 0x4)
socket$kcm(0xa, 0x2, 0x73)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1a0c000, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x7}, 0x18)
socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x30)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r5, 0x0, &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340), 0x0)

8.468674248s ago: executing program 2 (id=1579):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b8008000900000009"], 0x184}}, 0x20040094) (fail_nth: 2)

7.691496105s ago: executing program 2 (id=1580):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffffffffff0d000001000000000000c2358015000000ed410000604027e2e1ce06af298b037830bf94a4d2f89381fe0a83eff605b20867a74d265fda920c2149766081950230cce26b2e3a5cdebc8ba7e73602bcbf92de2a5850162d2f8cf3d9a93e2e9b492d10e4f177df0a9a52fcd8c8a84d29a67373b957e3d88dc4b85665600dd7dba4cf3d3062b35bb395dcd85d50565811c636e40eef0a50bf19a65e58c568d3b8"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=0x6, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_shrink_slab_end\x00', r8, 0x0, 0x3}, 0x18)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x23b)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
r11 = semget$private(0x0, 0x6, 0x0)
semtimedop(r11, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0)
semop(r11, &(0x7f0000000000)=[{0x0, 0xff7f}], 0x1)
semctl$IPC_RMID(r11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

7.661032937s ago: executing program 0 (id=1581):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6ddc38118dda0360)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0xc593, 0x10001ff, 0x4, 0x2, 0x8000000000000001, 0x1, 0x1, 0x1, 0x8, 0x8, 0x1, 0x9, 0x1, 0x4, 0x12, 0x1d, {0x7, 0xd}, 0x3, 0x9}}})
listen(r1, 0x9)
sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

7.394250115s ago: executing program 1 (id=1583):
iopl(0x3)
getrlimit(0x1, &(0x7f0000000280))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)=@buf={0x3e, &(0x7f0000000000)="1cd9f33739bae3f568efea573c1046eaa4e4bfb78493a4f6be71767107292aa69dc3a39e402d498840606d6b4ea12c94d55eec682cddd04c4acf54179b89"})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @multicast2}}]}, 0x110)

7.082364648s ago: executing program 1 (id=1584):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

6.16348765s ago: executing program 2 (id=1585):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c608d3538cb7c33e9068f8968f9d66abf17d44081c3999d89dc5810977753ea8a4a88a1219e24672173732db6fea544d2cf9220250a987c33eabb4b4cd486951e56d901b628cdf6d3c474f36021b4ff2fcc7e6ca7643aac9a0e86744fe4c2211fe3ea04bfd8b0f61d9d69799d775b2b880a8ef47287498ae758e9d8abe48c17e6ac496c1d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x2000000)
r3 = socket(0x848000000015, 0x805, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
creat(&(0x7f0000000280)='./file0\x00', 0x82)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

6.162212183s ago: executing program 3 (id=1586):
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x880, 0x4)
r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x2}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

6.006101569s ago: executing program 0 (id=1587):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20000)

5.936646322s ago: executing program 3 (id=1588):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
ioctl$TCFLSH(r4, 0x400455c8, 0x1000000004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

4.882919128s ago: executing program 4 (id=1589):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c608d3538cb7c33e9068f8968f9d66abf17d44081c3999d89dc5810977753ea8a4a88a1219e24672173732db6fea544d2cf9220250a987c33eabb4b4cd486951e56d901b628cdf6d3c474f36021b4ff2fcc7e6ca7643aac9a0e86744fe4c2211fe3ea04bfd8b0f61d9d69799d775b2b880a8ef47287498ae758e9d8abe48c17e6ac496c1d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x2000000)
r3 = socket(0x848000000015, 0x805, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
creat(&(0x7f0000000280)='./file0\x00', 0x82)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.882238205s ago: executing program 0 (id=1590):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup2(r1, r0)
ioctl$TIOCVHANGUP(r2, 0x541b, 0x1000000000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000900)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000009936c36e85ef3825c4c759c89eaf1ae9cbd8bd5700f835baf5dab057de7aa6b3ff406b9ccf43195a52e0d535faf40da46809ae87671db368afe41606aafbc71cc661d51c6254bbaa56680030372bb0a1f9289d3c5e5b060ec4eb3858e27565dcfe15fad0f4c72997e18ed8ef44e8462c56fdbac21f5b12ad56d09c398c30f7c5f17b1cb15a7ebd7c8f2659e0fecd1fa774aa8b604da4d95b00fbd820acda08da40d25f2f113db9d1e1ba49a9db"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x200000d0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x6, 0xfff2}, {0x480bd72125a0c189, 0x5}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4808}, 0x880)
connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r9 = syz_open_procfs(r3, &(0x7f00000001c0)='stack\x00')
preadv(r9, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
sendmsg$NFC_CMD_VENDOR(r10, 0x0, 0x40850)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200800000000000f80000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xfffffffe, 0x6}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

4.439997643s ago: executing program 2 (id=1591):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000003000000040000000100000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, <r2=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x7)
r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r7 = socket$rxrpc(0x21, 0x2, 0x2)
r8 = dup3(r7, r6, 0x0)
setsockopt$inet_int(r8, 0x0, 0xd, 0x0, 0x0)
ioctl$TCSETA(r5, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3.456077017s ago: executing program 0 (id=1592):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000eb00000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r3 = fanotify_init(0x0, 0x800)
fanotify_mark(r3, 0x90, 0x20, 0xffffffffffffffff, 0x0)
r4 = socket(0x1, 0x2, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]})
r7 = gettid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r8, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8)
r10 = dup2(r8, r9)
fcntl$setown(r8, 0x8, r7)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000180)=<r11=>0x0, &(0x7f0000000140)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}})
tkill(r7, 0x13)
write$tcp_mem(r10, &(0x7f0000000240)={0x8, 0x20, 0xaf, 0x20, 0xff}, 0x48)
setresuid(0x0, r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000100)={<r13=>0x0, 0x4}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)={r13, 0x2b, "ae7190fd30c96b00d648ba29f8f7a9ee66604588692204f683445ea2ead258e9e7ab74e224d346b83090ff"}, &(0x7f0000000300)=0x33)
sendmmsg$unix(r1, &(0x7f0000008580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r0, r6}}}], 0x20, 0x4000}}], 0x1, 0x0)

3.311593403s ago: executing program 1 (id=1593):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000006c0))
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0x91, "f0d1a5b2b729d634563143a9c3ddfba69f562e70978e04ea7de73995bf51c856b1f6716a0a73ef14684ed33a0e1d4d6768ff1c3ee0237f4e5f7f46fa0211b717e9a9064e994d0276891b84b456e0aeab83b35e17fba2e041ed820887216a7ffa14c79df747c67a8039263219b00b327d235508e7b9acdf8f6ae1417a6ad81403b444ed9e718afe1df9d1f2161eae630464"}, &(0x7f00000007c0)=0x99)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000840)={0x4, 0x6, 0x9, 0xff})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15"], 0x1)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x210541)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000004c0)={{0x3, 0x1, 0x0, 0x6, 'syz0\x00', 0x5}, 0x7, 0x200, 0x4, r1, 0x5, 0xffffb123, 'syz1\x00', &(0x7f00000001c0)=['/$5$\x00', '\x00', 'sched_switch\x00', 'overlay\x00', 'ns/pid_for_children\x00'], 0x2f})
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
get_robust_list(r1, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000380)={&(0x7f0000000300)}, 0x0, &(0x7f00000003c0)}, &(0x7f0000000680)=0x18)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')

3.115977806s ago: executing program 3 (id=1594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x6ddc38118dda0360)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:/', 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0xc593, 0x10001ff, 0x4, 0x2, 0x8000000000000001, 0x1, 0x1, 0x1, 0x8, 0x8, 0x1, 0x9, 0x1, 0x4, 0x12, 0x1d, {0x7, 0xd}, 0x3, 0x9}}})
listen(r1, 0x9)
sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000240)={0x0, 0x4, 0xff, 0x2a, 0x5})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

3.04394144s ago: executing program 2 (id=1595):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x184, 0x10, 0x1, 0x3, 0x0, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in=@empty, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1000000000000}, {0x0, 0x0, 0x2000}, {}, 0x70bd25, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(rmd128,ecb(arc4))\x00'}, 0x0, 0x80}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, 0x0, 0x0)
ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x0, 0x80600})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680))
chroot(0x0)

1.943909823s ago: executing program 1 (id=1596):
r0 = gettid()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001a00)=[{{&(0x7f0000000140)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851)
setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0xa0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r2, 0x7, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
sync()
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.642513159s ago: executing program 4 (id=1597):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='consume_skb\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffe}, 0xfffffffffffffe6d)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x7a98, 0xffffffff, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180161002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009e85000000710000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='netlink_extack\x00', r7}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
mq_unlink(&(0x7f0000000140)='(\x00')
ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x13, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))

1.591063059s ago: executing program 3 (id=1598):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
socket(0x1e, 0x4, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x40, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0xa, 0x2b, 0x1, @remote, @local, {[@srh={0x32, 0x0, 0x4, 0x0, 0x1, 0x10}], "44a9"}}}}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0x40, @local, 0x1000000}, 0x13)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b0009008000", 0x2c}], 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}}, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))

1.430669643s ago: executing program 1 (id=1599):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x6}}, './file0\x00'}) (rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="01000080", @ANYRES8=r0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000a"], 0x184}}, 0x0)

404.689244ms ago: executing program 2 (id=1600):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f042})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000500)={{0x0, 0x2, 0x3, 0x2, 0xffffffffffffffff, 0x1000, 0x9, 0x5, 0x80000000, 0xffffffff, 0x1, 0x7f, 0xfd, 0xfffffffffffffff9, 0x18092}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c80)={0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000300)={0x0, 0x6})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000102a40)={0x0, ""/256, 0x0, <r1=>0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000300)={<r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000500)={{r8, 0x2, 0x3, 0x2, 0xffffffffffffffff, 0x1000, 0x9, 0x5, 0x80000000, 0xffffffff, 0x1, 0x7f, 0xfd, 0xfffffffffffffff9, 0x18092}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000c80)={0x0, r8, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000300)={r8, 0x6})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = dup(r10)
r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r12, &(0x7f0000032680)=""/102400, 0x19000)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES16=r12, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r13}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r14, 0x81f8943c, &(0x7f0000000300)={<r15=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000500)={{r15, 0x2, 0x3, 0x2, 0xffffffffffffffff, 0x1000, 0x9, 0x5, 0x80000000, 0xffffffff, 0x1, 0x7f, 0xfd, 0xfffffffffffffff9, 0x18092}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000000c80)={0x0, r15, "2270ec8ce155fff9ee00d77bdc0d34aa84cc4d55c8ab214fef6ae4fd7cfa2bf925b5bb45c102635a2bcace418e528d3d224168465802a986fa7f2a2f69a54663b06b9b7e493b1166ed2121a3f7d9fada36c8bfb93249a0296086d249cfb8fec975d14ffcafe192601e740db199070d8961baf7983006a0cfec41d5eabbc40e2c1dd9f1aeb1fd9fa47e31a585681d38ec0ad83e10c3d81fb07a2189294ebc844b08315e60e1a4fb77e37e03646343cf30fc633d1ad0948150fcc93465fe0b6709b98d23ee1f1ea08e665047cf6856cf24ef3e973ec8bc680859973ddda1f1f150eb4d6a9ae8e336f69ca3916aace794c14037addfc02c99e4f9dcf638ee854198", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP(r11, 0xd0009412, &(0x7f0000000300)={r15, 0x6})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000102c40)={<r16=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000103c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r8}, {r15, r16}], 0x0, "475b1653efea73"})

403.062796ms ago: executing program 3 (id=1601):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r5, &(0x7f0000000500)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x7000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
unshare(0x20020480)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010002"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
read$FUSE(r6, &(0x7f0000001b80)={0x2020}, 0x2020)

359.984306ms ago: executing program 4 (id=1602):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
syz_io_uring_setup(0x5988, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0)
syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000b64000/0x4000)=nil, 0x4000}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@fd={0x7, 0x1, 0x4, 0x8, 0x6, {}, {0x1, 0x2, 0x9, 0x0, 0x9, 0xfd, 'yT=7'}, 0x0, 0x4, {}, 0x4})
syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01040000000000000000010000000000000008410000004c0018ffffffff62726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x1, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0xfff1, 0xb}, {0xffe0, 0x1}, {0x2}}}, 0x24}}, 0x2000c044)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001780)={0x0, @dev, @initdev}, &(0x7f00000017c0)=0xc)

213.353138ms ago: executing program 3 (id=1603):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

121.2771ms ago: executing program 1 (id=1604):
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a4801, 0x1d1)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, &(0x7f00000000c0)='!', 0xb7f40, 0x30000000}])
gettid()
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240)
write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000003c0)=@buf)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d61637674617000040002800800050073bd281b6486f4d8b41455ae28509ba1728334615abcabde9ab8bfeaf667e346c23cd84f7f44982a689cec0fb2201f611a2db9e11f5018ff11ccedf34ed335cc2b8eb6a2b34bb8f047fcd87e68f3c1f82addeefd2586d6b65311dc8df6e398aa59ec57137b720e8b7e252a5486369ad42522dc96cc603dd80e243ba0af23a6d09011d1dd28f8a1a67276060d17e16b08852affb1a126992a580bed", @ANYRES32=r7, @ANYBLOB="0800040044000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

