last executing test programs:

4m57.081472261s ago: executing program 1 (id=566):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000334}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)

4m56.699994598s ago: executing program 1 (id=568):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r1, 0x407, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0xf4)
fcntl$setpipe(r1, 0x407, 0x2000000)

4m55.878255612s ago: executing program 1 (id=571):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES64=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="04005a9327f29123da54330305143702894fd7036b39779f7179e70f18cb9de36aafc822926ca4f5f61ffee4fd865cde8f431c65e5eac1117f2750620aa783319de90e8e92a3b62fc0483c668e8c0ca70e7ceeeca7d56a4f190729104aaf260500bdb13371d5a024ba7a33001735b5eb1c061172dd7cbd610bada5d9646e3769ab93af184a5cdcee4603008500"/155])
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[@ANYBLOB])
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c0000000095000000000000002e0dce50fb17a32c2c42768a17ef207270d23300cd28b249f4aa52a29cdbe2a7ae842ead5c093709bfc0ecd6ff5149c7a0491bd7028b3f5d0973a5b26bc8d3f771d7ca51ea356696d66b49e279c6a41e6c31d40cc98a20db5b90b284790bedfc879182aba70600e54a9af69fd667c2b038fadd72be84a637c3b6f02422027f04a4ba5edf131b50fdacf9e20f4d9500"/190], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0)

4m54.785549997s ago: executing program 1 (id=574):
syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async)
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
copy_file_range(r0, 0x0, r0, &(0x7f0000000180)=0x4, 0x8, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000001072476a000200cfd5c95e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d00000085000000150000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r9], 0xd0}}, 0x2400c800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES8, @ANYBLOB="1f003300d0888e0008021100000108021100000050505050505000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) (async)
set_robust_list(0x0, 0x0)

4m54.405765899s ago: executing program 1 (id=575):
mkdir(&(0x7f0000000040)='./file1\x00', 0x160)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000009e40)='./file0\x00', 0x40)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x27, &(0x7f0000000400))

4m54.025938923s ago: executing program 1 (id=578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001100010027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080302000002020008001c00", @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x2, 0x35315258, 0x500, 0x2d0, 0x1, @stepwise={{0x1, 0xf}, {0xfffffffd, 0x8001}, {0x8, 0x1}}})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0)
link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00')
creat(&(0x7f0000000880)='./file0\x00', 0x0)

4m38.344705912s ago: executing program 32 (id=578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001100010027bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080302000002020008001c00", @ANYRES32, @ANYBLOB="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"], 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x2, 0x35315258, 0x500, 0x2d0, 0x1, @stepwise={{0x1, 0xf}, {0xfffffffd, 0x8001}, {0x8, 0x1}}})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0)
link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00')
creat(&(0x7f0000000880)='./file0\x00', 0x0)

9.937125884s ago: executing program 0 (id=1447):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000030000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES32=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @cgroup_skb, r2, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f00000002c0), 0x10, 0xffffffffffffffff}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="01"], 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001580)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20004010)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4048880}, 0x11)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port='])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
syz_emit_ethernet(0xf6, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="aa92a6ec42dc", @val={@void, {0x8100, 0x5}}, {@ipv6={0x86dd, @udp={0x8, 0x6, '6PA', 0xbc, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x39}, {[@routing={0x2e, 0xa, 0x1, 0x1, 0x0, [@mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x20}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}], {0x4e20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x1, "66ab9be6f0a7fa2e5e33066b98282f4a6883f27b864613d69385383b2bd349a9", "1fd517a95890f4c2a28a992e51b87201", {"b0d12a20005c8e644dfd7142a0e4ee0b", "a72b25af8d7e1adb736f1e7991e9816f"}}}}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0x3f6, 0x45f, 0xc7c, 0x5c5]})
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x3, 0xc8}, [@IFA_CACHEINFO={0x14, 0x6, {0xc8, 0x3, 0xc, 0x1}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0)

7.754634979s ago: executing program 5 (id=1457):
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f00000001c0)={0x2, 0x7, 0x87, 0x7f, 0x1000, 0x5})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r5, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000480)=0x10000001, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
writev(r0, &(0x7f0000000000)=[{0x0}], 0x1)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r8, 0x5437, 0x2)

7.577000003s ago: executing program 3 (id=1459):
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000100))

7.491081861s ago: executing program 4 (id=1460):
r0 = socket(0x10, 0x3, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
close(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', <r6=>0x0, 0x8, 0x8000, 0x7, 0x5, {{0x14, 0x4, 0x3, 0x6, 0x50, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x3a, 0x3, [{0x1, 0x9, "a4369376669b01"}, {0x6, 0x3, "df"}, {0x7, 0x2}, {0x1, 0x10, "ea33e4a45252471cf05cb7b52e1d"}, {0x5, 0x7, "7826330bee"}, {0x0, 0xf, "ad5dfe11b5fa88f3c6180861ef"}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xa, 0x5}, {0x5, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xf6, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4094}, 0xc040)
modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10)
modify_ldt$read(0x0, &(0x7f0000001480)=""/4123, 0x101b)
write(r0, &(0x7f0000000140)="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", 0x148)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, "3f4866d7073551350f75c4cb4ce45cc4b6fcd90b402b91eefeb41c0cc6007e2e", 0x9, 0xc2, 0x81000, 0x81}, 0x3c)

7.48907913s ago: executing program 3 (id=1461):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(adiantum(lrw(serpent),aes-asm,ghash-ce-sync),sha512_m'}, 0x58)
ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040))
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x5e, 0xa1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x20})
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x23, 0x5, 0x7})
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
socket$alg(0x2d, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000190024c62cbd7000fddbdf2502008009fc010082000d000008000400a0ee4a0cda0d69f9acaa0e26d9d16bab7674fdc66821be9bdeb90cc4398fa8af897bd902ef72ecc7d37fdcabaa32d239a7c5abd7641273ddb3fa6972cdf72c0c1dc2970b9724882f16b4947a7ece8d36d3d30c77d970ec7bb3ee423bb725fab66b878b23c24f1290c7b6715c574891dd0eb30b914b718b80251749478196eb11eee60673c74c385f8ac7ae9d342ca160b3500953afb2ecb82edfc23d0631355e732847999c6bb5c225b28db592a8334766321df82a445f14d079ea1317ac1a8f0e49966a9e1be0de6046c01ef353", @ANYRES32=r8, @ANYBLOB="05001b0000000000080002000a0101010800060004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})

6.129620167s ago: executing program 0 (id=1463):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d)
write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607030009b09e00000000000003000300080000008f010000380000003f02000007000000100020000200070002000000000000000100000001000000f8ffffff7e0000000300000038000000070000000c00000003"], 0x78)
close(r0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xf0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
fsopen(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x24001, 0xf4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(0x0, 0x108)
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000ffffffff0002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a000000000000006c928556802202e5a6ff39fe23f09a9303e55419d7b8b01a7f8506a9918b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe80000000000000000000000000001f000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)

5.905794101s ago: executing program 5 (id=1465):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
splice(r0, 0x0, r2, 0x0, 0x2000, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}})

5.425093046s ago: executing program 3 (id=1467):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{0x16, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x4044004)

5.295981329s ago: executing program 3 (id=1468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x5, 0xffffffff, 0xc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x880)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "996144fc"}]}}, 0x0}, 0x0)
recvfrom$rose(r3, &(0x7f0000000000)=""/151, 0x97, 0x1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40)

5.207464684s ago: executing program 0 (id=1469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000380)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106, 0x9}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000240)="de8e6cda5907d6fa437003bc1f8001bf6ecba9337e", &(0x7f0000000300)="2946f8d86cf3ea1e0591487f99a7eaa9cbccbbe2e64321fac05c2a7325f5f17fe40b5d902c4e233483ab9a07cdd846460cfceb65db023fad5758465c516b704abb4c6aba23612257a845194b4b72620c20d715b3f2548d586c4ba5f4c2b51a9212a5974d323d34101311a029adbd632f7c17332174e56c01252db9be0c468f97"}}, &(0x7f0000000000))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=<r5=>0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x90, 0x7}, 0x6, 0x8, 0x800000000006, 0x8000000000000000, r4, r5})
bind$rds(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x18)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180)

4.959733999s ago: executing program 5 (id=1470):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x31, 0xdb, 0x83, 0x20, 0x50d, 0x1203, 0x603f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x20, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x5, 0x0, 0x6e, 0x58, 0x90}}]}}]}}, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x28020480)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x0, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000007000"], 0x14}}, 0x0)
read(r1, &(0x7f0000000080)=""/186, 0xba)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
syz_usb_connect(0x6, 0x44e, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0xef, 0x1b, 0xcf, 0xff, 0x6e0, 0xf109, 0x42f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43c, 0x2, 0x6, 0x1, 0xe0, 0x10, [{{0x9, 0x4, 0x41, 0x81, 0x4, 0x37, 0x23, 0x4b, 0x5, [], [{{0x9, 0x5, 0xa, 0xc, 0x10, 0x10, 0x5, 0x10}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x2, 0x47, 0x6, [@generic={0xea, 0x10, "ead7a8d03a8fbb29fc88246911c6df99a3d06389a0998d9bf36480c6c9a91c2cccfbb0ee74451412ba6ea69d92b81c136c17d370e8e0e07035bfa3e37caf6a8a62a745788b8d19461ca3fd55285d3f89ba1a99a19f913d4780fe7edcf7bea81fea5a23103eacb403f5d01ef29a4c8ef1c672fed0d254a7c4b19a93e0501b30757510cd8ea592127e5b9f39d369c7adbedab2b5a122e2b88f0f5842b20ebe0c093048c83360591d5bca07217df6d6e6160e7b11ff58d15c083b48da9f470a5e43ecfcb3b9672b61a428b8142e580efc12d5dd092f32344721f9fff6b172dcc2c28e90158968e34ff5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0x6, 0x42}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x50, 0x4, 0x7, 0x3, 0x0, 0x0, 0xf, [@generic={0xe, 0x11, "38e102aa23b5899240b2da62"}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0xff, 0x1, 0xb, [@generic={0xcf, 0x27, "46cd4d7b6b5b558b0e2d2b8eb706d00c4e6779b1303c97b8f6968c31da9d53efbb7db923384789fd5c7054619ab5015d8402333389c2b7ff9a688ce333b9b9b39acc0121a2f69f92036332bfb4b64724d9ac214988b6dfcdd49a3dcc8f6dd780ce83d26a80c8ce22268844296c814a9eac27a8a5ce01181e1ea36ee14ea01eda484ab5151fc6fe4e97d1d7fb46640216e92bf4536457c7ad1255596c8cbc9b04c106f1b2b690af2dd8bb1bc557d3c20bcb9b608ebd1c34e36837f35fc0709ace7beaba5a83b268c3d28be45aa5"}, @generic={0x17, 0x4, "88568ddfe6f2828d5da69433e3f6cb9f0b276375d9"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x20, 0x2f, 0x9, [@generic={0xf2, 0x31, "3cefb17068467cd3c8217022e378663bea9a101c08eeb63970ae8908de5263c231afc660cf1a006daa8af7f58b179e9bd5d21bffff7f99e669dbf162d89ef5f012604faaa387d382255a014539eb4babf21bdc5da37f6f2e1d1caa9e4df6de51610f13da4c7ec5c11793332f09785edd4ac8b1baa82d77e521f00dac280a9012e87679e459199ef355f11c4a1824643cf4ac36b3d0e85a30f8b4971adff0bdbaab1ae2f1545591d0491d65d0d5e0a9a590c0f26356dc672da4d19d325c5d0bff43c267015d1f54904cd751efe8122ba625b37133d3f3202482945426fffc4e8d81ebe3e3533bf0eae10f0763ca3261cd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x49, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xda}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x7, 0x3, 0xfe, [@generic={0xc4, 0x1, "ba5b19dba9c047f40cb2b5de160ce8bc4c5ea80b394124c545adc5aa8c03886b2527bf658c18e962c3273b73e80518dc9aba3ccb68037cfc894e7492d91081f94b497c45f0777ba612211f0ac1b6982ff64fd6b1d968d813067f0a7d7b1e45294c8db13f2f58e806ee0143119b10bb0f56b641b5d2122f6693f08a8ea8a6015c28f1cb66cf6c13432537ad74070ff2f46ccedab0b8984a78b2a73254f6f2a1903bcbb554243f36478c1e68efc96bceb7922ae5af150cd0f5108cd1b22bdb31935e4a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0x7, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x9, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x2, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0xeb, 0x1}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x10, 0x6, 0x40, 0x3}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x6, 0x4, 0x2c, 0x14}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x1, 0x0, 0x1}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "0660b7d05d3fd1f00b5c3d4fdd7a45db"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x448}}]})