0s ago: executing program 0 (id=1605):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x420004008d}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000240))
mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

t_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  344.149006][ T9272] zonefs (nullb0) ERROR: Not a zoned block device
[  344.161110][ T9272] tls_set_device_offload_rx: netdev not found
[  344.666423][ T5812] block nbd43: Receive control failed (result -32)
[  344.799185][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  345.664353][ T9288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.780635][ T9296] batadv_slave_1: entered promiscuous mode
[  345.791654][ T9296] batadv_slave_1: left promiscuous mode
[  347.551032][ T9288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.640198][ T9305] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  347.739943][ T9288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.650120][ T9317] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  348.702820][ T9288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.982079][ T9319] overlay: ./file0 is not a directory
[  349.109115][ T9288] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.178231][ T9288] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.217896][ T9288] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.244554][ T9288] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.592744][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.855'.
[  349.831774][ T9344] batadv_slave_1: entered promiscuous mode
[  350.247681][ T9354] openvswitch: netlink: IP tunnel dst address not specified
[  350.493683][ T9342] batadv_slave_1: left promiscuous mode
[  351.854532][ T9371] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  352.177401][ T9379] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  352.240026][ T9359] lo speed is unknown, defaulting to 1000
[  353.140808][ T9393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.869'.
[  354.645557][ T5812] block nbd44: Receive control failed (result -32)
[  354.925631][ T5812] block nbd45: Receive control failed (result -32)
[  354.998616][ T9426] batadv_slave_1: entered promiscuous mode
[  355.113390][ T9427] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  355.471361][  T973] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  355.561795][ T9416] batadv_slave_1: left promiscuous mode
[  355.594183][ T9437] block device autoloading is deprecated and will be removed.
[  355.614001][   T30] audit: type=1400 audit(1745686800.622:433): avc:  denied  { listen } for  pid=9436 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  355.676611][   T30] audit: type=1400 audit(1745686800.652:434): avc:  denied  { connect } for  pid=9436 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  355.677431][ T9439] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  355.707685][   T30] audit: type=1400 audit(1745686800.682:435): avc:  denied  { map } for  pid=9436 comm="syz.3.881" path="socket:[28318]" dev="sockfs" ino=28318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  355.732948][  T973] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  355.742156][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.750845][   T30] audit: type=1400 audit(1745686800.682:436): avc:  denied  { accept } for  pid=9436 comm="syz.3.881" path="socket:[28318]" dev="sockfs" ino=28318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  355.774094][    C0] vkms_vblank_simulate: vblank timer overrun
[  355.781146][  T973] usb 1-1: config 0 descriptor??
[  355.791383][ T5860] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  355.800692][  T973] gspca_main: cpia1-2.14.0 probing 0813:0001
[  355.951368][ T5860] usb 3-1: Using ep0 maxpacket: 32
[  355.959715][ T5860] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  355.979051][ T5860] usb 3-1: config 0 has no interface number 0
[  355.996487][ T5860] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  356.018641][ T5860] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  356.030071][ T5860] usb 3-1: config 0 interface 2 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  356.040842][ T5860] usb 3-1: config 0 interface 2 has no altsetting 0
[  356.042020][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.883'.
[  356.052975][ T5860] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  356.075729][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.086241][ T5860] usb 3-1: Product: syz
[  356.090524][ T5860] usb 3-1: Manufacturer: syz
[  356.096037][ T5860] usb 3-1: SerialNumber: syz
[  356.113523][ T5860] usb 3-1: config 0 descriptor??
[  356.236897][  T973] cpia1 1-1:0.0: unexpected state after lo power cmd: 01
[  356.441228][  T973] gspca_cpia1: usb_control_msg 01, error -71
[  356.458180][  T973] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  356.499834][  T973] usb 1-1: USB disconnect, device number 18
[  357.471644][   T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  357.744621][   T47] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  357.831521][ T5814] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  357.936945][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.055978][   T47] usb 2-1: config 0 has no interface number 0
[  358.062429][   T47] usb 2-1: config 0 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  358.076860][   T47] usb 2-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  358.088493][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  358.098120][   T47] usb 2-1: SerialNumber: syz
[  358.156327][ T9478] batadv_slave_1: entered promiscuous mode
[  358.483707][ T9471] batadv_slave_1: left promiscuous mode
[  358.677205][   T47] usb 2-1: config 0 descriptor??
[  358.686317][ T5814] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  358.727560][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.750923][ T5860] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  358.781523][ T5814] usb 1-1: config 0 has no interface number 0
[  358.788132][ T5814] usb 1-1: config 0 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  358.905625][ T5814] usb 1-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  358.923181][   T47] usb 2-1: USB disconnect, device number 15
[  358.939731][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  358.953436][ T5860] usb 3-1: invalid MIDI out EP 0
[  359.368100][ T5814] usb 1-1: SerialNumber: syz
[  359.399748][ T5814] usb 1-1: config 0 descriptor??
[  359.496876][ T9487] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  359.529825][ T5860] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22
[  359.535303][ T5860] usb 3-1: USB disconnect, device number 15
[  359.551743][ T9492] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  359.615650][ T7690] udevd[7690]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.980818][   T30] audit: type=1400 audit(1745686804.982:437): avc:  denied  { accept } for  pid=9493 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  360.350734][   T30] audit: type=1400 audit(1745686805.072:438): avc:  denied  { write } for  pid=9493 comm="syz.3.894" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  360.373380][    C0] vkms_vblank_simulate: vblank timer overrun
[  360.403910][  T973] usb 1-1: USB disconnect, device number 19
[  361.478652][ T9507] overlay: ./file0 is not a directory
[  361.498586][ T9502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.896'.
[  365.293963][ T9554] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  365.441390][ T5860] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  365.507392][ T9554] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  365.802291][ T5860] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  365.818201][ T5860] usb 5-1: config 0 has no interface number 0
[  365.828720][ T5860] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  365.905406][ T5860] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  365.916342][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  365.926066][ T5860] usb 5-1: SerialNumber: syz
[  365.940295][ T5860] usb 5-1: config 0 descriptor??
[  365.961452][ T9552] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  366.038966][ T9569] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  366.061383][ T5814] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  366.141369][  T973] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  366.258617][   T24] usb 5-1: USB disconnect, device number 16
[  366.274590][ T5814] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  366.288508][ T5814] usb 3-1: config 0 has no interface number 0
[  366.296204][ T5814] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  366.315689][ T5814] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  366.332910][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  366.341103][ T5814] usb 3-1: SerialNumber: syz
[  366.341438][  T973] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  366.354675][   T30] audit: type=1400 audit(1745686811.362:439): avc:  denied  { write } for  pid=5169 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  366.357392][ T5814] usb 3-1: config 0 descriptor??
[  366.391022][ T9556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  366.398936][  T973] usb 4-1: config 0 has no interface number 0
[  366.413508][  T973] usb 4-1: config 0 interface 223 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  366.427450][   T30] audit: type=1400 audit(1745686811.362:440): avc:  denied  { remove_name } for  pid=5169 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  366.450515][  T973] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  366.471537][   T30] audit: type=1400 audit(1745686811.362:441): avc:  denied  { add_name } for  pid=5169 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  366.784451][  T973] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  366.804824][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  366.820241][  T973] usb 4-1: SerialNumber: syz
[  366.829649][  T973] usb 4-1: config 0 descriptor??
[  366.847791][ T5814] usb 3-1: USB disconnect, device number 16
[  367.098695][ T9582] overlay: ./file0 is not a directory
[  367.106625][ T5814] usb 4-1: USB disconnect, device number 19
[  368.254069][ T5812] block nbd46: Receive control failed (result -32)
[  369.391791][ T9606] NILFS (nullb0): couldn't find nilfs on the device
[  369.650933][ T9611] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  370.120545][ T9620] openvswitch: netlink: IP tunnel dst address not specified
[  370.200388][ T9622] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  371.338650][ T9639] lo speed is unknown, defaulting to 1000
[  371.371370][ T5860] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  371.469213][   T30] audit: type=1400 audit(1745686816.462:442): avc:  denied  { write } for  pid=9633 comm="syz.2.927" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  371.552387][ T9646] openvswitch: netlink: IP tunnel dst address not specified
[  372.044733][ T5860] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  372.060610][ T5860] usb 4-1: config 0 has no interface number 0
[  372.067343][ T5860] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  372.085235][ T5860] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  372.103739][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  372.117230][ T5860] usb 4-1: SerialNumber: syz
[  372.129636][ T5860] usb 4-1: config 0 descriptor??
[  372.164410][ T9630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  372.377512][ T9652] libceph: resolve '0.' (ret=-3): failed
[  372.540715][ T5857] usb 4-1: USB disconnect, device number 20
[  372.835026][ T5812] block nbd47: Receive control failed (result -32)
[  372.865715][ T9657] lo speed is unknown, defaulting to 1000
[  373.532807][ T9665] batadv_slave_1: entered promiscuous mode
[  374.159617][ T9662] batadv_slave_1: left promiscuous mode
[  375.621366][ T5860] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  375.941970][ T5860] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  375.957779][ T5860] usb 1-1: config 0 has no interface number 0
[  375.967481][ T5860] usb 1-1: config 0 interface 223 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  375.989557][ T5860] usb 1-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  376.020009][ T5860] usb 1-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  376.038423][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  376.051531][ T5860] usb 1-1: SerialNumber: syz
[  376.067054][ T5860] usb 1-1: config 0 descriptor??
[  376.117109][ T5812] block nbd48: Receive control failed (result -32)
[  376.211430][ T5814] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  376.298692][   T24] usb 1-1: USB disconnect, device number 20
[  376.443048][ T5814] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  376.458565][ T5814] usb 5-1: config 0 has no interface number 0
[  376.532604][ T9703] openvswitch: netlink: IP tunnel dst address not specified
[  376.948088][ T5814] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  377.079373][ T5814] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  377.089143][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  377.097530][ T5814] usb 5-1: SerialNumber: syz
[  377.103930][ T5814] usb 5-1: config 0 descriptor??
[  377.109368][ T9675] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  377.849322][ T9716] NILFS (nullb0): couldn't find nilfs on the device
[  378.564038][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.610650][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.651179][   T47] usb 5-1: USB disconnect, device number 17
[  379.043628][ T9722] lo speed is unknown, defaulting to 1000
[  379.202651][   T30] audit: type=1400 audit(1745686824.202:443): avc:  denied  { create } for  pid=9731 comm="syz.4.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  379.625851][   T30] audit: type=1400 audit(1745686824.212:444): avc:  denied  { read } for  pid=9731 comm="syz.4.951" path="socket:[30479]" dev="sockfs" ino=30479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  380.031448][ T5860] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  380.373815][ T5860] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  380.382230][ T5860] usb 4-1: config 0 has no interface number 0
[  380.413749][ T5860] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  380.424036][ T9741] syzkaller1: entered promiscuous mode
[  380.429495][ T9741] syzkaller1: entered allmulticast mode
[  380.436651][ T5860] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  380.446005][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  380.460127][ T5860] usb 4-1: SerialNumber: syz
[  380.479597][ T5860] usb 4-1: config 0 descriptor??
[  380.502759][ T9736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  381.158393][ T9755] NILFS (nullb0): couldn't find nilfs on the device
[  381.611245][    C0] vkms_vblank_simulate: vblank timer overrun
[  381.829656][   T24] usb 4-1: USB disconnect, device number 21
[  383.585911][ T9785] NILFS (nullb0): couldn't find nilfs on the device
[  384.143980][   T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  384.340312][ T9790] NILFS (nullb0): couldn't find nilfs on the device
[  384.694090][   T47] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  384.702412][   T47] usb 3-1: config 0 has no interface number 0
[  384.835419][   T47] usb 3-1: config 0 interface 223 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  384.868861][   T47] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  384.898861][   T47] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  384.898902][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  384.898921][   T47] usb 3-1: SerialNumber: syz
[  385.315917][   T47] usb 3-1: config 0 descriptor??
[  385.349793][   T47] usb 3-1: can't set config #0, error -71
[  385.358066][   T47] usb 3-1: USB disconnect, device number 17
[  387.663750][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'.
[  387.761494][ T5856] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  387.778584][ T5812] block nbd49: Receive control failed (result -32)
[  387.938618][ T5856] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  387.950680][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'.
[  388.082656][ T5856] usb 4-1: config 0 has no interface number 0
[  388.109451][ T5856] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  388.732834][ T5856] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  388.746391][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  388.757660][ T5856] usb 4-1: SerialNumber: syz
[  388.780661][ T5856] usb 4-1: config 0 descriptor??
[  388.795272][ T9826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  389.065705][ T5856] usb 4-1: USB disconnect, device number 22
[  389.333086][ T9860] erofs (device nbd4): cannot find valid erofs superblock
[  390.212716][   T30] audit: type=1400 audit(1745686835.212:445): avc:  denied  { getopt } for  pid=9868 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  390.253277][ T9862] lo speed is unknown, defaulting to 1000
[  390.318862][   T30] audit: type=1400 audit(1745686835.212:446): avc:  denied  { create } for  pid=9868 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  390.341915][ T9872] overlay: ./file0 is not a directory
[  390.348169][   T30] audit: type=1400 audit(1745686835.242:447): avc:  denied  { bind } for  pid=9868 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  390.554308][ T9880] netlink: 32 bytes leftover after parsing attributes in process `syz.0.987'.
[  390.805135][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.988'.
[  392.304272][ T5857] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  392.327684][ T9896] batadv_slave_1: entered promiscuous mode
[  392.380906][ T9901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.992'.
[  392.472751][ T5857] usb 4-1: No LPM exit latency info found, disabling LPM.
[  392.498069][ T5857] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x82 is Bulk; changing to Interrupt
[  392.514098][ T5857] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  392.527291][ T9892] batadv_slave_1: left promiscuous mode
[  392.527763][ T5857] usb 4-1: config 1 interface 0 has no altsetting 0
[  393.643450][ T9921] openvswitch: netlink: IP tunnel dst address not specified
[  393.951580][ T9923] NILFS (nullb0): couldn't find nilfs on the device
[  394.724721][ T5857] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.743214][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'.
[  394.746538][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.840600][ T5857] usb 4-1: can't set config #1, error -71
[  394.944637][ T5857] usb 4-1: USB disconnect, device number 23
[  395.546966][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'.
[  395.936621][ T9937] overlay: ./file0 is not a directory
[  396.061731][ T9940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1004'.
[  396.074154][ T5856] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  396.187097][ T9951] batadv_slave_1: entered promiscuous mode
[  396.569359][ T5856] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  396.592661][ T5856] usb 5-1: config 0 has no interface number 0
[  396.611439][ T5856] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  396.648326][ T5856] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  396.673085][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  396.682909][ T5856] usb 5-1: SerialNumber: syz
[  396.689981][   T30] audit: type=1400 audit(1745686841.692:448): avc:  denied  { write } for  pid=9954 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  396.712915][ T5856] usb 5-1: config 0 descriptor??
[  396.807120][ T9944] batadv_slave_1: left promiscuous mode
[  396.828372][ T9941] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  396.839329][   T30] audit: type=1400 audit(1745686841.692:449): avc:  denied  { create } for  pid=9954 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  396.905721][  T973] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  397.208695][ T9964] openvswitch: netlink: IP tunnel dst address not specified
[  397.623684][  T973] usb 3-1: config 0 has an invalid interface number: 57 but max is 0
[  397.641183][  T973] usb 3-1: config 0 has no interface number 0
[  397.658539][   T47] usb 5-1: USB disconnect, device number 18
[  397.659947][  T973] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  397.679373][ T9954] delete_channel: no stack
[  397.719599][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.739047][  T973] usb 3-1: config 0 descriptor??
[  397.753820][  T973] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  397.766737][  T973] gspca_mr97310a: reg write [21] error -22
[  397.778002][  T973] mr97310a 3-1:0.57: probe with driver mr97310a failed with error -22
[  397.938011][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1012'.
[  398.038596][ T5856] usb 3-1: USB disconnect, device number 18
[  398.717688][ T9972] lo speed is unknown, defaulting to 1000
[  398.756055][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'.
[  398.854378][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1017'.
[  399.151323][   T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  399.194884][ T9993] overlay: ./file0 is not a directory
[  399.318711][ T9993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1021'.
[  399.422180][T10001] openvswitch: netlink: IP tunnel dst address not specified
[  399.791852][   T47] usb 5-1: Using ep0 maxpacket: 16
[  399.802364][   T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.813007][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  399.825100][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  399.835063][   T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  399.844858][   T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  399.860010][   T47] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  399.869276][   T47] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  399.878571][   T47] usb 5-1: Manufacturer: syz
[  399.968797][   T47] usb 5-1: config 0 descriptor??
[  401.411323][   T47] rc_core: IR keymap rc-hauppauge not found
[  401.469273][   T47] Registered IR keymap rc-empty
[  401.477685][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  401.511755][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  401.555210][   T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  401.659876][   T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[  401.699580][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  401.719696][T10013] SELinux:  Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped).
[  401.918441][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1027'.
[  401.918596][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.042301][   T30] audit: type=1400 audit(1745686846.912:450): avc:  denied  { relabelto } for  pid=10011 comm="syz.2.1026" name="syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_auth_t:s0"
[  402.081528][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.207567][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.253340][   T30] audit: type=1400 audit(1745686847.052:451): avc:  denied  { associate } for  pid=10011 comm="syz.2.1026" name="syz2" dev="cgroup2" ino=125 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_auth_t:s0"
[  402.704610][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.795341][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.821361][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  402.846441][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  403.002431][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  403.031446][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  403.035624][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'.
[  403.099410][T10029] batadv_slave_1: entered promiscuous mode
[  403.445854][   T47] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  403.519845][   T47] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  403.562487][   T47] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  403.585317][   T47] usb 5-1: USB disconnect, device number 19
[  403.633722][T10019] batadv_slave_1: left promiscuous mode
[  403.936905][T10042] batadv_slave_1: entered promiscuous mode
[  404.207126][T10040] overlay: ./file0 is not a directory
[  404.359922][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1036'.
[  404.502017][T10034] batadv_slave_1: left promiscuous mode
[  404.767109][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1039'.
[  404.956355][ T5812] block nbd50: Receive control failed (result -32)
[  405.103620][T10064] wg1: entered promiscuous mode
[  405.108644][T10064] wg1: entered allmulticast mode
[  405.228743][   T30] audit: type=1326 audit(1745686850.232:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.4.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda3458e969 code=0x0
[  405.473166][T10069] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  405.752203][T10077] veth0_vlan: entered allmulticast mode
[  405.763996][ T5857] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  405.931487][ T5857] usb 3-1: device descriptor read/64, error -71
[  406.251919][ T5856] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  406.373394][T10083] batadv_slave_1: entered promiscuous mode
[  406.425515][ T5856] usb 4-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  406.753996][ T5857] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  406.856748][T10078] batadv_slave_1: left promiscuous mode
[  406.916885][ T5857] usb 3-1: device descriptor read/64, error -71
[  406.926226][ T5856] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  406.991637][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  407.003567][ T5856] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9
[  407.015464][ T5856] usb 4-1: Manufacturer: syz
[  407.024826][ T5856] usb 4-1: SerialNumber: syz
[  407.075760][ T5857] usb usb3-port1: attempt power cycle
[  407.141916][ T5856] usb 4-1: config 0 descriptor??
[  407.203926][ T5892] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  407.250611][T10095] syz_tun: entered allmulticast mode
[  408.002200][ T5857] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  408.280230][ T5892] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  408.288437][ T5892] usb 5-1: config 0 has no interface number 0
[  408.294532][ T5892] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  408.305520][ T5892] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  408.321377][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  408.329421][ T5892] usb 5-1: SerialNumber: syz
[  408.432232][ T5892] usb 5-1: config 0 descriptor??
[  408.437782][T10084] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  408.503889][T10092] syz_tun: left allmulticast mode
[  408.601407][ T5857] usb 3-1: device not accepting address 21, error -71
[  408.618534][ T5814] usb 4-1: USB disconnect, device number 24
[  408.916451][ T5814] usb 5-1: USB disconnect, device number 20
[  409.110391][T10105] overlay: ./file0 is not a directory
[  409.165555][T10107] syz_tun: entered allmulticast mode
[  410.467241][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'.
[  410.660832][T10103] syz_tun: left allmulticast mode
[  410.711602][ T5857] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  410.858187][ T5857] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  411.340456][ T5857] usb 3-1: config 0 has no interface number 0
[  411.356673][ T5857] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  411.443884][T10121] vivid-000: disconnect
[  411.458759][T10118] vivid-000: reconnect
[  411.466713][ T5857] usb 3-1: string descriptor 0 read error: -71
[  411.480147][ T5857] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  411.500095][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  411.546348][ T5857] usb 3-1: config 0 descriptor??
[  411.581934][ T5857] usb 3-1: can't set config #0, error -71
[  411.608584][ T5857] usb 3-1: USB disconnect, device number 22
[  411.898416][T10129] batadv_slave_1: entered promiscuous mode
[  412.305756][T10132] FAULT_INJECTION: forcing a failure.
[  412.305756][T10132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.339243][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.3.1063 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) 
[  412.339268][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  412.339277][T10132] Call Trace:
[  412.339283][T10132]  <TASK>
[  412.339289][T10132]  dump_stack_lvl+0x16c/0x1f0
[  412.339313][T10132]  should_fail_ex+0x512/0x640
[  412.339339][T10132]  _copy_to_user+0x32/0xd0
[  412.339364][T10132]  simple_read_from_buffer+0xcb/0x170
[  412.339391][T10132]  proc_fail_nth_read+0x197/0x270
[  412.339416][T10132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  412.339442][T10132]  ? rw_verify_area+0xcf/0x680
[  412.339468][T10132]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  412.339490][T10132]  vfs_read+0x1de/0xc70
[  412.339516][T10132]  ? __pfx___mutex_lock+0x10/0x10
[  412.339537][T10132]  ? __pfx_vfs_read+0x10/0x10
[  412.339566][T10132]  ? __fget_files+0x20e/0x3c0
[  412.339599][T10132]  ksys_read+0x12a/0x240
[  412.339621][T10132]  ? __pfx_ksys_read+0x10/0x10
[  412.339643][T10132]  ? rcu_is_watching+0x12/0xc0
[  412.339669][T10132]  do_syscall_64+0xcd/0x260
[  412.339691][T10132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.339708][T10132] RIP: 0033:0x7f893418d37c
[  412.339722][T10132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  412.339738][T10132] RSP: 002b:00007f8934fc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  412.339755][T10132] RAX: ffffffffffffffda RBX: 00007f89343b5fa0 RCX: 00007f893418d37c
[  412.339766][T10132] RDX: 000000000000000f RSI: 00007f8934fc60a0 RDI: 0000000000000006
[  412.339776][T10132] RBP: 00007f8934fc6090 R08: 0000000000000000 R09: 0000000000000000
[  412.339786][T10132] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000001
[  412.339796][T10132] R13: 0000000000000000 R14: 00007f89343b5fa0 R15: 00007ffebbd00988
[  412.339820][T10132]  </TASK>
[  412.531788][T10123] batadv_slave_1: left promiscuous mode
[  412.682907][T10141] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1064'.
[  412.692500][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1064'.
[  412.754239][T10143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1067'.
[  412.755077][   T30] audit: type=1400 audit(1745686857.762:453): avc:  denied  { listen } for  pid=10142 comm="syz.3.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  412.858644][T10155] delete_channel: no stack
[  414.910779][T10180] batadv_slave_1: entered promiscuous mode
[  415.064860][T10168] batadv_slave_1: left promiscuous mode
[  415.650410][T10185] tmpfs: Bad value for 'mpol'
[  415.689511][T10187] program syz.3.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  415.782203][T10190] ubi31: detaching mtd0
[  415.792512][T10190] ubi31: mtd0 is detached
[  415.967151][  T973] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  416.703688][  T973] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  416.733085][  T973] usb 1-1: config 0 has no interface number 0
[  416.759359][  T973] usb 1-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  416.776940][  T973] usb 1-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  416.786382][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  416.795883][  T973] usb 1-1: SerialNumber: syz
[  416.808640][  T973] usb 1-1: config 0 descriptor??
[  416.841123][T10182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  416.876396][   T30] audit: type=1400 audit(1745686861.882:454): avc:  denied  { mounton } for  pid=10201 comm="syz.4.1081" path="/222/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1
[  417.236018][  T973] usb 1-1: USB disconnect, device number 21
[  417.725562][ T5812] block nbd51: Receive control failed (result -32)
[  419.082788][ T5858] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  419.244915][T10247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1091'.
[  419.282864][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41587, setting to 1024
[  419.306796][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  419.306823][ T5858] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  419.306836][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.309552][ T5858] usb 4-1: config 0 descriptor??
[  420.344213][ T5858] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  420.355356][ T5858] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  420.375997][ T5858] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  421.496212][T10280] NILFS (nullb0): couldn't find nilfs on the device
[  422.265872][  T973] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  422.511070][T10287] openvswitch: netlink: IP tunnel dst address not specified
[  422.891676][  T973] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  422.963302][  T973] usb 3-1: config 0 has no interface number 0