4.683705508s ago: executing program 4 (id=1473):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
epoll_create1(0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x402c542c, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24}, {@in6=@mcast1, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x0, 0x0, 0x8, 0x40000000, 0x6, 0x100000000000000}, {0x0, 0x2}, {0x1, 0x3, 0xfffffffc}, 0x0, 0x3503, 0xa, 0x0, 0x10}, [@replay_thresh={0x8, 0xb, 0x6}]}, 0xf8}}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1008001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
setrlimit(0x6, 0x0)
semget$private(0x0, 0x1, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc0, 0x32}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

3.337564887s ago: executing program 0 (id=1475):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x20000007}, 0x10}, 0x94)
socket(0x21, 0x80000, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd600000000000ab4dfe88000000000000000000000000530600000000000000000000000000000001a9cc2260103e"], 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x2010, r1, 0x540f5000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000104000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.325352365s ago: executing program 2 (id=1476):
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=ANY=[], 0x3d})
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004380)={{0x1, 0x0, 0x80, {0xdddd1000, 0xd000}}, "62f555e0f9c836012c959487e9bafeb15cd459417d251d183362d146a5da275fa7c56e36b8c00cef93e8c26aa3746b883077791cbe55f78b96385e58790dd65124a4dcba480eb9743ad8475f0b30f5b9416ca2edc503e89e3945b9d5d584c4df4c96ea383d0b551dfc6b747010953240f12f85a79fe0e371a9ab0b2ab1ba3e8f37a3385dc9068a628ce6a05183bfd67d45bed9bc3ef1f275746b8709c5c239c2cb101ddbe79b4d3fbba5e6d12c03df76c97488a62d484e587dbc864c37c59eec5adf0ad0e353e39c5d44e5f47e68de2add4a385cc934ed1fa08515f94481fac14eb4de2f788e9a5b66c5db80c6d4c0e4618f96f1d39fced38274c741fb07503cae134c348be7c8860eb3f8eeab8caad6fa9f13f4c7319f0870ef5688d9ed7681871592c434a3e7e5e635314bfe433a70f580a63e670107ef600f0f4825b9fca1b3d182248f0fef5d1c1ed9dbc73ec60bf12ce7af6c1e7d45204601cbfa843b993fcad8644955b7ca9e2b5ca81f49a7b8eb9ff5ecb069ec4c69ae21fa57c464d10a3b2473809563b8dcc22644a0c09b2f4872707fd8bd4d56c2a31f6cb187089e9da60a5c1945337ab749213ff681e940e8d9388ea943d0c29b2c48e281b6aed6fe5f7276390321b330442616da11a79adcee0d31bdf1381fc0d23e4a5cb84329df1957abecf66840f9464cdfb2f46e36ef2c6db74a429cbb70590cf9b9e16a7b11d5f254b41567a29b3f77b28cdb3ed5a4073b143c7c3b2b060e13f7035c029a19162d72b1a5e7ea04bfca6150bd8baf9b8e41cfe9bad45b8596649a0b878c19092dba346bb9e9e069d5bbacf3d3b0e66977b14dffd0a82a233a6371545b672800470de178a220a9dbb4cdeb86f936986e980c5589676dea2d7071018347a94e7e5ad6aeadbd597f352b18c46fc34c94498357e3c97721f9f03b1ba0527712bfd3242cb98d9232882e09022b9da6404a0a3f94cf6002e36cbf701ef7c4bb6135d7d3127699fe61cc2d0f9c5877b3f7a005830711571d74ca5e3c6fd8d118a0df3e154bd6374754c5066124c209323589e7b9d6969ddf6bdcab805012a1ebb639460d08555398815761562a38fd995734ef997b1f9c036de55f228baf772ac899b4aed71e681f189870eb03915fe187e0e55272f6a69ec5876f1ab90fe34b7eda6379bdb95e83153a2160162a6fcb6beda89f1f8dd33a8c6c543117b6b4440f5ffab5ab3c34c756b7dd1c280efdfe3261c7133cd41217ab9198313da6d8fc7bbdae005c40f9704d531f5ebb7045bdb79ecf25983dafb4acb98e44743d7e6b64ff65cba7e7f2b8d53d18ca16e2de188204ecbbd499d70ad852ce30d4fdb0d8408014e3a3de2517cd82971b193e406b744cd5ccc0c2df864bca7a4e0af41ddb8501db2af788a6bad5518d848010986d48e952af942494859d166825cdd54912d0d32ff115efdbd1592325cdc047938a2c9f137f9bb198235a1d83a938acefac6f56946110b522bdb69e2a853965c11fc5a487c1df9510a03ed86baf365f49a30a67f93cfd5eed0fdebfcebcf96b0351826e06d13108fbfa3f85932d5ad00cda467dc39af4d3a33bdc28abcce3a392f219b46736c9e8b870f35dc5f1132c6b00994b78f586ed7af901b05063938e6464ab164befd046facdccd2e984f9c7f7d2d7c0cc8a5904f79895168f4af168102f52ce771719a6b89ae2f8787c3b6a3e4641824cf99c4c3cf7b4b3079b1b5bf7e671ae1920382d459202faf2091d9d85e9baf2a6ab7a6d7f380580f5931379b76a70ce84330dc000c8b4c58ca825d287ab2c1c0d7f6821b6c60dcc206a516a7c8a5cdb12c3c176f2bf3e199444c48503f4c0037225f535b0f9f0882c2001b05fe64c74d99b7267d3978814da995d0a7e61ff03b9d39817dd656544398f713f917f2cf220cfd29b3e59eb8a401fce9b57ba8bc87b0e2685a07d51a0dcbe655769630e36173fb991d710213b4b367c5bce5a8ccd633f553107d1096449c883730df2e07e9deaec2d8c3f8171ca097276dae33e0f9009a82ec90f07ed3200af689263c07f60eb182d3e8305e947a700a5ac208e4c8323534e6e0f51c015a18a396971a8089688cdaf64e7884de54542f35772a41fae7661319e92e62259ae79635b3d888a173fe92a222cf294c569d092e41c6ad59a2c1bff78d506cc8fa28b03eb0aaf19d7e218402c8e19dbfcf5680143bc0a71bfb6a1e68ebf42d634ad8205f0774195d032e8d5bcfbc36bd737141f8be4e7279ed1231921a8e916995aaaf577c64b51b34ef72c9c7b7ccd6a0765ba5162525ce436bfae6d977c11570066622584599f4817bfbea9fb9ad549146a5403d8b9a29827f5dc4f8dae4cc0849c3d7a93fe148f43d465d246a974137f28cc17185adabb9b49d93c6bfe502dc47576c85c5145e0c211a42809959b1a8dd0bb42d9e1831a55bfbb681aacb0b62b4a9298c5d5f5834d0b0cbe626c17b128cdf53a03bc21fe1c7648a96697d8b078d3a6570289ef0e7ebc5bff6a64cfa65276713532fd54147043e0c3b74282dfb6d1e1c137eae1ecb3d3d39a5ace7e48cb0dc94a2c8cfb12742f5538e141207717505fe8b46a2492f7e3e77990b935df524b07efab69e8404ba0670dc27cb9feebb1cc89fbb36c5bab9123e1d56e75bebe2d31a1a4e259d01b70aef3a9479c38bc72e245ae3e6520a6acb16eabb011551c856957e687cbc53e4d6fb89a83c7f54bc5ca3a4f4d933e0b8ec873d7a288e51d8e1a9f7a96b8e7275ab2ca388be30485bfba4c430b7ba98d37873327f53e6ffc5fcc315325cd530747b1217aa9715a80e4391e510ff8c2d4e696cb8a56f7e7328618ec24933834d87e12ddc8c6b5e0349cdbe81a815a0bea4903872bd762e223eeae89961219f8b7ac866b075797d055ba08d5f5b25e402c9d8164c8a18a29df5c7e0250836e04400142e2eb1ae31fd305773bf3352384e023933cc12e2665b90ba7d28cd4199af329817a5fb212e458b5a645773581272a75c294ff564122cf7d96e8f3d14d9876ab09f9e7a2fe184ac2183b50bdba3be95c9d3c0c854492a1beb59e5020fd1bc28c3b70b081e5bfd82176e0987b58fead13096b7b055afe0a6a50af2277eb646224b0705ced3ce3901306e1eacb4906df54f72d4706f6ea6a3f111d9fa0efb2693ca41fb0394d3fd65e85508af36de513c6f1acbb50f386c5d5e712d8f4a720b8b035247ad6167b837000abeb38237c093e5159873dda350801b3f343f53df555c4856e857b0426579ab60adbdbf3db0a5bd58f01a27224a010fde1b679ccb4ffe7069c117958b57372f444d84507bb0f4dbfa44e03cc0cecc93f7af7143340fa28ccf9d49ade9f396063aa5b7ce397574f28ecde2f58655acaead943cc49f26a0a387ad68136f8f4b13fcdd3d5be006b494564c766ebc926140d45c84bd02e6a3e947e7e2dfc5ce301a66a0974b2f5ffa906cb2ae660370ae010224a81bca39e1521cbe7340445b0d6f44c628ed297f5860685ded2acfa10c1b4aac4439c65768d48a175e43fb25c4c85c05b04c0955f1aaa4fd0c18f6ac540b66bd856b8ac32837e8b3082453e4b8f10375f6b32b2af80240dc602bc340a9e107b42a4204bd6bb0889e46a415ff5c24df7ffbe9eca2dddf7ad64c4eb018624cb0a2fa92ffa23bc7c503972fdf208da2f4ff1af3ba19a96b390f209608a3b8c5f19d7117adf3a222b886b04e300a8c8b25afc52201d8afdb0f8d1377c028de8eafabd75759a44ddbb2f4376ffae20629fe08ba10c768fec6f011c61ab155573b48f5141d9ff02ad2c317eaa86becf9d4f007aebd0b152fe7b55aca593b6678bd4333f220fa61e8124657d3dcab9ecb1258857cba8e61861a921222957d4c346bfe81eb0274843ff7fee27dcebf6bd29fd05687e7e85c213c95426b976e07012ebd5e0592082229a8a5bd1b580678b3c204fe6305465c03ceffa908b8150a99c3e32ae4bd095d75ff180fa02e64c471180fa468caaff9fcee94f8fdb55ab9f06dfed97ee710807d1fca7e6b103c1600b7455fd9d8e42c1146938a02cf8c2c8f0ed074398cff451d0ba2d660885e4fb3c384a52fb8d841d8b7bb2c5463aeb015cbbf54f394875e20f6b3574d65ed39c44f2c6d5b0507ff6196dbcd2b69ba0be1d44565958560c5e9688807a74161f8749b78cd558fde84dc2527b344ab773870e184615ad2ccada1ef750ef8b44cd16cb362faf22ba66f6476d0294d6a22483d78a6855a1bd13f151dc80a358224c86021393bdddb093928863475512a6110acb6ec55039ace9c45792478222155ae2177df549934e202c2865b54132ec8a489c5e6bd0a2d3f27ae107d62f95d131279ee8a0c180e3c61bdee4cf53a7fdf60dfcbb443ee3f2218de76f5e33cf8db2f824c63bf15784d022b121cc69761cc80116774dabb549c1c63f9f99bbe66b4351d8274c73754b7e7475dd8030223c8f830bb77bee7346643f2614601d06a52fae4f53bab4ee047552d9bdd0fa5fd7e4f7674f226f04ab733b7369a62ecfa9a47aed6c350594f9f0a211277a89dbff52abe7638f9d4f37370b784abd7f174b5f3b3a68149935cbb6c88a17c9876c8dd1b501c5f3a424bdfe44b177b1799384c28723b7150a61184d006052f8e14e6e77bf3a9164d596ddb341bebae2f2dbd175af59cce8b121ebfee73fad3eed15d87de5b64abc1758396da2508ee3f20bebd93b6d25b6377989ec5424022a0086699478e6860750e9c926c59bcd0cac3e9dbb1f0b0124c2bd69b535573c9617aab0fec4e3faa69512d9a76aad0df282e9dea80422655d7d001b09fdb53930243d3615df8f0bd598430a23de65f6d882166e84a00306fe079973e5322976a43c72b245358e3ceaa926f60b474f81a482fe2137f06cbd4dbffd476c88a4ab0ad32692719467f5afced5894bc15c3f8d830ebffa8ee431b58a2ad355c2872a0f03ba034dbbf730b74de1aaadc634c08b9fe5402a16a7c79ba3f5a4b318b26d4968143343dfcc79106e606d76e488e0cc6cf76df6c076c766bdd27f2a759339ee2da94e5983c7a0e196deebc51ddf909dca31e2ef491be6f9ded1bf2fb50f5322ba94306fb0c6d67a57f58d7a3d30a4a58322d3f0968b7a44e4017c5caf29e2221f5250a8868ed1525e6fa62d0cc79fbfb92d05921542d84339e33305cfd0624e246f742644638e360051f396eb058c68c5f66f5db3c830cc567b0a2601c2354a7f800d7c815c4744e2fabb00cda287aa74c924ab6afcc92e422ef618bd681bea1a9ec7234e67b9690309be0eab273e67f03e6ae349bcb468251954fdc19edd6fb0c09e4306465f2029d08e137bd7e84716a9e9b29c0fb2e5a55256fd878304baea76c9379265ca36a04e69df2782589c1911b8ae314c017ea5685110880b036aa76c4a19dd240664b6f4098aa2bf51b90678098993ebdb39166194b44f35a81709570398f00f0f8a1e9cd004e02cc1ccb63f56b79268dce0dc70438dda8f2885f4f199922a28f04fdac1b4be1a690cd4fdf0c7ff0252ff0373496e8e6db9068cd492aaea485ffef09c7351d5555eb3545a1048af936a19c5b08a3d47baed2f8cef2f8ae7443acf81b61fa2d0c1cecfe1881d3b2d8882810a014baff0570a389f5424c8e98f64a35e411bd560c5cb5b9ed3f846cc46b4c537691e13bcc3e55762a427534a7354914dac303c3263b8765f861f453e470c4567ba9cb6c13cf17c24bac9ef1f40d9fa5b0b9b5e9d4c082886b80caebaa44fb38934e7bbf184d28c2bc3ac824d1626fccf542eb3", "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"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