[  422.969797][  T973] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  423.037966][  T973] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  423.054565][ T5814] usb 4-1: USB disconnect, device number 25
[  423.060531][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  423.117617][  T973] usb 3-1: SerialNumber: syz
[  423.138729][  T973] usb 3-1: config 0 descriptor??
[  423.158628][T10266] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  423.530736][ T5814] usb 3-1: USB disconnect, device number 23
[  423.550135][   T30] audit: type=1400 audit(1745686868.532:455): avc:  denied  { name_connect } for  pid=10285 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  423.570296][    C1] vkms_vblank_simulate: vblank timer overrun
[  423.744572][   T30] audit: type=1400 audit(1745686868.552:456): avc:  denied  { listen } for  pid=10285 comm="syz.1.1101" lport=60436 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  424.461120][T10295] lo speed is unknown, defaulting to 1000
[  424.895185][T10314] SELinux: failed to load policy
[  425.537893][   T30] audit: type=1326 audit(1745686870.542:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10323 comm="syz.1.1111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x0
[  425.547628][T10324] lo speed is unknown, defaulting to 1000
[  426.142489][T10339] macvtap1: entered allmulticast mode
[  426.147928][T10339] veth0_macvtap: entered allmulticast mode
[  426.973857][T10343] openvswitch: netlink: IP tunnel dst address not specified
[  427.032289][ T5812] block nbd52: Receive control failed (result -32)
[  427.501375][  T973] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  428.253158][  T973] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  428.253186][  T973] usb 1-1: config 0 has no interface number 0
[  428.253224][  T973] usb 1-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  428.254065][  T973] usb 1-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  428.254087][  T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  428.254105][  T973] usb 1-1: SerialNumber: syz
[  428.256320][  T973] usb 1-1: config 0 descriptor??
[  428.256792][T10351] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  428.805896][ T5892] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  428.814275][ T5856] usb 1-1: USB disconnect, device number 22
[  429.114050][ T5892] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  429.122657][ T5892] usb 3-1: config 0 has no interface number 0
[  429.129566][ T5892] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  429.141853][ T5892] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  429.151815][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  429.159815][ T5892] usb 3-1: SerialNumber: syz
[  429.164556][  T973] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  429.224820][ T5892] usb 3-1: config 0 descriptor??
[  429.230913][T10368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  429.326251][  T973] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  429.344615][  T973] usb 4-1: config 0 has no interface number 0
[  429.350760][  T973] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  429.382226][  T973] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  429.391921][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  429.399956][  T973] usb 4-1: SerialNumber: syz
[  429.423002][   T30] audit: type=1400 audit(1745686874.432:458): avc:  denied  { ioctl } for  pid=10376 comm="syz.4.1123" path="socket:[34019]" dev="sockfs" ino=34019 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  429.428893][  T973] usb 4-1: config 0 descriptor??
[  429.491638][T10377] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  429.519650][T10365] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  429.532688][   T24] usb 3-1: USB disconnect, device number 24
[  429.606626][T10376] delete_channel: no stack
[  429.788330][  T973] usb 4-1: USB disconnect, device number 26
[  430.044536][T10391] lo speed is unknown, defaulting to 1000
[  430.303386][T10396] openvswitch: netlink: IP tunnel dst address not specified
[  431.920881][ T5812] block nbd53: Receive control failed (result -32)
[  432.465340][T10432] syz_tun: entered allmulticast mode
[  434.530622][T10450] openvswitch: netlink: IP tunnel dst address not specified
[  434.939142][T10418] syz_tun: left allmulticast mode
[  435.367785][T10447] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  435.368299][T10447] FAULT_INJECTION: forcing a failure.
[  435.368299][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.947981][T10447] CPU: 1 UID: 0 PID: 10447 Comm: syz.3.1140 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) 
[  435.947997][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  435.948003][T10447] Call Trace:
[  435.948007][T10447]  <TASK>
[  435.948012][T10447]  dump_stack_lvl+0x16c/0x1f0
[  435.948028][T10447]  should_fail_ex+0x512/0x640
[  435.948044][T10447]  strncpy_from_user+0x3b/0x2e0
[  435.948059][T10447]  getname_flags.part.0+0x8f/0x550
[  435.948072][T10447]  ? rcu_is_watching+0x12/0xc0
[  435.948086][T10447]  getname_flags+0x93/0xf0
[  435.948101][T10447]  __x64_sys_mkdirat+0x76/0xb0
[  435.948118][T10447]  do_syscall_64+0xcd/0x260
[  435.948132][T10447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.948143][T10447] RIP: 0033:0x7f893418e969
[  435.948151][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.948162][T10447] RSP: 002b:00007f8934fc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  435.948172][T10447] RAX: ffffffffffffffda RBX: 00007f89343b5fa0 RCX: 00007f893418e969
[  435.948179][T10447] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  435.948185][T10447] RBP: 00007f8934fc6090 R08: 0000000000000000 R09: 0000000000000000
[  435.948192][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.948198][T10447] R13: 0000000000000000 R14: 00007f89343b5fa0 R15: 00007ffebbd00988
[  435.948215][T10447]  </TASK>
[  436.938902][ T5941] Bluetooth: hci6: Frame reassembly failed (-84)
[  436.963916][ T5941] Bluetooth: hci6: Frame reassembly failed (-84)
[  437.212050][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  437.421300][ T5858] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  437.656182][ T5858] usb 1-1: config 0 has an invalid interface number: 223 but max is 0
[  437.836903][ T5858] usb 1-1: config 0 has no interface number 0
[  438.544820][ T5858] usb 1-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  438.587456][T10486] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  438.610092][ T5858] usb 1-1: string descriptor 0 read error: -71
[  438.620117][ T5858] usb 1-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  438.630716][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  438.983710][T10491] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  439.001515][T10228] Bluetooth: hci6: command 0x1003 tx timeout
[  439.008166][   T55] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  439.149611][ T5858] usb 1-1: config 0 descriptor??
[  439.163622][ T5858] usb 1-1: can't set config #0, error -71
[  439.247650][ T5858] usb 1-1: USB disconnect, device number 23
[  439.562043][T10505] overlay: ./file0 is not a directory
[  439.594036][T10505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1155'.
[  440.004386][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.263514][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.370934][   T30] audit: type=1400 audit(1745686885.372:459): avc:  denied  { ioctl } for  pid=10513 comm="syz.2.1157" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  440.711313][  T973] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  440.926144][T10524] batadv_slave_1: entered promiscuous mode
[  440.941303][  T973] usb 1-1: Using ep0 maxpacket: 16
[  441.628054][T10519] batadv_slave_1: left promiscuous mode
[  442.460711][T10544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1165'.
[  442.502157][ T5892] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  442.586508][T10549] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  442.631300][ T5892] usb 5-1: device descriptor read/64, error -71
[  442.664169][T10551] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  442.672354][ T5858] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  442.871405][ T5892] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  442.997888][ T5858] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  443.131278][ T5892] usb 5-1: device descriptor read/64, error -71
[  443.188049][ T5858] usb 3-1: config 0 has no interface number 0
[  443.230954][  T973] usb 1-1: unable to get BOS descriptor or descriptor too short
[  443.244239][ T5892] usb usb5-port1: attempt power cycle
[  443.262141][  T973] usb 1-1: unable to read config index 0 descriptor/start: -71
[  443.591401][ T5892] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  444.305769][ T5858] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  444.313389][  T973] usb 1-1: can't read configurations, error -71
[  444.317136][ T5858] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  444.331557][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  444.349216][ T5858] usb 3-1: SerialNumber: syz
[  444.370290][ T5858] usb 3-1: config 0 descriptor??
[  444.383954][ T5892] usb 5-1: device descriptor read/8, error -71
[  444.400556][T10545] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  444.591428][ T5856] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  444.707347][ T5892] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  445.013184][ T5892] usb 5-1: device descriptor read/8, error -71
[  445.087261][T10567] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[10567]
[  445.314648][ T5858] usb 3-1: USB disconnect, device number 25
[  445.322526][   T30] audit: type=1400 audit(1745686890.122:460): avc:  denied  { write } for  pid=10565 comm="syz.0.1170" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  445.584899][ T5892] usb usb5-port1: unable to enumerate USB device
[  445.623767][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  447.447304][   T30] audit: type=1400 audit(1745686890.982:461): avc:  denied  { setopt } for  pid=10568 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  448.092214][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  448.173215][ T5856] usb 4-1: unable to read config index 0 descriptor/start: -71
[  448.310203][ T5856] usb 4-1: can't read configurations, error -71
[  448.614634][T10587] Bluetooth: MGMT ver 1.23
[  449.145526][T10587] Bluetooth: hci0: too big key_count value 43690
[  449.245598][T10593] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  449.655019][T10605] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  449.687182][T10607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10607 comm=syz.2.1174
[  449.712005][T10593] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.733164][T10613] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  449.889885][T10587] bond0: (slave veth3): Enslaving as an active interface with a down link
[  452.266681][   T30] audit: type=1400 audit(1745686897.262:462): avc:  denied  { create } for  pid=10641 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  453.608214][T10668] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  453.787260][T10673] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present
[  453.878179][   T30] audit: type=1400 audit(1745686898.862:463): avc:  denied  { connect } for  pid=10639 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  454.136886][ T5858] IPVS: starting estimator thread 0...
[  454.344307][T10677] IPVS: using max 45 ests per chain, 108000 per kthread
[  454.653791][T10686] openvswitch: netlink: IP tunnel dst address not specified
[  454.757340][T10685] openvswitch: netlink: IP tunnel dst address not specified
[  456.058020][   T30] audit: type=1400 audit(1745686901.042:464): avc:  denied  { remount } for  pid=10694 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  456.320215][   T30] audit: type=1400 audit(1745686901.252:465): avc:  denied  { bind } for  pid=10694 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  456.374321][T10698] NILFS (nullb0): couldn't find nilfs on the device
[  457.003253][T10701] tmpfs: Unknown parameter 'context$'
[  457.004009][   T30] audit: type=1400 audit(1745686902.002:466): avc:  denied  { create } for  pid=10700 comm="syz.0.1203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  457.105654][   T30] audit: type=1400 audit(1745686902.012:467): avc:  denied  { mounton } for  pid=10700 comm="syz.0.1203" path="/238/file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  457.688921][   T30] audit: type=1400 audit(1745686902.672:468): avc:  denied  { audit_write } for  pid=10705 comm="syz.1.1205" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  457.710664][T10701] could not allocate digest TFM handle sha384-neon
[  458.336947][   T30] audit: type=1400 audit(1745686903.342:469): avc:  denied  { unlink } for  pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  458.432959][T10715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  458.439495][T10715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  458.568519][T10715] vhci_hcd vhci_hcd.0: Device attached
[  458.581312][ T5814] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  458.790235][ T5814] usb 4-1: Using ep0 maxpacket: 8
[  458.823974][   T30] audit: type=1326 audit(1745686903.832:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  458.851481][   T24] usb 36-1: SetAddress Request (2) to port 0
[  458.871422][   T24] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  458.879042][ T5814] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  458.910888][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.918767][T10722] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15)
[  458.925458][T10722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  458.929921][ T5814] usb 4-1: Product: syz
[  458.933185][   T30] audit: type=1326 audit(1745686903.832:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  458.950722][ T5814] usb 4-1: Manufacturer: syz
[  458.972893][T10722] vhci_hcd vhci_hcd.0: Device attached
[  458.976843][   T30] audit: type=1326 audit(1745686903.832:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  458.985204][T10730] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  459.002174][   T30] audit: type=1326 audit(1745686903.832:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.033541][ T5814] usb 4-1: SerialNumber: syz
[  459.045638][ T5814] usb 4-1: config 0 descriptor??
[  459.055185][   T30] audit: type=1326 audit(1745686903.832:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.065765][ T5814] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  459.087860][T10730] syzkaller0: tun_chr_ioctl cmd 1074025676
[  459.095108][T10730] syzkaller0: owner set to 0
[  459.100833][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1210'.
[  459.124428][   T30] audit: type=1326 audit(1745686903.832:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.446044][T10726] vhci_hcd: connection closed
[  459.455097][T10716] vhci_hcd: connection reset by peer
[  459.465559][   T53] vhci_hcd: stop threads
[  459.465578][   T30] audit: type=1326 audit(1745686903.832:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.504894][   T30] audit: type=1326 audit(1745686903.832:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.510264][   T53] vhci_hcd: release socket
[  459.537578][   T53] vhci_hcd: disconnect device
[  459.543460][   T53] vhci_hcd: stop threads
[  459.547727][   T53] vhci_hcd: release socket
[  459.553549][   T53] vhci_hcd: disconnect device
[  459.613148][   T30] audit: type=1326 audit(1745686903.832:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.640301][   T30] audit: type=1326 audit(1745686903.832:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.668467][   T30] audit: type=1326 audit(1745686903.832:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22c638e969 code=0x7ffc0000
[  459.871274][ T5857] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  459.891362][   T47] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  460.027397][ T5857] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[  460.048080][T10740] syz_tun: entered allmulticast mode
[  460.059734][ T5857] usb 3-1: config 0 has no interface number 0
[  460.083583][ T5857] usb 3-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  460.108253][   T47] usb 1-1: Using ep0 maxpacket: 32