3.181787075s ago: executing program 4 (id=1477):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

3.077610281s ago: executing program 4 (id=1478):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, &(0x7f0000000180))
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

3.077065997s ago: executing program 2 (id=1479):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)

1.450239856s ago: executing program 4 (id=1480):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff)
splice(r0, 0x0, r2, 0x0, 0x2000, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}})

1.198610568s ago: executing program 3 (id=1481):
socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
capset(&(0x7f0000000240)={0x20080522, r0}, &(0x7f00000001c0)={0x2, 0x7, 0x87, 0x7f, 0x1000, 0x5})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r4, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000480)=0x10000001, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)

1.17456295s ago: executing program 2 (id=1482):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
capset(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x0, 0xfff, 0x0, 0x7, 0x8000})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0xd0640, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x2b, 0x1, 0x0)
r4 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000500)={0xfffffff8, "f89516e2cbefa3be82d4bc5db38b16862af7c823f78da082aa88f616dbddb0c928981b16390996abf80f526190266d6a4c27532f8122c6551ba6d82c1329ef6029b48ed93af95eb2a230106e97c0dd5cb24ec85804095139a668f8c3ff935a13b8fa1548d79533402dbf4acf530e848459153bce26aa1867f7b77d8ac4eb4b6118dd970409af22f28a9bbf300008eef73bc3fdbbff51faccce0c6344e3a76373eb88f837a43ee2eb2a5541c2dabab878b5e942b0bf213bcfebfff7c522763837c4c5187b81705db1d9e604ddeec72962bd9610e9f8ced3d704ee77db69fc0bd828419337e385c3ae06ad5d14c1ec9cdfbac0ba291596bb8f3c3a61a880b278a6"})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="30000000eeffffff", @ANYRES64=r7, @ANYBLOB="06000000000000000f0000000000000007000000080000007175657565310000"], 0x30)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}})

1.14475852s ago: executing program 5 (id=1483):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001", @ANYRESOCT=r7, @ANYBLOB="826779ab834b1e08ef9ebb812ea7453704127fa51ee6bc0d3cf3b47bc33e294039a02e9edc89b6345e11cb", @ANYRESOCT=r7, @ANYRES64=r5, @ANYRESDEC=r6, @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})

629.042216ms ago: executing program 5 (id=1484):
socket$rds(0x15, 0x5, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xde2d1a44ebbbc87d, 0x62)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101082)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=ANY=[], 0x3d})
r7 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881", @ANYRES8=r6], 0xa0})
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000004380)={{0x1, 0x0, 0x80, {0xdddd1000, 0xd000}}, "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", "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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

591.386974ms ago: executing program 4 (id=1485):
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r1 = dup(r0)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x12125, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000296000000000000000000a00004a1b9a4eb82a027b5859311ff8de62b7ad3476aa8a705472aceabdd40425dd03996fc37bfb18311a2fc1b26ece704fd22865582e2a96a24700a0e402683242c3927d21b7784fe992f415a2446e042758ab92533d1993ed5d9cc1db6dce226f62f38639a028c9f63a7a9d54bc0db814588f36e200000000"], 0x14}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$TCFLSH(r7, 0x400455c8, 0x2)
ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000480))
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, 0x0, 0x4008044)

497.664685ms ago: executing program 2 (id=1486):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0153000000000000000001"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4008019}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000180)={0x4, 0x1, &(0x7f0000000040)=[0x0], &(0x7f00000000c0), &(0x7f0000000280), 0x0})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0)
recvmsg(r2, 0x0, 0x10000)

393.294893ms ago: executing program 2 (id=1487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x4)

351.526434ms ago: executing program 2 (id=1488):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmofe=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0x6}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x8, 0x6, 0x1, 0x40, 0x7]}, &(0x7f0000000200)=0x54)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xfb, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x450, 0xe, 0x6, 0x2}}]}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_4={0x3, 0x1, 0x7}]}}, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0000f7050a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020094000000080006400000000408000440000000170900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, r5, {0x1, 0x0, 0xc, 0x6, 0x80000001, 0x4, {0x6, 0x2, 0x3, 0xfffffffffffffff9, 0x1, 0x7, 0x25b, 0x3981, 0xa81, 0x4000, 0xff7f, r6, r7, 0xffffff00, 0x9}}}, 0xda)
llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x3, 0x8000000}}, 0x50)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r8=>0x0}, 0x2020)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000003c0))
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setuid(0xee01)
execveat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x100)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0x517f29431b079aca, r8}, 0x10)

311.524382ms ago: executing program 0 (id=1489):
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

223.19266ms ago: executing program 3 (id=1490):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
r4 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x301f}, 0x3})
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000001c000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x50)

121.678794ms ago: executing program 5 (id=1491):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000100)=' ']}, 0x0)

0s ago: executing program 0 (id=1492):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
mq_open(&(0x7f0000001500)='#\x00', 0x40, 0x120, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