[  460.139650][ T5857] usb 3-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  460.209582][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  460.231148][   T47] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  460.277258][ T5857] usb 3-1: SerialNumber: syz
[  460.288083][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.348956][ T5857] usb 3-1: config 0 descriptor??
[  460.418133][T10732] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  460.429831][   T47] usb 1-1: config 0 descriptor??
[  460.537417][   T47] gspca_main: nw80x-2.14.0 probing 055f:d001
[  460.972012][T10738] syz_tun: left allmulticast mode
[  460.996884][ T5857] usb 3-1: USB disconnect, device number 26
[  461.222279][   T55] block nbd54: Receive control failed (result -32)
[  461.422245][   T55] block nbd55: Receive control failed (result -32)
[  461.455334][ T5892] usb 4-1: USB disconnect, device number 29
[  461.561772][T10757] 9pnet_fd: Insufficient options for proto=fd
[  461.960371][T10750] sctp: [Deprecated]: syz.0.1212 (pid 10750) Use of int in maxseg socket option.
[  461.960371][T10750] Use struct sctp_assoc_value instead
[  462.042371][   T47] gspca_nw80x: reg_w err -110
[  462.048607][T10765] sctp: [Deprecated]: syz.0.1212 (pid 10765) Use of int in maxseg socket option.
[  462.048607][T10765] Use struct sctp_assoc_value instead
[  462.089019][   T47] nw80x 1-1:0.0: probe with driver nw80x failed with error -110
[  462.107934][   T47] usb 1-1: USB disconnect, device number 26
[  462.166348][  T973] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  462.381312][  T973] usb 5-1: Using ep0 maxpacket: 8
[  462.582792][  T973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  462.604336][  T973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  462.621364][  T973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  462.711392][  T973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  462.761542][  T973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  462.771618][  T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.825725][T10771] lo speed is unknown, defaulting to 1000
[  462.971967][T10784] NILFS (nullb0): couldn't find nilfs on the device
[  464.081307][   T24] usb 36-1: device descriptor read/8, error -110
[  464.129460][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  464.129475][   T30] audit: type=1400 audit(1745686909.112:503): avc:  denied  { ioctl } for  pid=10776 comm="syz.3.1222" path="socket:[36530]" dev="sockfs" ino=36530 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  464.166776][  T973] usb 5-1: GET_CAPABILITIES returned 0
[  464.221581][  T973] usbtmc 5-1:16.0: can't read capabilities
[  464.512614][   T24] usb usb36-port1: attempt power cycle
[  464.581751][ T5858] vhci_hcd: vhci_device speed not set
[  464.836326][   T55] block nbd56: Receive control failed (result -32)
[  464.966932][T10803] sp0: Synchronizing with TNC
[  465.239700][   T30] audit: type=1400 audit(1745686910.242:504): avc:  denied  { ioctl } for  pid=10812 comm="syz.1.1231" path="socket:[37092]" dev="sockfs" ino=37092 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  465.293606][   T30] audit: type=1400 audit(1745686910.292:505): avc:  denied  { unmount } for  pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  465.464873][   T30] audit: type=1400 audit(1745686910.472:506): avc:  denied  { unlink } for  pid=10818 comm="syz.0.1232" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  465.488568][ T5892] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  465.796471][T10832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  466.266722][   T24] usb usb36-port1: unable to enumerate USB device
[  466.323233][  T973] usb 5-1: USB disconnect, device number 25
[  466.352305][ T5892] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  466.369092][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.473337][ T5892] usb 3-1: Product: syz
[  466.511388][ T5892] usb 3-1: Manufacturer: syz
[  466.533103][ T5892] usb 3-1: SerialNumber: syz
[  466.568091][ T5892] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  466.599247][T10845] ptrace attach of "./syz-executor exec"[10846] was attempted by "./syz-executor exec"[10845]
[  466.623214][   T55] block nbd57: Receive control failed (result -32)
[  466.681416][   T30] audit: type=1400 audit(1745686911.682:507): avc:  denied  { bind } for  pid=10849 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  466.830592][  T973] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  467.298885][   T30] audit: type=1400 audit(1745686911.802:508): avc:  denied  { firmware_load } for  pid=973 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  467.377680][   T30] audit: type=1400 audit(1745686912.382:509): avc:  denied  { setopt } for  pid=10859 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  467.718689][ T5856] usb 3-1: USB disconnect, device number 27
[  467.839554][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'.
[  467.849208][T10876] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  467.858186][T10876] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  468.337849][  T973] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  468.398383][  T973] ath9k_htc: Failed to initialize the device
[  468.408164][ T5856] usb 3-1: ath9k_htc: USB layer deinitialized
[  468.873375][   T55] block nbd58: Receive control failed (result -32)
[  468.987211][T10892] openvswitch: netlink: IP tunnel dst address not specified
[  469.203367][T10896] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[10896]
[  469.615943][T10900] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[10900]
[  470.799347][T10915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1261'.
[  470.831394][ T5892] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  470.937469][  T973] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  470.991369][ T5858] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  471.121249][  T973] usb 5-1: Using ep0 maxpacket: 32
[  471.140926][  T973] usb 5-1: config 0 interface 0 has no altsetting 0
[  471.164584][ T5892] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  471.182616][ T5892] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  471.194924][  T973] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  471.195778][ T5858] usb 4-1: config 0 has an invalid interface number: 223 but max is 0
[  471.204190][  T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.220562][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0
[  471.227694][ T5892] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  471.239812][ T5858] usb 4-1: config 0 has no interface number 0
[  471.247528][  T973] usb 5-1: Product: syz
[  471.253025][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.255902][ T5858] usb 4-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  471.356029][  T973] usb 5-1: Manufacturer: syz
[  471.356671][ T5858] usb 4-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  471.361481][  T973] usb 5-1: SerialNumber: syz
[  471.375443][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  471.376797][ T5892] usb 2-1: config 0 descriptor??
[  471.384054][ T5858] usb 4-1: SerialNumber: syz
[  471.397542][T10910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  471.404026][ T5858] usb 4-1: config 0 descriptor??
[  471.816153][T10901] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  471.847236][  T973] usb 5-1: config 0 descriptor??
[  471.940337][   T30] audit: type=1400 audit(1745686916.942:510): avc:  denied  { write } for  pid=10928 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  471.968633][   T30] audit: type=1400 audit(1745686916.942:511): avc:  denied  { bind } for  pid=10928 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  472.001008][   T30] audit: type=1400 audit(1745686916.942:512): avc:  denied  { name_bind } for  pid=10928 comm="syz.0.1265" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  472.018582][T10930] input: syz0 as /devices/virtual/input/input17
[  472.143123][   T30] audit: type=1400 audit(1745686916.942:513): avc:  denied  { node_bind } for  pid=10928 comm="syz.0.1265" saddr=fc00:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  472.155290][T10930] fuse: Bad value for 'user_id'
[  472.173711][T10930] fuse: Bad value for 'user_id'
[  472.376754][  T973] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  472.514190][  T973] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  472.631856][  T973] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121
[  472.659079][ T5858] usb 4-1: USB disconnect, device number 30
[  472.695850][T10937] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  472.706681][ T5892] usbhid 2-1:0.0: can't add hid device: -71
[  472.714929][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  472.728489][  T973] usb 5-1: USB disconnect, device number 26
[  472.762727][ T5892] usb 2-1: USB disconnect, device number 16
[  472.911692][   T55] block nbd59: Receive control failed (result -32)
[  473.309434][T10949] openvswitch: netlink: IP tunnel dst address not specified
[  473.334876][T10951] NILFS (nullb0): couldn't find nilfs on the device
[  474.517682][T10967] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1277'.
[  474.906817][   T30] audit: type=1400 audit(1745686919.902:514): avc:  denied  { setattr } for  pid=10959 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  475.978726][T10968] IPv6: sit1: Disabled Multicast RS
[  475.984511][T10968] sit1: entered allmulticast mode
[  478.239134][T10993] lo speed is unknown, defaulting to 1000
[  478.772932][ T5892] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  478.952026][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'.
[  479.091380][ T5892] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  479.151435][ T5892] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  479.179407][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0
[  479.196833][ T5892] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  479.231011][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.357900][   T30] audit: type=1400 audit(1745686924.362:515): avc:  denied  { mount } for  pid=11021 comm="syz.3.1291" name="/" dev="autofs" ino=39067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  479.387201][ T5892] usb 3-1: config 0 descriptor??
[  479.813249][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'.
[  479.816376][T11002] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  479.934208][   T30] audit: type=1400 audit(1745686924.942:516): avc:  denied  { unmount } for  pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  480.411164][ T5892] usbhid 3-1:0.0: can't add hid device: -71
[  480.418345][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  480.420750][T11040] netlink: 'syz.0.1294': attribute type 30 has an invalid length.
[  480.427207][   T30] audit: type=1400 audit(1745686925.402:517): avc:  denied  { ioctl } for  pid=11034 comm="syz.3.1293" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  480.454330][T11040] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  480.468826][T11040] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  480.470989][ T5892] usb 3-1: USB disconnect, device number 28
[  480.478121][T11040] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  480.478151][T11040] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  480.532882][T11040] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.542177][T11040] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.551026][T11040] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.560044][T11040] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  480.661394][   T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  480.701399][ T5858] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  480.734214][ T5860] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  480.812360][   T24] usb 4-1: Using ep0 maxpacket: 32
[  480.835126][   T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  480.855983][ T5858] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  480.914221][   T24] usb 4-1: config 0 has no interface number 0
[  480.928417][ T5858] usb 2-1: config 0 has no interface number 0
[  480.945291][ T5858] usb 2-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  480.966032][   T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  480.981283][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.989471][   T24] usb 4-1: Product: syz
[  480.989615][ T5860] usb 5-1: Using ep0 maxpacket: 32
[  481.003218][ T5858] usb 2-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  481.031893][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  481.039891][ T5858] usb 2-1: SerialNumber: syz
[  481.040127][ T5860] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  481.044596][   T24] usb 4-1: Manufacturer: syz
[  481.044614][   T24] usb 4-1: SerialNumber: syz
[  481.046479][   T24] usb 4-1: config 0 descriptor??
[  481.078039][ T5860] usb 5-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[  481.097040][   T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  481.106368][ T5860] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  481.107348][ T5858] usb 2-1: config 0 descriptor??
[  481.123981][T11032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  481.146465][ T5860] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  481.289151][ T5860] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  481.296000][   T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  481.340268][ T5860] usb 5-1: Product: syz
[  481.349271][ T5860] usb 5-1: Manufacturer: syz
[  481.364453][   T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  481.371158][ T5892] usb 2-1: USB disconnect, device number 17
[  481.479766][ T5860] usb 5-1: SerialNumber: syz
[  481.535990][ T5860] usb 5-1: config 0 descriptor??
[  481.732842][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  481.740759][ T5858] usb 4-1: USB disconnect, device number 31
[  481.749370][ T5858] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  481.779835][ T5858] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  481.798280][ T5858] quatech2 4-1:0.51: device disconnected
[  481.816002][ T5860] usb 5-1: USB disconnect, device number 27
[  482.491056][T11063] NILFS (nullb0): couldn't find nilfs on the device
[  482.568220][ T5858] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  482.993244][ T5858] usb 5-1: Using ep0 maxpacket: 32
[  482.999772][ T5858] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  483.018541][ T5858] usb 5-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config
[  483.461309][   T30] audit: type=1400 audit(1745686928.352:518): avc:  denied  { allowed } for  pid=11069 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  483.541672][ T5858] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  483.974670][ T5858] usb 5-1: string descriptor 0 read error: -71
[  484.001427][ T5858] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  484.010471][ T5858] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  484.835074][ T5858] usb 5-1: config 0 descriptor??
[  484.845470][ T5858] usb 5-1: can't set config #0, error -71
[  484.853250][ T5858] usb 5-1: USB disconnect, device number 28
[  484.866254][T11078] NILFS (nullb0): couldn't find nilfs on the device
[  485.110137][   T30] audit: type=1800 audit(1745686930.112:519): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1306" name="/" dev="9p" ino=2 res=0 errno=0
[  485.330459][T11089] lo speed is unknown, defaulting to 1000
[  485.499128][T11105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  487.555283][   T30] audit: type=1400 audit(1745686932.562:520): avc:  denied  { setattr } for  pid=11118 comm="syz.1.1309" path="/proc/981/task/982/attr/current" dev="proc" ino=39340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  487.641085][   T30] audit: type=1400 audit(1745686932.562:521): avc:  denied  { setcurrent } for  pid=11118 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  487.854379][T11128] openvswitch: netlink: IP tunnel dst address not specified
[  489.276047][T11135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  489.362462][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'.
[  489.480677][T11150] block nbd1: Cannot use ioctl interface on a netlink controlled device.
[  489.806577][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  489.980823][T11160] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  490.008189][   T30] audit: type=1400 audit(1745686935.002:522): avc:  denied  { create } for  pid=11159 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  490.051639][T11155] delete_channel: no stack