with invalid ether address
[  342.880266][ T9047] Invalid source name
[  345.095713][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  345.725027][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  346.612273][ T5913] usb 4-1: Using ep0 maxpacket: 16
[  346.619685][ T5913] usb 4-1: config 8 has an invalid interface number: 206 but max is 0
[  346.632959][ T5913] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  346.720617][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  346.735574][ T5913] usb 4-1: config 8 has no interface number 0
[  346.782915][ T5913] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  346.794467][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.821312][ T5913] usb 4-1: Product: syz
[  346.890117][    T9] usb 5-1: Using ep0 maxpacket: 16
[  347.082365][ T9088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4511 sclass=netlink_route_socket pid=9088 comm=syz.0.811
[  347.222038][    T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  347.242465][ T5913] usb 4-1: Manufacturer: syz
[  347.321820][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.334505][ T5913] usb 4-1: SerialNumber: syz
[  347.350184][    T9] usb 5-1: config 0 has no interface number 0
[  347.358361][    T9] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  347.377738][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.421059][ T5913] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected
[  347.430438][    T9] usb 5-1: Product: syz
[  347.439201][ T5913] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  347.448846][    T9] usb 5-1: Manufacturer: syz
[  347.502752][    T9] usb 5-1: SerialNumber: syz
[  347.508884][ T5913] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  347.531477][    T9] usb 5-1: config 0 descriptor??
[  347.547492][ T5913] usb 4-1: USB disconnect, device number 20
[  347.556420][    T9] usb 5-1: Found UVC 0.00 device syz (046c:14e8)
[  347.569503][ T5913] garmin_gps 4-1:8.206: device disconnected
[  347.596908][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'.
[  347.606030][ T9092] bridge: RTM_NEWNEIGH with invalid ether address
[  347.692412][    T9] usb 5-1: No valid video chain found.
[  348.234951][    T9] usb 5-1: USB disconnect, device number 11
[  349.219258][ T9111] Invalid source name
[  350.748328][ T5944] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  351.053894][ T5944] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  351.070080][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.078602][ T5944] usb 3-1: Product: syz
[  351.531046][ T5944] usb 3-1: Manufacturer: syz
[  351.535859][ T5944] usb 3-1: SerialNumber: syz
[  351.696690][ T5944] usb 3-1: config 0 descriptor??
[  351.856441][ T5944] ipw 3-1:0.0: IPWireless converter converter detected
[  352.064504][   T43] usb 3-1: USB disconnect, device number 19
[  352.079044][   T43] ipw 3-1:0.0: device disconnected
[  352.108579][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'.
[  352.151896][ T9156] bridge: RTM_NEWNEIGH with invalid ether address
[  352.262990][ T5944] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  352.532798][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  352.608916][ T5944] usb 5-1: Using ep0 maxpacket: 32
[  353.084747][ T5944] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  353.293207][ T5944] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  353.343354][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.355119][ T5944] usb 5-1: Product: syz
[  353.359305][ T5944] usb 5-1: Manufacturer: syz
[  353.390050][ T5944] usb 5-1: SerialNumber: syz
[  353.399198][ T5944] usb 5-1: config 0 descriptor??
[  353.482410][ T9153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  353.511382][ T5944] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9
[  354.788613][   T10] usb 5-1: USB disconnect, device number 12
[  354.788720][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  355.749324][ T9214] FAULT_INJECTION: forcing a failure.
[  355.749324][ T9214] name failslab, interval 1, probability 0, space 0, times 0
[  355.880357][ T9214] CPU: 1 UID: 0 PID: 9214 Comm: syz.5.837 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  355.880386][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  355.880396][ T9214] Call Trace:
[  355.880402][ T9214]  <TASK>
[  355.880409][ T9214]  dump_stack_lvl+0x16c/0x1f0
[  355.880439][ T9214]  should_fail_ex+0x512/0x640
[  355.880461][ T9214]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  355.880487][ T9214]  should_failslab+0xc2/0x120
[  355.880512][ T9214]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  355.880535][ T9214]  ? __alloc_skb+0x2b2/0x380
[  355.880562][ T9214]  __alloc_skb+0x2b2/0x380
[  355.880583][ T9214]  ? __pfx___alloc_skb+0x10/0x10
[  355.880611][ T9214]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  355.880643][ T9214]  netlink_alloc_large_skb+0x69/0x130
[  355.880661][ T9214]  netlink_sendmsg+0x6a1/0xdd0
[  355.880682][ T9214]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.880708][ T9214]  ____sys_sendmsg+0xa95/0xc70
[  355.880726][ T9214]  ? copy_msghdr_from_user+0x10a/0x160
[  355.880748][ T9214]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.880776][ T9214]  ___sys_sendmsg+0x134/0x1d0
[  355.880801][ T9214]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.880822][ T9214]  ? __lock_acquire+0x622/0x1c90
[  355.880868][ T9214]  __sys_sendmsg+0x16d/0x220
[  355.880892][ T9214]  ? __pfx___sys_sendmsg+0x10/0x10
[  355.880930][ T9214]  do_syscall_64+0xcd/0x4c0
[  355.880957][ T9214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.880974][ T9214] RIP: 0033:0x7fb82ad8e929
[  355.880988][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.881005][ T9214] RSP: 002b:00007fb82bc21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.881022][ T9214] RAX: ffffffffffffffda RBX: 00007fb82afb5fa0 RCX: 00007fb82ad8e929
[  355.881034][ T9214] RDX: 0000000020000084 RSI: 0000200000004340 RDI: 0000000000000003
[  355.881052][ T9214] RBP: 00007fb82bc21090 R08: 0000000000000000 R09: 0000000000000000
[  355.881062][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.881072][ T9214] R13: 0000000000000000 R14: 00007fb82afb5fa0 R15: 00007fffd06ae098
[  355.881095][ T9214]  </TASK>
[  356.581487][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  357.770069][   T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  357.811167][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'.
[  357.864761][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'.
[  357.907225][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'.
[  357.967091][   T24] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  358.032724][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.062746][   T24] usb 5-1: Product: syz
[  358.066952][   T24] usb 5-1: Manufacturer: syz
[  358.085089][   T24] usb 5-1: SerialNumber: syz
[  358.127341][   T24] usb 5-1: config 0 descriptor??
[  358.427180][   T24] ipw 5-1:0.0: IPWireless converter converter detected
[  358.707420][   T24] usb 5-1: USB disconnect, device number 13
[  358.946162][   T24] ipw 5-1:0.0: device disconnected
[  358.953667][   T30] audit: type=1400 audit(1752141971.568:469): avc:  denied  { read } for  pid=9263 comm="syz.5.851" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  358.982234][ T9269] binder: 9263:9269 ioctl 400c620e 200000000000 returned -22
[  358.994444][   T30] audit: type=1400 audit(1752141971.578:470): avc:  denied  { open } for  pid=9263 comm="syz.5.851" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  359.048043][   T30] audit: type=1400 audit(1752141971.588:471): avc:  denied  { ioctl } for  pid=9263 comm="syz.5.851" path="/dev/input/event3" dev="devtmpfs" ino=999 ioctlcmd=0x4508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  361.342898][ T9314] Invalid source name
[  361.821089][ T9315] overlay: Unknown parameter 'appraise_type'
[  364.187253][ T9342] dummy0: entered promiscuous mode
[  364.200377][ T9342] dummy0: entered allmulticast mode
[  364.216407][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'.
[  364.290137][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'.
[  364.814716][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'.
[  367.336329][ T9371] Invalid source name
[  368.067800][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  368.292313][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2046, setting to 1024
[  368.312154][   T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  368.357497][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  368.398471][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.416773][   T10] usb 4-1: Product: syz
[  368.426887][   T10] usb 4-1: Manufacturer: syz
[  368.553890][   T10] usb 4-1: SerialNumber: syz
[  369.540275][   T30] audit: type=1400 audit(1752141982.098:472): avc:  denied  { setopt } for  pid=9414 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  369.733614][   T30] audit: type=1400 audit(1752141982.168:473): avc:  denied  { read } for  pid=9414 comm="syz.0.887" dev="sockfs" ino=19484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  370.908691][   T10] cdc_ncm 4-1:1.0: bind() failure
[  371.023838][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  371.042700][   T10] cdc_ncm 4-1:1.1: bind() failure
[  371.060763][   T10] usb 4-1: USB disconnect, device number 21
[  371.555826][ T9436] Invalid source name
[  372.525877][ T9437] Invalid source name
[  374.070276][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[  374.191882][ T5913] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  375.612296][ T5913] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2046, setting to 1024
[  376.757251][ T5913] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  376.777308][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  376.920143][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.928166][ T5913] usb 5-1: Product: syz
[  377.088976][ T5913] usb 5-1: Manufacturer: syz
[  377.119517][ T5913] usb 5-1: SerialNumber: syz
[  377.134259][ T5913] usb 5-1: can't set config #1, error -71
[  377.180062][ T5913] usb 5-1: USB disconnect, device number 14
[  378.511159][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.519159][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  379.677523][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'.
[  379.971070][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.912'.
[  380.276798][ T9525] Invalid source name
[  381.603495][ T9537] netlink: 68 bytes leftover after parsing attributes in process `syz.5.919'.
[  381.887371][ T9535] Cannot find del_set index 0 as target
[  383.954134][ T9568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4511 sclass=netlink_route_socket pid=9568 comm=syz.3.929
[  384.510089][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  384.518176][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  384.650078][   T24] usb 5-1: device descriptor read/64, error -32
[  385.224690][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.933'.
[  385.328051][ T9584] 9pnet_fd: Insufficient options for proto=fd
[  385.370403][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  385.643650][   T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  385.674683][   T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  385.693536][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  385.710147][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  385.727935][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  385.738716][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.748430][   T24] usb 5-1: Product: 繵Ỉ켹ⶀ틕ܣǪ钖㊴误ﳩ쁁藏靏鯮吽瀂勿㍲輥刿徾얫ᣬ珇힒ꀏ↖꧙끫⌲섻琇餇锈狅䋲奌컓酿饪ኇ捸뻍灡㔓뀘惺ݦ봗纰僟ଊ慀Щ䌻膿㿩뷄蟒첮砌ᒄ谱笀説䁙ፖ鍰鱅쌇ꞥ⽝뵵夁ᅧ緺ൃ콍娑躈匘⯊㿘絇
[  385.800395][   T24] usb 5-1: Manufacturer: 鴻fi旄貭窚䙰讣࿯
[  385.807114][   T24] usb 5-1: SerialNumber: 頙箨垻Ñ촙⃀⎰
[  385.940087][ T9268] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  386.033151][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'.
[  386.096362][   T24] usb 5-1: 0:2 : does not exist
[  386.102459][ T9268] usb 4-1: Using ep0 maxpacket: 8
[  386.137692][ T9268] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  386.157757][ T9268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.170228][   T24] usb 5-1: USB disconnect, device number 16
[  386.186584][ T9268] usb 4-1: Product: syz
[  386.205723][ T9268] usb 4-1: Manufacturer: syz
[  386.257726][ T9598] [U] 
[  386.265088][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  386.272020][ T9268] usb 4-1: SerialNumber: syz
[  386.359593][ T9268] usb 4-1: config 0 descriptor??
[  386.388052][ T9268] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  387.432224][ T9268] gspca_sonixj: reg_r err -110
[  387.437042][ T9268] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  387.955912][ T9618] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  388.843494][   T30] audit: type=1400 audit(1752142001.438:474): avc:  denied  { create } for  pid=9625 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  389.084278][   T30] audit: type=1400 audit(1752142001.438:475): avc:  denied  { connect } for  pid=9625 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  389.148203][   T30] audit: type=1400 audit(1752142001.518:476): avc:  denied  { write } for  pid=9625 comm="syz.2.947" lport=34663 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  389.815922][   T10] usb 4-1: USB disconnect, device number 22
[  390.246737][ T9654] overlay: Unknown parameter 'appraise_type'
[  390.862092][   T30] audit: type=1400 audit(1752142003.438:477): avc:  denied  { write } for  pid=9645 comm="syz.5.953" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  390.884615][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.532559][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  391.543243][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  391.563978][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  391.661481][ T9672] FAULT_INJECTION: forcing a failure.
[  391.661481][ T9672] name failslab, interval 1, probability 0, space 0, times 0
[  391.675645][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.4.960 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  391.675671][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  391.675681][ T9672] Call Trace:
[  391.675687][ T9672]  <TASK>
[  391.675694][ T9672]  dump_stack_lvl+0x16c/0x1f0
[  391.675724][ T9672]  should_fail_ex+0x512/0x640
[  391.675748][ T9672]  ? fs_reclaim_acquire+0xae/0x150
[  391.675768][ T9672]  ? tomoyo_encode2+0x100/0x3e0
[  391.675792][ T9672]  should_failslab+0xc2/0x120
[  391.675818][ T9672]  __kmalloc_noprof+0xd2/0x510
[  391.675838][ T9672]  ? d_absolute_path+0x136/0x1a0
[  391.675859][ T9672]  tomoyo_encode2+0x100/0x3e0
[  391.675892][ T9672]  tomoyo_encode+0x29/0x50
[  391.675912][ T9672]  tomoyo_realpath_from_path+0x18f/0x6e0
[  391.675945][ T9672]  tomoyo_path_number_perm+0x245/0x580
[  391.675965][ T9672]  ? tomoyo_path_number_perm+0x237/0x580
[  391.675988][ T9672]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  391.676010][ T9672]  ? find_held_lock+0x2b/0x80
[  391.676057][ T9672]  ? find_held_lock+0x2b/0x80
[  391.676077][ T9672]  ? hook_file_ioctl_common+0x145/0x410
[  391.676099][ T9672]  ? __fget_files+0x20e/0x3c0
[  391.676126][ T9672]  security_file_ioctl+0x9b/0x240
[  391.676152][ T9672]  __x64_sys_ioctl+0xb7/0x210
[  391.676173][ T9672]  do_syscall_64+0xcd/0x4c0
[  391.676199][ T9672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.676217][ T9672] RIP: 0033:0x7f89d8d8e929
[  391.676232][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.676248][ T9672] RSP: 002b:00007f89d9bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  391.676265][ T9672] RAX: ffffffffffffffda RBX: 00007f89d8fb5fa0 RCX: 00007f89d8d8e929
[  391.676277][ T9672] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003
[  391.676287][ T9672] RBP: 00007f89d9bfc090 R08: 0000000000000000 R09: 0000000000000000
[  391.676296][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.676306][ T9672] R13: 0000000000000000 R14: 00007f89d8fb5fa0 R15: 00007ffc70e75428
[  391.676329][ T9672]  </TASK>
[  391.678571][ T9672] ERROR: Out of memory at tomoyo_realpath_from_path.
[  391.689324][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  391.921427][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  391.933696][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  393.588561][ T9697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4511 sclass=netlink_route_socket pid=9697 comm=syz.2.967
[  393.640332][ T5944] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  393.840197][ T5944] usb 6-1: Using ep0 maxpacket: 8
[  394.049308][ T5944] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  394.085813][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.107712][ T5944] usb 6-1: Product: syz
[  394.137303][ T5944] usb 6-1: Manufacturer: syz
[  394.245253][ T5944] usb 6-1: SerialNumber: syz
[  394.340040][ T5944] usb 6-1: config 0 descriptor??
[  394.392806][ T5944] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  395.473334][ T5944] gspca_sonixj: reg_w1 err -71
[  396.000191][ T5944] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  396.055389][ T5944] usb 6-1: USB disconnect, device number 3
[  397.416520][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  397.467077][ T9734] sp0: Synchronizing with TNC
[  398.559697][ T9744] netlink: 68 bytes leftover after parsing attributes in process `syz.4.978'.
[  398.702002][ T9745] SET target dimension over the limit!
[  400.477484][ T9753] [U] 
[  400.567601][ T9766] netlink: 'syz.4.985': attribute type 1 has an invalid length.
[  400.575655][ T9766] netlink: 236 bytes leftover after parsing attributes in process `syz.4.985'.
[  400.701488][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  402.120351][ T9268] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  402.556802][ T9268] usb 1-1: Using ep0 maxpacket: 8
[  402.573814][ T9268] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  402.590885][ T9268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.600237][ T9268] usb 1-1: Product: syz
[  402.604604][ T9268] usb 1-1: Manufacturer: syz
[  403.056183][ T9268] usb 1-1: SerialNumber: syz
[  403.121057][ T9268] usb 1-1: config 0 descriptor??
[  403.147080][ T9268] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  403.449131][ T9791] kvm: pic: non byte read
[  403.453815][ T9791] kvm: pic: non byte read
[  403.458276][ T9791] kvm: pic: non byte read
[  403.462813][ T9791] kvm: pic: non byte read
[  403.467319][ T9791] kvm: pic: non byte read
[  403.472084][ T9791] kvm: pic: non byte read
[  403.476503][ T9791] kvm: pic: non byte read
[  403.490698][ T9791] kvm: pic: non byte read
[  403.558775][ T9791] kvm: pic: non byte read
[  403.578788][ T9791] kvm: pic: non byte read
[  405.100397][ T9268] gspca_sonixj: reg_w1 err -110
[  405.890825][ T9268] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  405.901183][ T9268] usb 1-1: USB disconnect, device number 15
[  406.204270][ T9815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  406.316681][   T30] audit: type=1400 audit(1752142018.908:478): avc:  denied  { create } for  pid=9813 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  407.420152][ T9839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1008'.
[  407.463945][ T9837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1007'.
[  407.514558][ T9840] SET target dimension over the limit!
[  409.330255][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  409.601782][   T10] usb 6-1: Using ep0 maxpacket: 8
[  409.619718][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  409.639856][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.739984][   T10] usb 6-1: Product: syz
[  409.744186][   T10] usb 6-1: Manufacturer: syz
[  409.748782][   T10] usb 6-1: SerialNumber: syz
[  410.003798][   T10] usb 6-1: config 0 descriptor??
[  410.126091][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  411.141208][   T10] gspca_sonixj: reg_w1 err -71
[  411.438955][   T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  411.453852][ T9881] Invalid source name
[  411.747044][   T10] usb 6-1: USB disconnect, device number 4
[  411.902887][   T30] audit: type=1400 audit(1752142024.508:479): avc:  denied  { setopt } for  pid=9880 comm="syz.0.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  411.904878][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'.
[  412.607819][ T9902] delete_channel: no stack
[  412.619599][   T30] audit: type=1400 audit(1752142025.208:480): avc:  denied  { write } for  pid=9902 comm="syz.0.1024" path="socket:[20760]" dev="sockfs" ino=20760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  415.183939][   T30] audit: type=1400 audit(1752142027.778:481): avc:  denied  { connect } for  pid=9931 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  415.260312][   T30] audit: type=1400 audit(1752142027.828:482): avc:  denied  { append } for  pid=9931 comm="syz.2.1031" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  415.283892][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.588617][   T30] audit: type=1400 audit(1752142028.188:483): avc:  denied  { read } for  pid=9930 comm="syz.5.1029" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  415.689436][   T30] audit: type=1400 audit(1752142028.188:484): avc:  denied  { open } for  pid=9930 comm="syz.5.1029" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  415.696955][ T9949] overlayfs: missing 'lowerdir'
[  415.789584][   T30] audit: type=1400 audit(1752142028.188:485): avc:  denied  { ioctl } for  pid=9930 comm="syz.5.1029" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  415.815746][    C1] vkms_vblank_simulate: vblank timer overrun
[  415.855666][ T9953] overlay: Unknown parameter 'appraise_type'
[  416.969452][ T9970] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  417.556008][ T9970] sp0: Synchronizing with TNC
[  418.940104][   T30] audit: type=1400 audit(1752142031.528:486): avc:  denied  { ioctl } for  pid=9988 comm="syz.3.1043" path="socket:[21515]" dev="sockfs" ino=21515 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  419.060399][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  419.230965][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  419.383992][   T30] audit: type=1400 audit(1752142031.988:487): avc:  denied  { map } for  pid=9999 comm="syz.2.1047" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  419.710537][   T30] audit: type=1400 audit(1752142032.298:488): avc:  denied  { bind } for  pid=9999 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  419.719687][   T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  419.774470][ T9999] delete_channel: no stack
[  419.815100][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  419.830035][   T30] audit: type=1400 audit(1752142032.358:489): avc:  denied  { write } for  pid=9999 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  419.849259][    C1] vkms_vblank_simulate: vblank timer overrun
[  419.871858][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  419.953692][T10009] overlay: Unknown parameter 'appraise_type'
[  419.974764][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  419.999478][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.019227][   T10] usb 5-1: Product: 繵Ỉ켹ⶀ틕ܣǪ钖㊴误ﳩ쁁藏靏鯮吽瀂勿㍲輥刿徾얫ᣬ珇힒ꀏ↖꧙끫⌲섻琇餇锈狅䋲奌컓酿饪ኇ捸뻍灡㔓뀘惺ݦ봗纰僟ଊ慀Щ䌻膿㿩뷄蟒첮砌ᒄ谱笀説䁙ፖ鍰鱅쌇ꞥ⽝뵵夁ᅧ緺ൃ콍娑躈匘⯊㿘絇
[  420.071262][   T10] usb 5-1: Manufacturer: 鴻fi旄貭窚䙰讣࿯
[  420.096676][   T10] usb 5-1: SerialNumber: 頙箨垻Ñ촙⃀⎰
[  420.191820][T10013] FAULT_INJECTION: forcing a failure.
[  420.191820][T10013] name failslab, interval 1, probability 0, space 0, times 0
[  420.204854][T10013] CPU: 0 UID: 0 PID: 10013 Comm: syz.3.1046 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  420.204876][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  420.204885][T10013] Call Trace:
[  420.204891][T10013]  <TASK>
[  420.204896][T10013]  dump_stack_lvl+0x16c/0x1f0
[  420.204926][T10013]  should_fail_ex+0x512/0x640
[  420.204949][T10013]  ? __kmalloc_noprof+0xbf/0x510
[  420.204972][T10013]  ? kobject_get_path+0xd2/0x2a0
[  420.204995][T10013]  should_failslab+0xc2/0x120
[  420.205023][T10013]  __kmalloc_noprof+0xd2/0x510
[  420.205050][T10013]  kobject_get_path+0xd2/0x2a0
[  420.205080][T10013]  kobject_uevent_env+0x289/0x1870
[  420.205097][T10013]  ? __pfx_dev_uevent_name+0x10/0x10
[  420.205120][T10013]  ? kobject_put+0xab/0x5a0
[  420.205149][T10013]  device_release_driver_internal+0x51c/0x620
[  420.205173][T10013]  ? __might_fault+0x90/0x190
[  420.205199][T10013]  usb_driver_release_interface+0x109/0x190
[  420.205231][T10013]  proc_ioctl+0x5c5/0x6c0
[  420.205258][T10013]  usbdev_ioctl+0x1773/0x4070
[  420.205287][T10013]  ? __pfx_usbdev_ioctl+0x10/0x10
[  420.205310][T10013]  ? do_vfs_ioctl+0x523/0x1a60
[  420.205330][T10013]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  420.205356][T10013]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  420.205381][T10013]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  420.205406][T10013]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  420.205439][T10013]  ? hook_file_ioctl_common+0x145/0x410
[  420.205462][T10013]  ? selinux_file_ioctl+0x180/0x270
[  420.205484][T10013]  ? selinux_file_ioctl+0xb4/0x270
[  420.205508][T10013]  ? __pfx_usbdev_ioctl+0x10/0x10
[  420.205535][T10013]  __x64_sys_ioctl+0x18b/0x210
[  420.205556][T10013]  do_syscall_64+0xcd/0x4c0
[  420.205582][T10013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.205599][T10013] RIP: 0033:0x7fdbd838e929
[  420.205614][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.205630][T10013] RSP: 002b:00007fdbd9257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  420.205647][T10013] RAX: ffffffffffffffda RBX: 00007fdbd85b6160 RCX: 00007fdbd838e929
[  420.205659][T10013] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000009
[  420.205669][T10013] RBP: 00007fdbd9257090 R08: 0000000000000000 R09: 0000000000000000
[  420.205679][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.205689][T10013] R13: 0000000000000000 R14: 00007fdbd85b6160 R15: 00007fffc3cf97c8
[  420.205714][T10013]  </TASK>
[  420.532582][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'.
[  420.711624][   T10] usb 5-1: 0:2 : does not exist
[  420.725364][   T10] usb 5-1: USB disconnect, device number 17
[  421.908148][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  423.573975][T10052] FAULT_INJECTION: forcing a failure.
[  423.573975][T10052] name failslab, interval 1, probability 0, space 0, times 0
[  423.586855][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.5.1060 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  423.586879][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  423.586889][T10052] Call Trace:
[  423.586895][T10052]  <TASK>
[  423.586901][T10052]  dump_stack_lvl+0x16c/0x1f0
[  423.586930][T10052]  should_fail_ex+0x512/0x640
[  423.586952][T10052]  ? __kmalloc_cache_node_noprof+0x5a/0x420
[  423.586978][T10052]  should_failslab+0xc2/0x120
[  423.587003][T10052]  __kmalloc_cache_node_noprof+0x6d/0x420
[  423.587025][T10052]  ? __get_vm_area_node+0x101/0x330
[  423.587047][T10052]  __get_vm_area_node+0x101/0x330
[  423.587069][T10052]  __vmalloc_node_range_noprof+0x271/0x14b0
[  423.587087][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.587105][T10052]  ? local_lock_release+0x99/0x140
[  423.587137][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.587155][T10052]  ? rcu_read_unlock+0x17/0x60
[  423.587183][T10052]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  423.587201][T10052]  ? __memcg_slab_post_alloc_hook+0x4a0/0x960
[  423.587235][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.587257][T10052]  __vmalloc_node_noprof+0xad/0xf0
[  423.587275][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.587295][T10052]  copy_process+0x2c70/0x7650
[  423.587330][T10052]  ? __pfx_copy_process+0x10/0x10
[  423.587358][T10052]  ? lockdep_init_map_type+0x5c/0x280
[  423.587377][T10052]  ? lockdep_init_map_type+0x5c/0x280
[  423.587394][T10052]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  423.587420][T10052]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  423.587440][T10052]  vhost_task_create+0x1d2/0x2e0
[  423.587457][T10052]  ? __pfx_vhost_task_create+0x10/0x10
[  423.587483][T10052]  ? __pfx_vhost_task_fn+0x10/0x10
[  423.587512][T10052]  kvm_mmu_post_init_vm+0x1b7/0x370
[  423.587538][T10052]  kvm_arch_vcpu_ioctl_run+0x66/0x18c0