[  490.093578][ T5892] usb 1-1: Using ep0 maxpacket: 16
[  490.103660][   T30] audit: type=1400 audit(1745686935.002:523): avc:  denied  { connect } for  pid=11159 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  490.127057][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  490.176697][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  490.342053][ T5892] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  490.358312][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.386264][ T5892] usb 1-1: Product: syz
[  490.557557][   T47] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  490.845273][ T5892] usb 1-1: Manufacturer: syz
[  490.856716][ T5892] usb 1-1: SerialNumber: syz
[  490.866138][ T5892] usb 1-1: config 0 descriptor??
[  490.913509][ T5892] usb 1-1: can't set config #0, error -71
[  490.976184][ T5892] usb 1-1: USB disconnect, device number 27
[  491.136297][T11183] syz_tun: entered allmulticast mode
[  491.763869][   T47] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  492.465774][   T47] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  492.540358][   T47] usb 4-1: config 0 interface 0 has no altsetting 0
[  492.631128][   T47] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  492.645081][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.658767][T11181] syz_tun: left allmulticast mode
[  492.670096][   T47] usb 4-1: config 0 descriptor??
[  492.678094][T11173] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  492.925045][  T973] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  493.562785][T11198] openvswitch: netlink: IP tunnel dst address not specified
[  493.909859][   T47] holtek_mouse 0003:04D9:A067.0007: unknown main item tag 0x0
[  493.917729][   T47] holtek_mouse 0003:04D9:A067.0007: unknown main item tag 0x0
[  493.928636][   T47] holtek_mouse 0003:04D9:A067.0007: unexpected long global item
[  493.937042][   T47] holtek_mouse 0003:04D9:A067.0007: hid parse failed: -22
[  494.026940][   T47] holtek_mouse 0003:04D9:A067.0007: probe with driver holtek_mouse failed with error -22
[  494.078279][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.088299][   T47] usb 4-1: USB disconnect, device number 32
[  494.096497][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.151535][ T5858] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  494.203509][T11210] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  494.233837][  T973] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  494.243403][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.256169][  T973] usb 3-1: config 0 descriptor??
[  494.291271][ T5858] usb 5-1: device descriptor read/64, error -71
[  494.386693][   T30] audit: type=1400 audit(1745686939.382:524): avc:  denied  { create } for  pid=11204 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  494.424345][   T30] audit: type=1400 audit(1745686939.382:525): avc:  denied  { write } for  pid=11204 comm="syz.0.1328" path="socket:[39938]" dev="sockfs" ino=39938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  494.460028][   T30] audit: type=1400 audit(1745686939.392:526): avc:  denied  { nlmsg_read } for  pid=11204 comm="syz.0.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  494.541367][ T5858] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  494.681300][ T5858] usb 5-1: device descriptor read/64, error -71
[  494.718107][  T973] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  494.762577][  T973] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  495.023185][ T5858] usb usb5-port1: attempt power cycle
[  495.119209][  T973] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device
[  495.128253][  T973] arvo 0003:1E7D:30D4.0008: couldn't install keyboard
[  495.401897][  T973] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -71
[  495.435779][  T973] usb 3-1: USB disconnect, device number 29
[  495.461570][ T5858] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  495.489299][T11218] lo speed is unknown, defaulting to 1000
[  495.849162][   T30] audit: type=1400 audit(1745686940.462:527): avc:  denied  { read write } for  pid=11221 comm="syz.0.1333" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  495.933038][ T5858] usb 5-1: device descriptor read/8, error -71
[  496.074970][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'.
[  496.103796][   T30] audit: type=1400 audit(1745686940.462:528): avc:  denied  { open } for  pid=11221 comm="syz.0.1333" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  496.185321][T10737] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  496.328527][   T30] audit: type=1400 audit(1745686941.322:529): avc:  denied  { ioctl } for  pid=11234 comm="syz.4.1337" path="socket:[40003]" dev="sockfs" ino=40003 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  496.408321][T10737] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[  496.416857][   T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  496.464349][T10737] usb 1-1: config 0 has no interface number 0
[  496.573310][T10737] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  496.599195][   T47] usb 2-1: Using ep0 maxpacket: 32
[  496.607628][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  496.623335][T10737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.631861][T10737] usb 1-1: Product: syz
[  496.636140][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  496.648451][T10737] usb 1-1: Manufacturer: syz
[  496.662670][T10737] usb 1-1: SerialNumber: syz
[  496.668222][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  496.683293][   T47] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  496.693574][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.702098][T10737] usb 1-1: config 0 descriptor??
[  496.724247][   T47] usb 2-1: Product: syz
[  496.728488][   T47] usb 2-1: Manufacturer: syz
[  496.746770][T10737] sierra 1-1:0.153: Sierra USB modem converter detected
[  496.766221][   T47] usb 2-1: SerialNumber: syz
[  496.784769][   T47] usb 2-1: config 0 descriptor??
[  496.797558][   T47] iguanair 2-1:0.0: probe with driver iguanair failed with error -12
[  496.891432][ T5858] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  496.894290][T11247] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[11247]
[  496.943404][ T5858] usb 5-1: Using ep0 maxpacket: 16
[  497.222263][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.224256][T11248] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[11248]
[  497.536628][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.553084][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  497.568489][ T5858] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  497.579190][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.690544][ T5858] usb 5-1: config 0 descriptor??
[  497.755261][ T5860] usb 2-1: USB disconnect, device number 18
[  498.009766][T10737] usb 1-1: USB disconnect, device number 28
[  498.034648][T10737] sierra 1-1:0.153: device disconnected
[  498.166547][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.176634][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.184469][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.192135][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.260367][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.321051][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.413342][T11240] loop9: detected capacity change from 0 to 7
[  498.433305][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.440543][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.449025][T11240] Dev loop9: unable to read RDB block 7
[  498.462258][T11240]  loop9: unable to read partition table
[  498.468059][T11240] loop9: partition table beyond EOD, truncated
[  498.479114][ T5858] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  498.511066][ T5858] microsoft 0003:045E:07DA.0009: No inputs registered, leaving
[  498.522261][T11240] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  498.533820][ T5858] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  498.546980][ T5858] microsoft 0003:045E:07DA.0009: no inputs found
[  498.553630][ T5858] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  498.658634][   T30] audit: type=1400 audit(1745686943.662:530): avc:  denied  { bind } for  pid=11260 comm="syz.3.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  498.741278][T10737] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  498.929324][T10737] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  498.950023][T10737] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  498.976076][T10737] usb 2-1: config 0 interface 0 has no altsetting 0
[  498.990155][T10737] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  499.003400][T10737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.029515][T10737] usb 2-1: config 0 descriptor??
[  499.036008][T11259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  499.086401][T11272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  499.343034][   T30] audit: type=1400 audit(1745686944.342:531): avc:  denied  { listen } for  pid=11271 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  499.999391][  T973] usb 5-1: USB disconnect, device number 32
[  500.213355][T10737] holtek_mouse 0003:04D9:A067.000A: unknown main item tag 0x0
[  500.224023][T10737] holtek_mouse 0003:04D9:A067.000A: unknown main item tag 0x0
[  500.232173][T10737] holtek_mouse 0003:04D9:A067.000A: unexpected long global item
[  500.250382][T10737] holtek_mouse 0003:04D9:A067.000A: hid parse failed: -22
[  500.766869][   T65] Bluetooth: hci5: Frame reassembly failed (-84)
[  500.783077][T10737] holtek_mouse 0003:04D9:A067.000A: probe with driver holtek_mouse failed with error -22
[  500.832758][T10737] usb 2-1: USB disconnect, device number 19
[  501.020857][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1350'.
[  501.180780][ T3452] Bluetooth: hci6: Frame reassembly failed (-84)
[  501.447812][T11287] vlan2: entered promiscuous mode
[  501.454342][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.460630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.477629][T11287] syz_tun: entered promiscuous mode
[  502.311316][T10737] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  502.441245][T10737] usb 2-1: device descriptor read/64, error -71
[  502.461239][ T5860] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  502.591308][ T5860] usb 1-1: device descriptor read/64, error -71
[  502.681264][T10737] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  502.813302][ T5812] Bluetooth: hci5: command 0x1003 tx timeout
[  502.839337][   T55] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  502.905241][T10737] usb 2-1: device descriptor read/64, error -71
[  503.290911][ T5860] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  503.290924][T10228] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  503.311340][   T55] Bluetooth: hci6: command 0x1003 tx timeout
[  503.333506][T10737] usb usb2-port1: attempt power cycle
[  503.668113][ T5860] usb 1-1: device descriptor read/64, error -71
[  503.771459][T10737] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  503.804266][ T5860] usb usb1-port1: attempt power cycle
[  503.815108][T10737] usb 2-1: device descriptor read/8, error -71
[  503.850809][T11305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'.
[  503.853070][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1356'.
[  503.871480][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1356'.
[  504.113412][T11317] openvswitch: netlink: IP tunnel dst address not specified
[  504.191288][ T5860] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  504.511243][T10737] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  504.552364][ T5860] usb 1-1: device descriptor read/8, error -71
[  504.721404][T10737] usb 2-1: device not accepting address 23, error -71
[  504.800275][T10737] usb usb2-port1: unable to enumerate USB device
[  504.843651][ T5860] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  505.152951][T10737] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  505.351528][ T5860] usb 1-1: device not accepting address 32, error -71
[  505.358686][ T5860] usb usb1-port1: unable to enumerate USB device
[  505.368700][T10737] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  505.418552][T10737] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  505.471587][T10737] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.478221][T10737] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  505.525672][T10737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.544261][T11348] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  505.557074][T10737] usb 2-1: config 0 descriptor??
[  505.582810][T11327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  505.593120][T11348] audit: out of memory in audit_log_start
[  505.881381][   T47] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  505.897876][T11360] batadv_slave_1: entered promiscuous mode
[  506.000825][T10737] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  506.011251][T10737] holtek_mouse 0003:04D9:A067.000B: unknown main item tag 0x0
[  506.019472][T10737] holtek_mouse 0003:04D9:A067.000B: unexpected long global item
[  506.029312][   T47] usb 3-1: device descriptor read/64, error -71
[  506.037393][T10737] holtek_mouse 0003:04D9:A067.000B: hid parse failed: -22
[  506.048889][T10737] holtek_mouse 0003:04D9:A067.000B: probe with driver holtek_mouse failed with error -22
[  506.101284][ T5860] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  506.130720][T11362] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1373'.
[  506.140036][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'.
[  506.154868][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1373'.
[  506.176085][  T973] kernel write not supported for file /sequencer2 (pid: 973 comm: kworker/0:2)
[  506.198865][T10737] usb 2-1: USB disconnect, device number 24
[  506.222083][T11364] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  506.253378][ T5860] usb 4-1: Using ep0 maxpacket: 32
[  506.259684][ T5860] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  506.271777][ T5860] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  506.280894][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.281262][   T47] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  506.300413][ T5860] usb 4-1: Product: syz
[  506.304699][ T5860] usb 4-1: Manufacturer: syz
[  506.309377][ T5860] usb 4-1: SerialNumber: syz
[  506.317939][ T5860] usb 4-1: config 0 descriptor??
[  506.323583][T11349] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  506.333670][ T5860] hub 4-1:0.0: bad descriptor, ignoring hub
[  506.339607][ T5860] hub 4-1:0.0: probe with driver hub failed with error -5
[  506.348740][ T5860] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20
[  506.431266][   T47] usb 3-1: device descriptor read/64, error -71
[  506.516960][T11356] batadv_slave_1: left promiscuous mode
[  506.611628][   T47] usb usb3-port1: attempt power cycle
[  506.707774][ T5858] usb 4-1: USB disconnect, device number 33
[  506.707818][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  506.860274][T11373] openvswitch: netlink: IP tunnel dst address not specified
[  507.281594][   T47] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  507.443984][   T47] usb 3-1: device descriptor read/8, error -71
[  507.659056][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1378'.
[  507.681328][   T47] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  507.764201][   T47] usb 3-1: device descriptor read/8, error -71
[  507.871653][   T47] usb usb3-port1: unable to enumerate USB device
[  508.051875][T11385] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1382'.
[  508.905996][T11397] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  509.321523][T11405] batadv_slave_1: entered promiscuous mode
[  509.764197][T11398] batadv_slave_1: left promiscuous mode
[  510.307700][   T47] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[  510.964448][   T47] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  510.975719][   T47] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  510.994545][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1391'.
[  511.008424][   T47] usb 4-1: config 0 interface 0 has no altsetting 0
[  511.016217][   T47] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  511.026477][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.068310][   T47] usb 4-1: config 0 descriptor??
[  511.107564][T11410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  511.443837][T11427] 9pnet_fd: Insufficient options for proto=fd