[  423.587560][T10052]  ? kvm_vcpu_ioctl+0x14c6/0x1690
[  423.587588][T10052]  kvm_vcpu_ioctl+0x5eb/0x1690
[  423.587612][T10052]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  423.587641][T10052]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  423.587668][T10052]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  423.587701][T10052]  ? hook_file_ioctl_common+0x145/0x410
[  423.587725][T10052]  ? selinux_file_ioctl+0x180/0x270
[  423.587747][T10052]  ? selinux_file_ioctl+0xb4/0x270
[  423.587771][T10052]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  423.587794][T10052]  __x64_sys_ioctl+0x18b/0x210
[  423.587816][T10052]  do_syscall_64+0xcd/0x4c0
[  423.587843][T10052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.587860][T10052] RIP: 0033:0x7fb82ad8e929
[  423.587875][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.587891][T10052] RSP: 002b:00007fb82bc00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  423.587907][T10052] RAX: ffffffffffffffda RBX: 00007fb82afb6080 RCX: 00007fb82ad8e929
[  423.587918][T10052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  423.587928][T10052] RBP: 00007fb82bc00090 R08: 0000000000000000 R09: 0000000000000000
[  423.587937][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.587947][T10052] R13: 0000000000000000 R14: 00007fb82afb6080 R15: 00007fffd06ae098
[  423.587971][T10052]  </TASK>
[  423.587985][T10052] syz.5.1060: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  423.933173][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz.5.1060 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  423.933198][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  423.933209][T10052] Call Trace:
[  423.933217][T10052]  <TASK>
[  423.933225][T10052]  dump_stack_lvl+0x16c/0x1f0
[  423.933252][T10052]  warn_alloc+0x248/0x3a0
[  423.933277][T10052]  ? __pfx_warn_alloc+0x10/0x10
[  423.933299][T10052]  ? rcu_is_watching+0x12/0xc0
[  423.933322][T10052]  ? trace_kmalloc+0x2b/0xd0
[  423.933345][T10052]  ? __kmalloc_cache_node_noprof+0x272/0x420
[  423.933370][T10052]  ? __kasan_kmalloc+0x8a/0xb0
[  423.933393][T10052]  ? __get_vm_area_node+0x208/0x330
[  423.933416][T10052]  __vmalloc_node_range_noprof+0xb2d/0x14b0
[  423.933442][T10052]  ? local_lock_release+0x99/0x140
[  423.933474][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.933493][T10052]  ? rcu_read_unlock+0x17/0x60
[  423.933521][T10052]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  423.933539][T10052]  ? __memcg_slab_post_alloc_hook+0x4a0/0x960
[  423.933573][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.933590][T10052]  __vmalloc_node_noprof+0xad/0xf0
[  423.933608][T10052]  ? vhost_task_create+0x1d2/0x2e0
[  423.933628][T10052]  copy_process+0x2c70/0x7650
[  423.933664][T10052]  ? __pfx_copy_process+0x10/0x10
[  423.933691][T10052]  ? lockdep_init_map_type+0x5c/0x280
[  423.933711][T10052]  ? lockdep_init_map_type+0x5c/0x280
[  423.933728][T10052]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  423.933755][T10052]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  423.933774][T10052]  vhost_task_create+0x1d2/0x2e0
[  423.933792][T10052]  ? __pfx_vhost_task_create+0x10/0x10
[  423.933818][T10052]  ? __pfx_vhost_task_fn+0x10/0x10
[  423.933848][T10052]  kvm_mmu_post_init_vm+0x1b7/0x370
[  423.933874][T10052]  kvm_arch_vcpu_ioctl_run+0x66/0x18c0
[  423.933896][T10052]  ? kvm_vcpu_ioctl+0x14c6/0x1690
[  423.933923][T10052]  kvm_vcpu_ioctl+0x5eb/0x1690
[  423.933947][T10052]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  423.933976][T10052]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  423.934003][T10052]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  423.934035][T10052]  ? hook_file_ioctl_common+0x145/0x410
[  423.934060][T10052]  ? selinux_file_ioctl+0x180/0x270
[  423.934081][T10052]  ? selinux_file_ioctl+0xb4/0x270
[  423.934105][T10052]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  423.934128][T10052]  __x64_sys_ioctl+0x18b/0x210
[  423.934150][T10052]  do_syscall_64+0xcd/0x4c0
[  423.934176][T10052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.934200][T10052] RIP: 0033:0x7fb82ad8e929
[  423.934214][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.934229][T10052] RSP: 002b:00007fb82bc00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  423.934245][T10052] RAX: ffffffffffffffda RBX: 00007fb82afb6080 RCX: 00007fb82ad8e929
[  423.934256][T10052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  423.934266][T10052] RBP: 00007fb82bc00090 R08: 0000000000000000 R09: 0000000000000000
[  423.934276][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.934286][T10052] R13: 0000000000000000 R14: 00007fb82afb6080 R15: 00007fffd06ae098
[  423.934310][T10052]  </TASK>
[  423.934399][T10052] Mem-Info:
[  424.345322][T10052] active_anon:17719 inactive_anon:0 isolated_anon:0
[  424.345322][T10052]  active_file:2449 inactive_file:40703 isolated_file:0
[  424.345322][T10052]  unevictable:768 dirty:267 writeback:0
[  424.345322][T10052]  slab_reclaimable:11485 slab_unreclaimable:104350
[  424.345322][T10052]  mapped:31009 shmem:7111 pagetables:1335
[  424.345322][T10052]  sec_pagetables:0 bounce:0
[  424.345322][T10052]  kernel_misc_reclaimable:0
[  424.345322][T10052]  free:1297574 free_pcp:18758 free_cma:0
[  424.410398][T10052] Node 0 active_anon:59564kB inactive_anon:0kB active_file:9796kB inactive_file:162612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123936kB dirty:1036kB writeback:0kB shmem:15508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12528kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  424.469635][T10052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  424.535456][T10052] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  424.590057][T10052] lowmem_reserve[]: 0 2480 2481 2481 2481
[  424.622141][T10052] Node 0 DMA32 free:1299048kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56592kB inactive_anon:0kB active_file:9796kB inactive_file:161304kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2540080kB mlocked:0kB bounce:0kB free_pcp:51116kB local_pcp:24964kB free_cma:0kB
[  425.130734][T10052] lowmem_reserve[]: 0 0 1 1 1
[  425.182259][T10052] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB
[  425.500067][T10052] lowmem_reserve[]: 0 0 0 0 0
[  425.505637][T10052] Node 1 Normal free:3887956kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25708kB local_pcp:12364kB free_cma:0kB
[  425.537086][T10052] lowmem_reserve[]: 0 0 0 0 0
[  425.547123][T10052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  425.563896][T10052] Node 0 DMA32: 1146*4kB (UME) 635*8kB (UM) 230*16kB (UME) 265*32kB (UME) 160*64kB (UM) 81*128kB (UM) 44*256kB (UME) 17*512kB (UME) 5*1024kB (UME) 1*2048kB (M) 301*4096kB (UM) = 1302464kB
[  425.582518][T10052] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  425.599998][T10052] Node 1 Normal: 217*4kB (UE) 56*8kB (UME) 45*16kB (UME) 39*32kB (UME) 22*64kB (UME) 8*128kB (UME) 5*256kB (UME) 6*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3887956kB
[  425.619482][T10052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.629128][T10052] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[  425.639867][T10052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  425.678363][T10052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  425.792260][T10052] 49522 total pagecache pages
[  425.834232][T10052] 0 pages in swap cache
[  425.895418][T10052] Free swap  = 124996kB
[  425.947561][T10052] Total swap = 124996kB
[  426.437211][T10052] 2097051 pages RAM
[  426.499807][T10052] 0 pages HighMem/MovableOnly
[  426.667586][T10052] 430053 pages reserved
[  426.876854][T10052] 0 pages cma reserved
[  427.114810][T10073] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1065'.
[  427.264332][T10074] SET target dimension over the limit!
[  427.805293][ T5838] Bluetooth: hci0: unexpected event for opcode 0x200a
[  427.904892][T10076] 9pnet_fd: Insufficient options for proto=fd
[  429.250410][ T5973] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  429.544963][ T5973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2046, setting to 1024
[  429.570557][ T5973] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  429.668373][ T5973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  429.690015][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.715019][ T5973] usb 4-1: Product: syz
[  429.759842][ T5973] usb 4-1: Manufacturer: syz
[  429.779447][ T5973] usb 4-1: SerialNumber: syz
[  430.148579][T10078] Invalid source name
[  430.510033][T10107] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1075'.
[  430.859310][T10107] Cannot find del_set index 0 as target
[  431.555185][ T5973] cdc_ncm 4-1:1.0: bind() failure
[  431.594466][ T5973] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  431.628821][ T5973] cdc_ncm 4-1:1.1: bind() failure
[  431.669751][ T5973] usb 4-1: USB disconnect, device number 23
[  431.790250][T10028] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  431.808566][   T30] audit: type=1400 audit(1752142044.408:490): avc:  denied  { unmount } for  pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  431.991406][T10028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.006454][T10028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.103566][T10028] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  432.113149][T10028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.123924][T10028] usb 6-1: config 0 descriptor??
[  432.274934][T10124] Invalid source name
[  432.825570][T10028] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0
[  433.332911][T10141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  433.844407][   T30] audit: type=1400 audit(1752142046.448:491): avc:  denied  { ioctl } for  pid=10109 comm="syz.5.1076" path="socket:[21212]" dev="sockfs" ino=21212 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  434.049092][T10028] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device
[  434.057466][T10153] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  434.076568][T10028] pyra 0003:1E7D:2CF6.0005: couldn't install mouse
[  434.135206][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  434.146154][T10153] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.164329][T10028] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71
[  434.224858][T10156] bond1: (slave gretap1): making interface the new active one
[  434.235366][T10156] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  434.239987][T10028] usb 6-1: USB disconnect, device number 5
[  434.344549][ T5913] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e
[  434.359956][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.366091][T10159] netlink: 'syz.4.1089': attribute type 72 has an invalid length.
[  434.376221][ T5913] usb 4-1: Product: syz
[  434.376240][ T5913] usb 4-1: Manufacturer: syz
[  434.376253][ T5913] usb 4-1: SerialNumber: syz
[  434.391443][ T5913] usb 4-1: config 0 descriptor??
[  434.393399][ T5913] f81232 4-1:0.0: f81232 converter detected
[  434.399276][ T5913] usb 4-1: f81232 converter now attached to ttyUSB0
[  434.650185][   T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  434.880503][T10167] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  434.891994][T10167] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  435.244699][   T30] audit: type=1400 audit(1752142047.708:492): avc:  denied  { append } for  pid=10146 comm="syz.3.1086" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  435.354479][   T43] usb 3-1: Using ep0 maxpacket: 8
[  435.387701][   T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  435.416755][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.434327][   T43] usb 3-1: Product: syz
[  435.460553][   T43] usb 3-1: Manufacturer: syz
[  435.477051][   T43] usb 3-1: SerialNumber: syz
[  435.512799][   T30] audit: type=1400 audit(1752142048.098:493): avc:  denied  { write } for  pid=10171 comm="syz.4.1093" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  435.601667][   T43] usb 3-1: config 0 descriptor??
[  435.605778][T10174] xt_hashlimit: size too large, truncated to 1048576
[  435.766928][   T43] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  435.767508][   T30] audit: type=1400 audit(1752142048.198:494): avc:  denied  { read } for  pid=10171 comm="syz.4.1093" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  435.899361][   T30] audit: type=1400 audit(1752142048.198:495): avc:  denied  { open } for  pid=10171 comm="syz.4.1093" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  435.966916][   T30] audit: type=1400 audit(1752142048.208:496): avc:  denied  { ioctl } for  pid=10171 comm="syz.4.1093" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  436.036023][T10172] netlink: 'syz.4.1093': attribute type 33 has an invalid length.
[  436.044095][T10172] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1093'.
[  436.716071][   T43] gspca_sonixj: reg_w1 err -71
[  436.800249][   T43] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  436.881304][ T5913] usb 4-1: USB disconnect, device number 24
[  436.986398][ T5913] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0
[  437.004745][   T43] usb 3-1: USB disconnect, device number 20
[  437.018562][ T5913] f81232 4-1:0.0: device disconnected
[  437.040789][   T30] audit: type=1400 audit(1752142049.638:497): avc:  denied  { unmount } for  pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  437.176757][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1098'.
[  437.438833][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'.
[  437.830125][   T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  437.914201][T10204] overlay: Unknown parameter 'appraise_type'
[  438.009498][   T43] usb 3-1: Using ep0 maxpacket: 16
[  438.016170][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  438.028142][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  438.041474][   T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  438.050755][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.058813][   T43] usb 3-1: Product: syz
[  438.066875][   T43] usb 3-1: Manufacturer: syz
[  438.073660][   T43] usb 3-1: SerialNumber: syz