[  511.538953][   T47] holtek_mouse 0003:04D9:A067.000C: unknown main item tag 0x0
[  511.553422][   T47] holtek_mouse 0003:04D9:A067.000C: unknown main item tag 0x0
[  512.039149][   T47] holtek_mouse 0003:04D9:A067.000C: unexpected long global item
[  512.047710][   T47] holtek_mouse 0003:04D9:A067.000C: hid parse failed: -22
[  512.054937][   T47] holtek_mouse 0003:04D9:A067.000C: probe with driver holtek_mouse failed with error -22
[  512.067422][   T47] usb 4-1: USB disconnect, device number 34
[  512.169581][T11441] xt_cgroup: xt_cgroup: no path or classid specified
[  512.349979][T11445] openvswitch: netlink: IP tunnel dst address not specified
[  512.423433][T11448] batadv_slave_1: entered promiscuous mode
[  513.407803][T11439] batadv_slave_1: left promiscuous mode
[  515.270718][T11457] batadv_slave_1: entered promiscuous mode
[  515.399320][T11455] batadv_slave_1: left promiscuous mode
[  515.602674][T11463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'.
[  515.725019][T11465] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[11465]
[  516.943026][T11481] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  517.791871][T11495] openvswitch: netlink: IP tunnel dst address not specified
[  517.812220][   T30] audit: type=1400 audit(1745686962.792:532): avc:  denied  { nlmsg_write } for  pid=11493 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  517.874491][ T5858] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  518.093724][T11500] batadv_slave_1: entered promiscuous mode
[  518.161588][T11501] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[11501]
[  518.482418][ T5858] usb 3-1: device descriptor read/64, error -71
[  518.501306][T10737] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  518.682713][T10737] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  518.716553][T11498] batadv_slave_1: left promiscuous mode
[  518.920995][T11503] batadv_slave_1: entered promiscuous mode
[  518.997935][T11502] batadv_slave_1: left promiscuous mode
[  519.071288][ T5858] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  519.160423][T10737] usb 5-1: config 0 has no interface number 0
[  519.204689][T10737] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  519.217072][T10737] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  519.231801][T10737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  519.240205][T10737] usb 5-1: SerialNumber: syz
[  519.246956][T10737] usb 5-1: config 0 descriptor??
[  519.255317][T11490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  519.661238][T11512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1421'.
[  519.671814][ T5860] usb 5-1: USB disconnect, device number 33
[  520.097460][ T3494] Bluetooth: hci5: Frame reassembly failed (-84)
[  520.223145][   T55] block nbd60: Receive control failed (result -32)
[  520.350748][T11528] NILFS (nullb0): couldn't find nilfs on the device
[  520.841828][T11531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1425'.
[  521.371459][T11541] openvswitch: netlink: IP tunnel dst address not specified
[  521.844263][T10228] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  522.038764][T11547] batadv_slave_1: entered promiscuous mode
[  522.322606][T11556] batadv_slave_1: entered promiscuous mode
[  522.712124][T11545] batadv_slave_1: left promiscuous mode
[  522.942493][T11549] batadv_slave_1: left promiscuous mode
[  522.964329][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1433'.
[  523.307319][T11559] lo speed is unknown, defaulting to 1000
[  523.723128][   T55] block nbd61: Receive control failed (result -32)
[  523.901842][ T5860] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  524.128000][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1438'.
[  524.603275][   T55] block nbd62: Receive control failed (result -32)
[  524.895801][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.909428][ T5860] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  524.924359][ T5860] usb 2-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  525.026760][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  525.035436][ T5860] usb 2-1: SerialNumber: syz
[  525.527723][ T5860] usb 2-1: config 0 descriptor??
[  525.713397][T11585] tipc: Started in network mode
[  525.718288][T11585] tipc: Node identity de9094868d9e, cluster identity 4711
[  525.725583][T11585] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  525.963608][ T5860] usb 2-1: USB disconnect, device number 25
[  526.199796][T11605] batadv_slave_1: entered promiscuous mode
[  527.007673][T11603] batadv_slave_1: left promiscuous mode
[  527.132561][   T47] tipc: Node number set to 1393464454
[  527.278748][   T30] audit: type=1326 audit(1745686972.282:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11618 comm="syz.3.1446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f893418e969 code=0x0
[  527.301507][    C1] vkms_vblank_simulate: vblank timer overrun
[  527.331213][T11607] lo speed is unknown, defaulting to 1000
[  527.429850][T11622] Invalid ELF header magic: != ELF
[  527.689078][   T30] audit: type=1400 audit(1745686972.432:534): avc:  denied  { module_load } for  pid=11618 comm="syz.3.1446" path="/290/bus" dev="tmpfs" ino=1587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  527.977236][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1447'.
[  528.112127][T11629] Cannot find add_set index 1 as target
[  528.610657][T11645] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[11645]
[  529.276900][   T30] audit: type=1400 audit(1745686974.112:535): avc:  denied  { watch watch_reads } for  pid=11640 comm="syz.2.1448" path="pipe:[42190]" dev="pipefs" ino=42190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  529.610875][T11637] NILFS (nullb0): couldn't find nilfs on the device
[  529.726678][T11653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  529.845453][T11658] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[11658]
[  530.483862][T11663] batadv_slave_1: entered promiscuous mode
[  530.939723][T11660] batadv_slave_1: left promiscuous mode
[  531.830523][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1461'.
[  532.112069][T11682] openvswitch: netlink: IP tunnel dst address not specified
[  533.916497][T11692] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[11692]
[  534.311861][T11699] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[11699]
[  534.630186][T11700] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[11700]
[  535.097331][T11706] batadv_slave_1: entered promiscuous mode
[  535.520804][T11701] batadv_slave_1: left promiscuous mode
[  536.452556][T11720] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  537.091295][ T5858] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  537.169939][T11745] openvswitch: netlink: IP tunnel dst address not specified
[  537.641360][ T5892] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  537.779240][ T5858] usb 2-1: device descriptor read/64, error -71
[  537.815352][ T5892] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  537.824743][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.841108][T11757] batadv_slave_1: entered promiscuous mode
[  537.867973][ T5892] usb 5-1: config 0 descriptor??
[  537.892561][ T5892] gspca_main: cpia1-2.14.0 probing 0813:0001
[  537.898691][   T30] audit: type=1400 audit(1745686982.902:536): avc:  denied  { read } for  pid=11758 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  538.111250][ T5858] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  538.241335][ T5858] usb 2-1: device descriptor read/64, error -71
[  538.293806][ T5892] gspca_cpia1: usb_control_msg 03, error -32
[  538.299080][   T30] audit: type=1400 audit(1745686983.302:537): avc:  denied  { read write } for  pid=11743 comm="syz.4.1481" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  538.300535][ T5892] cpia1 5-1:0.0: unexpected state after lo power cmd: 01
[  538.323370][   T30] audit: type=1400 audit(1745686983.302:538): avc:  denied  { open } for  pid=11743 comm="syz.4.1481" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  538.353695][ T5858] usb usb2-port1: attempt power cycle
[  538.493458][T11752] batadv_slave_1: left promiscuous mode
[  538.570237][ T5892] gspca_cpia1: usb_control_msg 01, error -71
[  538.577430][ T5892] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  538.587893][ T5892] usb 5-1: USB disconnect, device number 34
[  538.691578][ T5858] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  538.967154][ T5858] usb 2-1: device descriptor read/8, error -71
[  539.267018][ T5858] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  539.313392][ T5858] usb 2-1: device descriptor read/8, error -71
[  539.340364][T11771] lo speed is unknown, defaulting to 1000
[  539.851137][ T5858] usb usb2-port1: unable to enumerate USB device
[  539.965943][   T30] audit: type=1400 audit(1745686984.972:539): avc:  denied  { write } for  pid=11786 comm="syz.1.1495" name="fd" dev="proc" ino=42443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  540.655618][T11792] openvswitch: netlink: IP tunnel dst address not specified
[  541.751408][ T5857] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  541.977592][ T5857] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  541.986779][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.248047][ T5857] usb 1-1: config 0 has no interface number 0
[  542.258572][ T5857] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  542.268531][ T5857] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  542.281267][ T5857] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  542.441857][ T5857] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  542.450915][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.493009][ T5857] usb 1-1: Product: syz
[  542.497200][ T5857] usb 1-1: Manufacturer: syz
[  542.512392][ T5857] usb 1-1: SerialNumber: syz
[  542.521436][  T973] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  542.527461][ T5857] usb 1-1: config 0 descriptor??
[  542.548453][ T5857] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  542.572253][ T5857] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  542.590400][ T5857] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  542.707277][  T973] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  542.715655][  T973] usb 2-1: config 0 has no interface number 0
[  542.733235][  T973] usb 2-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  542.745969][ T5857] usb 1-1: USB disconnect, device number 33
[  542.761970][  T973] usb 2-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  542.765108][ T5857] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  542.771235][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  542.794337][  T973] usb 2-1: SerialNumber: syz
[  543.199492][  T973] usb 2-1: config 0 descriptor??
[  543.208146][T11802] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  543.217702][ T5857] cyberjack 1-1:0.69: device disconnected
[  543.708843][  T973] usb 2-1: USB disconnect, device number 30
[  544.344863][T11848] lo speed is unknown, defaulting to 1000
[  544.394567][ T5857] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  544.612855][ T5857] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  544.621054][ T5857] usb 5-1: config 0 has no interface number 0
[  544.627218][ T5857] usb 5-1: config 0 interface 223 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  544.642483][ T5857] usb 5-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice= 0.00
[  544.703001][T11853] openvswitch: netlink: IP tunnel dst address not specified
[  544.881788][ T5860] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  545.070645][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  545.084623][ T5857] usb 5-1: SerialNumber: syz
[  545.109916][ T5857] usb 5-1: config 0 descriptor??
[  545.123306][T11837] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  545.350171][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.361522][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.385176][ T5860] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  545.794052][  T973] usb 5-1: USB disconnect, device number 35
[  545.810369][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.847430][ T5860] usb 1-1: config 0 descriptor??
[  546.080445][ T5892] usb 4-1: new low-speed USB device number 35 using dummy_hcd
[  546.800022][ T5892] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  546.813246][ T5892] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  546.824175][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0
[  546.830849][ T5892] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  546.861236][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.871829][ T5892] usb 4-1: config 0 descriptor??
[  546.882218][T11859] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  547.369147][T11873] openvswitch: netlink: IP tunnel dst address not specified
[  547.402823][ T5892] holtek_mouse 0003:04D9:A067.000D: unknown main item tag 0x0
[  547.452442][ T5892] holtek_mouse 0003:04D9:A067.000D: unknown main item tag 0x0
[  547.900162][ T5892] holtek_mouse 0003:04D9:A067.000D: unexpected long global item
[  547.916735][ T5892] holtek_mouse 0003:04D9:A067.000D: hid parse failed: -22
[  547.974823][ T5892] holtek_mouse 0003:04D9:A067.000D: probe with driver holtek_mouse failed with error -22
[  548.020133][ T5892] usb 4-1: USB disconnect, device number 35
[  548.407328][ T5860] hid-rmi 0003:0461:4E72.000E: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0
[  548.422023][ T5860] usb 1-1: USB disconnect, device number 34
[  548.621113][T11886] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1518'.
[  548.631232][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  548.882348][   T10] usb 5-1: no configurations
[  548.889117][   T10] usb 5-1: can't read configurations, error -22
[  549.112845][   T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  549.327455][   T30] audit: type=1400 audit(1745686994.332:540): avc:  denied  { ioctl } for  pid=11899 comm="syz.0.1522" path="socket:[42704]" dev="sockfs" ino=42704 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  549.358968][T11898] batadv_slave_1: entered promiscuous mode
[  549.391846][   T10] usb 5-1: no configurations
[  549.409353][   T10] usb 5-1: can't read configurations, error -22
[  549.429516][   T10] usb usb5-port1: attempt power cycle
[  549.692736][T11904] batadv_slave_1: entered promiscuous mode
[  550.032424][T11896] batadv_slave_1: left promiscuous mode
[  550.257942][T11901] batadv_slave_1: left promiscuous mode
[  550.655735][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  550.727105][T11914] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  552.158603][   T10] usb 5-1: device not accepting address 38, error -71
[  552.342496][T11919] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[11919]
[  552.980499][T11922] lo speed is unknown, defaulting to 1000
[  553.089553][T11930] NILFS (nullb0): couldn't find nilfs on the device
[  554.107740][T11940] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  556.574745][T11964] batadv_slave_1: entered promiscuous mode
[  557.178658][T11961] batadv_slave_1: left promiscuous mode
[  558.709828][T11992] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[11992]
[  559.131413][T11990] lo speed is unknown, defaulting to 1000
[  560.922349][T12014] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[12014]
[  561.093536][T12008] batadv_slave_1: entered promiscuous mode
[  561.104753][T12007] batadv_slave_1: left promiscuous mode
[  561.329957][T12027] NILFS (nullb0): couldn't find nilfs on the device
[  561.744737][T12030] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[12030]
[  562.621357][T12031] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  562.790025][T12042] FAULT_INJECTION: forcing a failure.
[  562.790025][T12042] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  562.884411][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  562.888101][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.3.1559 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) 
[  562.888122][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  562.888131][T12042] Call Trace:
[  562.888137][T12042]  <TASK>
[  562.888142][T12042]  dump_stack_lvl+0x16c/0x1f0
[  562.888166][T12042]  should_fail_ex+0x512/0x640
[  562.888188][T12042]  _copy_from_user+0x2e/0xd0
[  562.888209][T12042]  memdup_user+0x6b/0xe0
[  562.888225][T12042]  strndup_user+0x78/0xe0