[  438.111935][   T43] usb 3-1: config 0 descriptor??
[  438.121451][   T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  438.192059][   T43] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  438.880909][   T43] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  438.891114][   T43] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  439.555869][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'.
[  439.573780][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  439.580309][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  439.780860][   T43] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  439.802786][   T43] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  439.816508][   T43] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  439.910071][ T9268] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  440.062561][T10231] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  440.078760][ T9268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.154912][ T9268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.202563][T10231] sp0: Synchronizing with TNC
[  440.241163][ T9268] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  440.350767][   T43] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  440.381223][ T9268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.446636][   T43] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  440.547264][ T9268] usb 5-1: config 0 descriptor??
[  440.578409][   T43] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  440.825104][   T43] usb 3-1: USB disconnect, device number 21
[  441.566795][ T9268] usbhid 5-1:0.0: can't add hid device: -71
[  441.676105][ T9268] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  441.755257][ T9268] usb 5-1: USB disconnect, device number 18
[  441.921362][   T30] audit: type=1400 audit(1752142054.528:498): avc:  denied  { view } for  pid=10239 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  443.277776][T10262] Invalid source name
[  443.460115][T10028] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  443.695180][T10028] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.717555][T10028] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  443.760410][T10028] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  443.787008][T10028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.810626][T10028] usb 4-1: config 0 descriptor??
[  444.911950][T10028] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  444.912268][T10028] dvb-usb: bulk message failed: -22 (3/0)
[  444.922545][T10028] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  444.924785][T10028] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  444.924839][T10028] usb 4-1: media controller created
[  444.927108][T10028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  444.961514][T10028] dvb-usb: bulk message failed: -22 (6/0)
[  444.961630][T10028] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  444.971786][T10028] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10
[  444.976333][T10028] dvb-usb: schedule remote query interval to 150 msecs.
[  444.977836][T10028] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  444.980462][T10276] overlay: Unknown parameter 'appraise_type'
[  445.002804][T10278] FAULT_INJECTION: forcing a failure.
[  445.002804][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  445.136956][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.5.1122 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  445.136981][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  445.136992][T10278] Call Trace:
[  445.136998][T10278]  <TASK>
[  445.137004][T10278]  dump_stack_lvl+0x16c/0x1f0
[  445.137028][T10278]  should_fail_ex+0x512/0x640
[  445.137052][T10278]  _copy_from_user+0x2e/0xd0
[  445.137075][T10278]  memdup_user+0x6b/0xe0
[  445.137098][T10278]  strndup_user+0x78/0xe0
[  445.137120][T10278]  __x64_sys_mount+0x137/0x310
[  445.137146][T10278]  ? __pfx___x64_sys_mount+0x10/0x10
[  445.137175][T10278]  do_syscall_64+0xcd/0x4c0
[  445.137200][T10278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.137217][T10278] RIP: 0033:0x7fb82ad8e929
[  445.137231][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.137247][T10278] RSP: 002b:00007fb82bc21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  445.137263][T10278] RAX: ffffffffffffffda RBX: 00007fb82afb5fa0 RCX: 00007fb82ad8e929
[  445.137274][T10278] RDX: 0000200000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  445.137285][T10278] RBP: 00007fb82bc21090 R08: 0000200000000380 R09: 0000000000000000
[  445.137295][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.137305][T10278] R13: 0000000000000000 R14: 00007fb82afb5fa0 R15: 00007fffd06ae098
[  445.137327][T10278]  </TASK>
[  445.330851][T10028] dvb-usb: bulk message failed: -22 (1/0)
[  445.336783][T10028] dvb-usb: error while querying for an remote control event.
[  445.539975][ T5913] dvb-usb: bulk message failed: -22 (1/0)
[  446.102104][T10295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1127'.
[  446.129553][T10295] SET target dimension over the limit!
[  446.376830][ T5913] dvb-usb: error while querying for an remote control event.
[  446.641619][ T5913] usb 4-1: USB disconnect, device number 25
[  446.710721][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'.
[  446.787921][ T5913] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  446.860105][T10028] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  447.019962][  T974] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  447.098895][T10306] Invalid source name
[  447.499040][T10028] usb 3-1: Using ep0 maxpacket: 16
[  447.510712][T10028] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  447.520590][T10028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.528597][T10028] usb 3-1: Product: syz
[  447.533562][T10028] usb 3-1: Manufacturer: syz
[  447.538175][T10028] usb 3-1: SerialNumber: syz
[  447.564618][T10028] usb 3-1: config 0 descriptor??
[  447.576254][T10028] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  447.591166][   T30] audit: type=1400 audit(1752142060.198:499): avc:  denied  { append } for  pid=10308 comm="syz.3.1134" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  447.786819][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.823087][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.862535][  T974] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  447.881437][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.056433][  T974] usb 5-1: config 0 descriptor??
[  448.168802][   T30] audit: type=1400 audit(1752142060.768:500): avc:  denied  { bind } for  pid=10296 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  448.201136][T10314] mmap: syz.2.1132 (10314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  448.224073][   T30] audit: type=1400 audit(1752142060.808:501): avc:  denied  { read } for  pid=10296 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  448.295149][T10316] FAULT_INJECTION: forcing a failure.
[  448.295149][T10316] name failslab, interval 1, probability 0, space 0, times 0
[  448.331157][T10028] gspca_sn9c2028: read1 error -110
[  448.336670][T10028] gspca_sn9c2028: read1 error -32
[  448.344030][T10028] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32
[  448.357953][  T974] usbhid 5-1:0.0: can't add hid device: -71
[  448.358622][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.3.1136 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  448.358643][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  448.358651][T10316] Call Trace:
[  448.358657][T10316]  <TASK>
[  448.358662][T10316]  dump_stack_lvl+0x16c/0x1f0
[  448.358687][T10316]  should_fail_ex+0x512/0x640
[  448.358706][T10316]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  448.358728][T10316]  should_failslab+0xc2/0x120
[  448.358749][T10316]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  448.358767][T10316]  ? __pfx___might_resched+0x10/0x10
[  448.358787][T10316]  ? __anon_vma_prepare+0x344/0x5e0
[  448.358808][T10316]  __anon_vma_prepare+0x344/0x5e0
[  448.358829][T10316]  uffd_lock_vma+0x360/0x3f0
[  448.358852][T10316]  mfill_atomic_copy+0x1c3/0x1cd0
[  448.358887][T10316]  ? find_held_lock+0x2b/0x80
[  448.358904][T10316]  ? __might_fault+0xe3/0x190
[  448.358923][T10316]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  448.358953][T10316]  userfaultfd_ioctl+0x236c/0x38e0
[  448.358975][T10316]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  448.358989][T10316]  ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540
[  448.359011][T10316]  ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540
[  448.359040][T10316]  ? hook_file_ioctl_common+0x145/0x410
[  448.359061][T10316]  ? selinux_file_ioctl+0x180/0x270
[  448.359079][T10316]  ? selinux_file_ioctl+0xb4/0x270
[  448.359097][T10316]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  448.359116][T10316]  ? __x64_sys_ioctl+0x18b/0x210
[  448.359131][T10316]  __x64_sys_ioctl+0x18b/0x210
[  448.359148][T10316]  do_syscall_64+0xcd/0x4c0
[  448.359170][T10316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.359184][T10316] RIP: 0033:0x7fdbd838e929
[  448.359196][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.359210][T10316] RSP: 002b:00007fdbd9299038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  448.359224][T10316] RAX: ffffffffffffffda RBX: 00007fdbd85b5fa0 RCX: 00007fdbd838e929
[  448.359234][T10316] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003
[  448.359242][T10316] RBP: 00007fdbd9299090 R08: 0000000000000000 R09: 0000000000000000
[  448.359251][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.359259][T10316] R13: 0000000000000000 R14: 00007fdbd85b5fa0 R15: 00007fffc3cf97c8
[  448.359280][T10316]  </TASK>
[  448.697878][T10319] overlay: Unknown parameter 'appraise_type'
[  448.769691][  T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  448.802928][  T974] usb 5-1: USB disconnect, device number 19
[  448.806581][T10324] FAULT_INJECTION: forcing a failure.
[  448.806581][T10324] name failslab, interval 1, probability 0, space 0, times 0
[  448.864111][T10324] CPU: 1 UID: 0 PID: 10324 Comm: syz.3.1139 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  448.864145][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  448.864155][T10324] Call Trace:
[  448.864161][T10324]  <TASK>
[  448.864168][T10324]  dump_stack_lvl+0x16c/0x1f0
[  448.864197][T10324]  should_fail_ex+0x512/0x640
[  448.864218][T10324]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  448.864243][T10324]  should_failslab+0xc2/0x120
[  448.864267][T10324]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  448.864289][T10324]  ? __alloc_skb+0x2b2/0x380
[  448.864315][T10324]  __alloc_skb+0x2b2/0x380
[  448.864335][T10324]  ? __pfx___alloc_skb+0x10/0x10
[  448.864360][T10324]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  448.864399][T10324]  netlink_alloc_large_skb+0x69/0x130
[  448.864422][T10324]  netlink_sendmsg+0x6a1/0xdd0
[  448.864444][T10324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.864470][T10324]  ____sys_sendmsg+0xa95/0xc70
[  448.864488][T10324]  ? copy_msghdr_from_user+0x10a/0x160
[  448.864510][T10324]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.864538][T10324]  ___sys_sendmsg+0x134/0x1d0
[  448.864568][T10324]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.864601][T10324]  ? __lock_acquire+0x622/0x1c90
[  448.864649][T10324]  __sys_sendmsg+0x16d/0x220
[  448.864673][T10324]  ? __pfx___sys_sendmsg+0x10/0x10
[  448.864711][T10324]  do_syscall_64+0xcd/0x4c0
[  448.864738][T10324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.864755][T10324] RIP: 0033:0x7fdbd838e929
[  448.864773][T10324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.864790][T10324] RSP: 002b:00007fdbd9299038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.864811][T10324] RAX: ffffffffffffffda RBX: 00007fdbd85b5fa0 RCX: 00007fdbd838e929
[  448.864823][T10324] RDX: 00000000000400c0 RSI: 0000200000000200 RDI: 0000000000000003
[  448.864833][T10324] RBP: 00007fdbd9299090 R08: 0000000000000000 R09: 0000000000000000
[  448.864842][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.864852][T10324] R13: 0000000000000000 R14: 00007fdbd85b5fa0 R15: 00007fffc3cf97c8
[  448.864874][T10324]  </TASK>
[  449.283896][T10328] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.299079][T10328] sp0: Synchronizing with TNC
[  450.896224][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1142'.
[  450.932799][T10336] SET target dimension over the limit!
[  451.908627][T10344] netlink: 'syz.5.1146': attribute type 4 has an invalid length.
[  451.934543][T10344] netlink: 'syz.5.1146': attribute type 2 has an invalid length.
[  452.133945][   T10] usb 3-1: USB disconnect, device number 22
[  452.160601][   T30] audit: type=1400 audit(1752142064.748:502): avc:  denied  { listen } for  pid=10341 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  452.220137][ T9268] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  452.503273][ T9268] usb 5-1: Using ep0 maxpacket: 8
[  452.507647][T10355] overlay: Unknown parameter 'euid<18446744073709551615'
[  452.526908][ T9268] usb 5-1: config 129 has 0 interfaces, different from the descriptor's value: 1
[  452.559676][ T9268] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=7a.86
[  452.571588][ T9268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.008012][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.020501][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.000166][   T30] audit: type=1400 audit(1752142066.158:503): avc:  denied  { write } for  pid=10342 comm="syz.4.1145" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  454.166727][ T9268] usb 5-1: USB disconnect, device number 20
[  454.633155][T10373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.012997][T10376] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1155'.
[  455.045401][T10376] Cannot find del_set index 0 as target
[  457.177210][T10377] [U] 
[  457.317227][T10397] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1162'.
[  457.361884][T10398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  457.482036][T10398] sp0: Synchronizing with TNC