[  562.888241][T12042]  __x64_sys_mount+0x180/0x310
[  562.888258][T12042]  ? __pfx___x64_sys_mount+0x10/0x10
[  562.888279][T12042]  do_syscall_64+0xcd/0x260
[  562.888297][T12042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.888312][T12042] RIP: 0033:0x7f893418e969
[  562.888323][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  562.888341][T12042] RSP: 002b:00007f8934fc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  562.888356][T12042] RAX: ffffffffffffffda RBX: 00007f89343b5fa0 RCX: 00007f893418e969
[  562.888365][T12042] RDX: 0000200000000500 RSI: 0000200000000080 RDI: 0000200000000240
[  562.888374][T12042] RBP: 00007f8934fc6090 R08: 0000000000000000 R09: 0000000000000000
[  562.888382][T12042] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001
[  562.888391][T12042] R13: 0000000000000001 R14: 00007f89343b5fa0 R15: 00007ffebbd00988
[  562.888410][T12042]  </TASK>
[  563.053792][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  564.848433][T12064] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  566.171081][T12068] batadv_slave_1: entered promiscuous mode
[  566.269270][T12058] batadv_slave_1: left promiscuous mode
[  566.411469][T12060] lo speed is unknown, defaulting to 1000
[  566.710037][T12073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  570.006574][T12118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  570.630369][T12109] lo speed is unknown, defaulting to 1000
[  571.121377][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  571.281299][   T10] usb 5-1: device descriptor read/64, error -71
[  571.342545][T12129] batadv_slave_1: entered promiscuous mode
[  571.982200][T12126] batadv_slave_1: left promiscuous mode
[  572.232867][   T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  572.581769][T12140] FAULT_INJECTION: forcing a failure.
[  572.581769][T12140] name failslab, interval 1, probability 0, space 0, times 0
[  572.594595][T12140] CPU: 0 UID: 0 PID: 12140 Comm: syz.2.1579 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) 
[  572.594618][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  572.594628][T12140] Call Trace:
[  572.594634][T12140]  <TASK>
[  572.594639][T12140]  dump_stack_lvl+0x16c/0x1f0
[  572.594664][T12140]  should_fail_ex+0x512/0x640
[  572.594684][T12140]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  572.594713][T12140]  should_failslab+0xc2/0x120
[  572.594730][T12140]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  572.594760][T12140]  ? __alloc_skb+0x2b2/0x380
[  572.594789][T12140]  __alloc_skb+0x2b2/0x380
[  572.594812][T12140]  ? __pfx___alloc_skb+0x10/0x10
[  572.594835][T12140]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  572.594856][T12140]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  572.594884][T12140]  netlink_alloc_large_skb+0x69/0x130
[  572.594903][T12140]  netlink_sendmsg+0x6a1/0xdd0
[  572.594924][T12140]  ? __pfx_netlink_sendmsg+0x10/0x10
[  572.594951][T12140]  ____sys_sendmsg+0xa95/0xc70
[  572.594970][T12140]  ? copy_msghdr_from_user+0x10a/0x160
[  572.594994][T12140]  ? __pfx_____sys_sendmsg+0x10/0x10
[  572.595025][T12140]  ___sys_sendmsg+0x134/0x1d0
[  572.595050][T12140]  ? __pfx____sys_sendmsg+0x10/0x10
[  572.595105][T12140]  __sys_sendmsg+0x16d/0x220
[  572.595129][T12140]  ? __pfx___sys_sendmsg+0x10/0x10
[  572.595161][T12140]  ? rcu_is_watching+0x12/0xc0
[  572.595188][T12140]  do_syscall_64+0xcd/0x260
[  572.595209][T12140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  572.595226][T12140] RIP: 0033:0x7f45caf8e969
[  572.595239][T12140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  572.595255][T12140] RSP: 002b:00007f45cbe63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  572.595270][T12140] RAX: ffffffffffffffda RBX: 00007f45cb1b5fa0 RCX: 00007f45caf8e969
[  572.595281][T12140] RDX: 0000000020040094 RSI: 0000200000000580 RDI: 0000000000000004
[  572.595291][T12140] RBP: 00007f45cbe63090 R08: 0000000000000000 R09: 0000000000000000
[  572.595300][T12140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.595310][T12140] R13: 0000000000000000 R14: 00007f45cb1b5fa0 R15: 00007fffe703f5b8
[  572.595333][T12140]  </TASK>
[  572.816372][    C0] vkms_vblank_simulate: vblank timer overrun
[  572.826552][   T10] usb 5-1: device descriptor read/64, error -71
[  572.945508][   T10] usb usb5-port1: attempt power cycle
[  573.514108][   T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  573.970835][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.985908][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.259614][T12155] syz.2.1580 (12155): drop_caches: 2
[  574.341283][   T30] audit: type=1400 audit(1745687018.512:541): avc:  denied  { map } for  pid=12146 comm="syz.3.1582" path="socket:[45193]" dev="sockfs" ino=45193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  574.381471][   T30] audit: type=1400 audit(1745687018.512:542): avc:  denied  { read } for  pid=12146 comm="syz.3.1582" path="socket:[45193]" dev="sockfs" ino=45193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  574.382925][   T10] usb 5-1: device descriptor read/8, error -71
[  574.902597][  T973] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  575.111325][   T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  575.556259][  T973] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  575.565417][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.576010][  T973] usb 2-1: config 0 descriptor??
[  575.595928][  T973] gspca_main: cpia1-2.14.0 probing 0813:0001
[  575.599325][ T3452] Bluetooth: hci5: Frame reassembly failed (-84)
[  575.633088][   T10] usb 5-1: device descriptor read/8, error -71
[  575.816787][   T10] usb usb5-port1: unable to enumerate USB device
[  576.029770][  T973] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  576.248416][  T973] gspca_cpia1: usb_control_msg 01, error -32
[  576.254731][  T973] gspca_cpia1: usb_control_msg 01, error -71
[  577.169497][  T973] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  577.181119][  T973] usb 2-1: USB disconnect, device number 31
[  577.218310][T12179] sp0: Synchronizing with TNC
[  577.226458][T12178] [U] è
[  577.281381][T10228] Bluetooth: hci5: command 0x1003 tx timeout
[  577.287599][   T55] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  578.031289][   T30] audit: type=1326 audit(1745687023.022:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.098403][   T30] audit: type=1326 audit(1745687023.062:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.211448][   T30] audit: type=1326 audit(1745687023.062:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.666731][   T30] audit: type=1326 audit(1745687023.062:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.686955][T12192] lo speed is unknown, defaulting to 1000
[  578.690602][   T30] audit: type=1326 audit(1745687023.062:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.719607][   T30] audit: type=1326 audit(1745687023.062:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.811514][   T30] audit: type=1326 audit(1745687023.062:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  578.843702][   T30] audit: type=1326 audit(1745687023.062:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.0.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc07f78e969 code=0x7ffc0000
[  580.308900][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  580.308915][   T30] audit: type=1800 audit(1745687025.272:561): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1601" name="/" dev="9p" ino=2 res=0 errno=0
[  580.390172][   T30] audit: type=1400 audit(1745687025.282:562): avc:  denied  { ioctl } for  pid=12212 comm="syz.2.1600" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  580.581168][T12224] 
[  580.583522][T12224] ======================================================
[  580.590525][T12224] WARNING: possible circular locking dependency detected
[  580.597530][T12224] 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 Not tainted
[  580.604621][T12224] ------------------------------------------------------
[  580.611620][T12224] syz.1.1604/12224 is trying to acquire lock:
[  580.617656][T12224] ffff88804efd8730 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: walk_component+0x345/0x5b0
[  580.627804][T12224] 
[  580.627804][T12224] but task is already holding lock:
[  580.635140][T12224] ffff88807b372888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  580.644429][T12224] 
[  580.644429][T12224] which lock already depends on the new lock.
[  580.644429][T12224] 
[  580.654820][T12224] 
[  580.654820][T12224] the existing dependency chain (in reverse order) is:
[  580.663810][T12224] 
[  580.663810][T12224] -> #3 (&of->mutex){+.+.}-{4:4}:
[  580.671002][T12224]        __mutex_lock+0x199/0xb90
[  580.676007][T12224]        kernfs_fop_write_iter+0x28f/0x510
[  580.681792][T12224]        iter_file_splice_write+0x91c/0x1150
[  580.687759][T12224]        do_splice+0x1475/0x1fc0
[  580.692685][T12224]        __do_splice+0x32a/0x360
[  580.697601][T12224]        __x64_sys_splice+0x187/0x250
[  580.702958][T12224]        do_syscall_64+0xcd/0x260
[  580.707962][T12224]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.714352][T12224] 
[  580.714352][T12224] -> #2 (&pipe->mutex){+.+.}-{4:4}:
[  580.721706][T12224]        __mutex_lock+0x199/0xb90
[  580.726711][T12224]        pipe_lock+0x64/0x80
[  580.731283][T12224]        iter_file_splice_write+0x1ea/0x1150
[  580.737240][T12224]        do_splice+0x1475/0x1fc0
[  580.742155][T12224]        __do_splice+0x32a/0x360
[  580.747069][T12224]        __x64_sys_splice+0x187/0x250
[  580.752428][T12224]        do_syscall_64+0xcd/0x260
[  580.757429][T12224]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.763815][T12224] 
[  580.763815][T12224] -> #1 (sb_writers#6){.+.+}-{0:0}:
[  580.771181][T12224]        mnt_want_write+0x6f/0x450
[  580.776285][T12224]        ovl_create_object+0x12c/0x300
[  580.781733][T12224]        lookup_open.isra.0+0x11d0/0x1580
[  580.787445][T12224]        path_openat+0x905/0x2d40
[  580.792452][T12224]        do_filp_open+0x20b/0x470
[  580.797458][T12224]        do_sys_openat2+0x11b/0x1d0
[  580.802632][T12224]        __x64_sys_creat+0xcc/0x120
[  580.807806][T12224]        do_syscall_64+0xcd/0x260
[  580.812807][T12224]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.819218][T12224] 
[  580.819218][T12224] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  580.827882][T12224]        __lock_acquire+0x1173/0x1ba0
[  580.833271][T12224]        lock_acquire+0x179/0x350
[  580.838293][T12224]        down_read+0x9b/0x480
[  580.842945][T12224]        walk_component+0x345/0x5b0
[  580.848122][T12224]        path_lookupat+0x17e/0x780
[  580.853210][T12224]        filename_lookup+0x224/0x5f0
[  580.858480][T12224]        kern_path+0x35/0x50
[  580.863046][T12224]        lookup_bdev+0xd8/0x280
[  580.867870][T12224]        resume_store+0x1d6/0x460
[  580.871192][ T5860] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  580.872863][T12224]        kobj_attr_store+0x55/0x80
[  580.872884][T12224]        sysfs_kf_write+0xef/0x150
[  580.890578][T12224]        kernfs_fop_write_iter+0x351/0x510
[  580.896370][T12224]        vfs_write+0x5ba/0x1180
[  580.901205][T12224]        ksys_write+0x12a/0x240
[  580.906044][T12224]        do_syscall_64+0xcd/0x260
[  580.911486][T12224]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.917879][T12224] 
[  580.917879][T12224] other info that might help us debug this:
[  580.917879][T12224] 
[  580.928085][T12224] Chain exists of:
[  580.928085][T12224]   &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex
[  580.928085][T12224] 
[  580.941443][T12224]  Possible unsafe locking scenario:
[  580.941443][T12224] 
[  580.948869][T12224]        CPU0                    CPU1
[  580.954213][T12224]        ----                    ----
[  580.959557][T12224]   lock(&of->mutex);
[  580.963525][T12224]                                lock(&pipe->mutex);
[  580.970179][T12224]                                lock(&of->mutex);
[  580.976660][T12224]   rlock(&ovl_i_mutex_dir_key[depth]);
[  580.982184][T12224] 
[  580.982184][T12224]  *** DEADLOCK ***
[  580.982184][T12224] 
[  580.990307][T12224] 4 locks held by syz.1.1604/12224:
[  580.995481][T12224]  #0: ffff8880237afcf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  581.004509][T12224]  #1: ffff888036ca6420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240
[  581.013457][T12224]  #2: ffff88807b372888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510
[  581.023183][T12224]  #3: ffff88801eeba968 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510
[  581.033177][T12224] 
[  581.033177][T12224] stack backtrace:
[  581.039049][T12224] CPU: 1 UID: 0 PID: 12224 Comm: syz.1.1604 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) 
[  581.039067][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  581.039075][T12224] Call Trace:
[  581.039079][T12224]  <TASK>
[  581.039085][T12224]  dump_stack_lvl+0x116/0x1f0
[  581.039102][T12224]  print_circular_bug+0x275/0x350
[  581.039121][T12224]  check_noncircular+0x14c/0x170
[  581.039142][T12224]  __lock_acquire+0x1173/0x1ba0
[  581.039164][T12224]  lock_acquire+0x179/0x350
[  581.039183][T12224]  ? walk_component+0x345/0x5b0
[  581.039201][T12224]  ? __pfx___might_resched+0x10/0x10
[  581.039218][T12224]  ? try_to_unlazy+0x24e/0x660
[  581.039240][T12224]  down_read+0x9b/0x480
[  581.039256][T12224]  ? walk_component+0x345/0x5b0
[  581.039273][T12224]  ? __pfx_down_read+0x10/0x10
[  581.039290][T12224]  ? lookup_fast+0x156/0x610
[  581.039307][T12224]  walk_component+0x345/0x5b0
[  581.039325][T12224]  path_lookupat+0x17e/0x780
[  581.039345][T12224]  filename_lookup+0x224/0x5f0
[  581.039365][T12224]  ? __pfx_filename_lookup+0x10/0x10
[  581.039390][T12224]  ? getname_kernel+0x52/0x370
[  581.039403][T12224]  ? __asan_memcpy+0x3c/0x60
[  581.039423][T12224]  kern_path+0x35/0x50
[  581.039441][T12224]  lookup_bdev+0xd8/0x280
[  581.039455][T12224]  ? __pfx_lookup_bdev+0x10/0x10
[  581.039467][T12224]  ? resume_store+0x1b8/0x460
[  581.039481][T12224]  ? __asan_memcpy+0x3c/0x60
[  581.039499][T12224]  resume_store+0x1d6/0x460
[  581.039512][T12224]  ? __pfx_resume_store+0x10/0x10
[  581.039527][T12224]  ? find_held_lock+0x2b/0x80
[  581.039543][T12224]  ? __pfx_resume_store+0x10/0x10
[  581.039555][T12224]  kobj_attr_store+0x55/0x80
[  581.039571][T12224]  ? __pfx_kobj_attr_store+0x10/0x10
[  581.039586][T12224]  sysfs_kf_write+0xef/0x150
[  581.039605][T12224]  kernfs_fop_write_iter+0x351/0x510
[  581.039621][T12224]  ? __pfx_sysfs_kf_write+0x10/0x10
[  581.039640][T12224]  vfs_write+0x5ba/0x1180
[  581.039658][T12224]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  581.039676][T12224]  ? __pfx___mutex_lock+0x10/0x10
[  581.039690][T12224]  ? __pfx_vfs_write+0x10/0x10
[  581.039714][T12224]  ksys_write+0x12a/0x240
[  581.039731][T12224]  ? __pfx_ksys_write+0x10/0x10
[  581.039751][T12224]  ? rcu_is_watching+0x12/0xc0
[  581.039768][T12224]  do_syscall_64+0xcd/0x260
[  581.039784][T12224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.039796][T12224] RIP: 0033:0x7f22c638e969
[  581.039807][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.039820][T12224] RSP: 002b:00007f22c72ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  581.039831][T12224] RAX: ffffffffffffffda RBX: 00007f22c65b5fa0 RCX: 00007f22c638e969
[  581.039840][T12224] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000006
[  581.039848][T12224] RBP: 00007f22c6410ab1 R08: 0000000000000000 R09: 0000000000000000
[  581.039856][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.039864][T12224] R13: 0000000000000000 R14: 00007f22c65b5fa0 R15: 00007fff7f325b68
[  581.039876][T12224]  </TASK>
[  581.364974][T12224] PM: Image not found (code -6)
[  581.524805][T12234] NILFS (nullb0): couldn't find nilfs on the device
[  581.960423][ T5860] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  581.970322][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.989309][ T5860] usb 4-1: config 0 descriptor??
[  581.995825][ T5860] gspca_main: cpia1-2.14.0 probing 0813:0001
[  582.064492][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  582.398683][ T5860] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  582.599796][ T5860] gspca_cpia1: usb_control_msg 01, error -32
[  582.606024][ T5860] gspca_cpia1: usb_control_msg 01, error -71
[  582.612036][ T5860] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  582.620719][ T5860] usb 4-1: USB disconnect, device number 36