[  457.876871][T10404] overlay: Unknown parameter 'euid<18446744073709551615'
[  457.896403][T10397] SET target dimension over the limit!
[  460.507120][T10419] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  462.529119][   T30] audit: type=1400 audit(1752142075.118:504): avc:  denied  { getopt } for  pid=10447 comm="syz.4.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  462.973628][T10028] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  464.347873][T10028] usb 3-1: device descriptor read/64, error -71
[  464.700653][T10028] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  465.164223][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1182'.
[  465.223610][T10486] lo speed is unknown, defaulting to 1000
[  465.230664][T10486] lo speed is unknown, defaulting to 1000
[  465.237876][T10486] lo speed is unknown, defaulting to 1000
[  465.479795][T10486] infiniband syz0: set down
[  465.484420][T10486] infiniband syz0: added lo
[  465.520094][T10486] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  465.523532][T10486] infiniband syz0: Couldn't open port 1
[  465.542475][   T43] lo speed is unknown, defaulting to 1000
[  465.560725][T10486] RDS/IB: syz0: added
[  465.564785][T10486] smc: adding ib device syz0 with port count 1
[  465.570991][T10486] smc:    ib device syz0 port 1 has pnetid 
[  465.577462][T10486] lo speed is unknown, defaulting to 1000
[  465.592605][   T43] lo speed is unknown, defaulting to 1000
[  465.700002][T10486] lo speed is unknown, defaulting to 1000
[  465.786912][T10486] lo speed is unknown, defaulting to 1000
[  465.872708][T10486] lo speed is unknown, defaulting to 1000
[  465.958767][T10486] lo speed is unknown, defaulting to 1000
[  467.351180][T10511] Invalid source name
[  467.601624][T10514] Invalid source name
[  469.127516][T10544] netlink: 'syz.5.1194': attribute type 1 has an invalid length.
[  469.466142][  T974] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  469.642421][  T974] usb 5-1: config 0 has an invalid interface number: 161 but max is 0
[  469.650875][  T974] usb 5-1: config 0 has no interface number 0
[  469.658983][  T974] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31
[  469.668676][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.676927][  T974] usb 5-1: Product: syz
[  469.681504][  T974] usb 5-1: Manufacturer: syz
[  469.686149][  T974] usb 5-1: SerialNumber: syz
[  469.694658][  T974] usb 5-1: config 0 descriptor??
[  470.275458][  T974] pl2303 5-1:0.161: required endpoints missing
[  470.293774][  T974] usb 5-1: USB disconnect, device number 21
[  470.454493][T10556] [U] 
[  470.492152][T10561] overlay: Unknown parameter 'appraise_type'
[  472.001412][   T30] audit: type=1400 audit(1752142084.608:505): avc:  denied  { unmount } for  pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  472.379135][T10584] Invalid source name
[  473.100345][T10571] [U] 
[  473.280054][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  474.509297][T10028] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  474.869048][T10607] 9pnet_fd: Insufficient options for proto=fd
[  474.929908][T10028] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.196001][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  475.219967][T10028] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  475.234464][T10028] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  475.278865][T10028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.289478][T10028] usb 6-1: config 0 descriptor??
[  475.299639][T10028] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  475.307221][T10028] dvb-usb: bulk message failed: -22 (3/0)
[  475.350830][T10028] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  475.379045][T10028] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  475.387641][   T10] usb 4-1: Using ep0 maxpacket: 8
[  475.397638][T10028] usb 6-1: media controller created
[  475.409534][T10028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  475.552537][T10600] lo speed is unknown, defaulting to 1000
[  475.597798][T10028] dvb-usb: bulk message failed: -22 (6/0)
[  475.646410][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  476.027122][T10028] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  476.034495][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.046627][   T10] usb 4-1: Product: syz
[  476.054002][T10028] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11
[  476.069276][   T10] usb 4-1: Manufacturer: syz
[  476.078193][   T10] usb 4-1: SerialNumber: syz
[  476.193048][   T10] usb 4-1: config 0 descriptor??
[  476.200849][T10028] dvb-usb: schedule remote query interval to 150 msecs.
[  476.211856][T10028] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  476.221876][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  476.370956][T10028] dvb-usb: bulk message failed: -22 (1/0)
[  476.443581][T10028] dvb-usb: error while querying for an remote control event.
[  476.554619][   T24] usb 6-1: USB disconnect, device number 6
[  476.585024][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  476.880819][T10626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  477.494480][T10633] Invalid source name
[  477.513156][   T10] gspca_sonixj: reg_w1 err -71
[  477.620369][   T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  478.187489][   T10] usb 4-1: USB disconnect, device number 26
[  478.343084][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'.
[  478.376693][T10642] bridge: RTM_NEWNEIGH with invalid ether address
[  478.853134][T10652] lo: entered allmulticast mode
[  478.860832][T10652] tunl0: entered allmulticast mode
[  478.867897][T10652] gre0: entered allmulticast mode
[  478.874890][T10652] gretap0: entered allmulticast mode
[  478.883233][T10652] erspan0: entered allmulticast mode
[  478.890393][T10652] ip_vti0: entered allmulticast mode
[  478.897750][T10652] ip6_vti0: entered allmulticast mode
[  478.905113][T10652] sit0: entered allmulticast mode
[  478.911807][T10652] ip6tnl0: entered allmulticast mode
[  478.920536][T10652] ip6gre0: entered allmulticast mode
[  478.927406][T10652] syz_tun: entered allmulticast mode
[  478.934535][T10652] ip6gretap0: entered allmulticast mode
[  478.942093][T10652] bridge0: entered allmulticast mode
[  478.949096][T10652] vcan0: entered allmulticast mode
[  478.955306][T10652] bond0: entered allmulticast mode
[  478.960644][T10652] bond_slave_0: entered allmulticast mode
[  478.966414][T10652] bond_slave_1: entered allmulticast mode
[  478.975183][T10652] team0: entered allmulticast mode
[  478.980358][T10652] team_slave_0: entered allmulticast mode
[  478.986158][T10652] team_slave_1: entered allmulticast mode
[  478.991935][T10652] batadv1: entered allmulticast mode
[  478.997294][T10652] batadv2: entered allmulticast mode
[  479.003063][T10652] batadv3: entered allmulticast mode
[  479.008379][T10652] batadv4: entered allmulticast mode
[  479.013794][T10652] batadv5: entered allmulticast mode
[  479.022130][T10652] dummy0: entered allmulticast mode
[  479.029207][T10652] nlmon0: entered allmulticast mode
[  479.080156][   T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  479.104887][T10652] caif0: entered allmulticast mode
[  479.110099][T10652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  479.251958][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.342788][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  479.397137][   T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  479.461164][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.553756][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1228'.
[  479.611319][   T10] usb 4-1: config 0 descriptor??
[  479.669134][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  479.690154][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  479.802887][T10657] SET target dimension over the limit!
[  479.864370][  T974] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  480.488709][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  480.551633][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.612512][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  480.619608][   T10] usb 4-1: media controller created
[  480.635041][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.673588][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  480.697780][  T974] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  480.725719][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.756026][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  481.045772][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  481.060669][  T974] usb 6-1: config 0 descriptor??
[  481.076576][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  481.127216][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  481.135424][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  481.183178][T10653] lo speed is unknown, defaulting to 1000
[  481.291033][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  481.298290][   T10] dvb-usb: error while querying for an remote control event.
[  481.306779][  T974] usbhid 6-1:0.0: can't add hid device: -71
[  481.315892][  T974] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  481.390797][  T974] usb 6-1: USB disconnect, device number 7
[  481.541753][T10028] dvb-usb: bulk message failed: -22 (1/0)
[  481.550029][ T6003] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  481.642214][T10671] Invalid source name
[  482.009945][T10028] dvb-usb: error while querying for an remote control event.
[  482.040225][   T24] usb 4-1: USB disconnect, device number 27
[  482.137964][   T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  482.150231][ T6003] usb 5-1: Using ep0 maxpacket: 32
[  482.166564][ T6003] usb 5-1: config 32 has an invalid interface number: 40 but max is 0
[  482.197728][ T6003] usb 5-1: config 32 has no interface number 0
[  482.218089][ T6003] usb 5-1: config 32 interface 40 has no altsetting 0
[  482.290247][ T6003] usb 5-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f
[  482.321372][T10675] netlink: 'syz.2.1235': attribute type 4 has an invalid length.
[  482.329292][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.359375][ T6003] usb 5-1: Product: syz
[  482.363985][T10675] netlink: 'syz.2.1235': attribute type 2 has an invalid length.
[  482.374372][ T6003] usb 5-1: Manufacturer: syz
[  482.379012][ T6003] usb 5-1: SerialNumber: syz
[  482.407244][ T6003] belkin_sa 5-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  483.128157][ T6003] usb 5-1: bcdDevice: 603f, bfc: 0
[  483.372386][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.496417][   T30] audit: type=1400 audit(1752142096.078:506): avc:  denied  { read } for  pid=10676 comm="syz.5.1236" lport=39018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  483.568448][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.577584][ T6003] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  483.592567][T10684] syz.5.1236 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  483.937909][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'.
[  485.304863][T10028] usb 5-1: USB disconnect, device number 22
[  485.325178][T10028] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  485.338992][   T30] audit: type=1400 audit(1752142097.918:507): avc:  denied  { append } for  pid=10695 comm="syz.2.1239" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  485.372794][T10028] belkin_sa 5-1:32.40: device disconnected
[  485.759207][T10704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  486.504671][   T30] audit: type=1400 audit(1752142099.108:508): avc:  denied  { read } for  pid=10713 comm="syz.4.1246" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  486.586218][T10718] vlan1: entered promiscuous mode
[  486.592159][T10718] vlan1: entered allmulticast mode
[  486.597302][T10718] veth0_vlan: entered allmulticast mode
[  487.439376][T10719] [U] 
[  488.270004][   T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  488.459972][   T24] usb 4-1: Using ep0 maxpacket: 32
[  488.519738][   T24] usb 4-1: config 32 has an invalid interface number: 40 but max is 0
[  488.613940][   T24] usb 4-1: config 32 has no interface number 0
[  488.633886][   T24] usb 4-1: config 32 interface 40 has no altsetting 0
[  488.661177][   T24] usb 4-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f
[  488.701318][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.733565][   T24] usb 4-1: Product: syz
[  488.737756][   T24] usb 4-1: Manufacturer: syz
[  488.780146][   T24] usb 4-1: SerialNumber: syz
[  488.811758][   T24] belkin_sa 4-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  488.880352][   T24] usb 4-1: bcdDevice: 603f, bfc: 0
[  489.195804][   T24] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  489.210774][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.219295][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.464011][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'.
[  490.297896][T10751] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  490.395145][T10751] sp0: Synchronizing with TNC
[  490.884317][T10759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10759 comm=syz.2.1258
[  491.245803][T10761] FAULT_INJECTION: forcing a failure.
[  491.245803][T10761] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  491.258954][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.5.1259 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  491.258970][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  491.258976][T10761] Call Trace:
[  491.258980][T10761]  <TASK>
[  491.258985][T10761]  dump_stack_lvl+0x16c/0x1f0
[  491.259005][T10761]  should_fail_ex+0x512/0x640
[  491.259022][T10761]  _copy_from_user+0x2e/0xd0
[  491.259038][T10761]  sg_write+0x2cc/0xe10
[  491.259051][T10761]  ? __pfx_sg_write+0x10/0x10
[  491.259061][T10761]  ? __pfx__kstrtoull+0x10/0x10
[  491.259084][T10761]  ? bpf_lsm_file_permission+0x9/0x10
[  491.259101][T10761]  ? security_file_permission+0x71/0x210
[  491.259116][T10761]  ? iov_iter_advance+0x1e3/0x6c0
[  491.259132][T10761]  ? rw_verify_area+0xcf/0x680
[  491.259145][T10761]  ? __pfx_sg_write+0x10/0x10
[  491.259154][T10761]  vfs_writev+0x5dc/0xde0
[  491.259169][T10761]  ? __pfx_vfs_writev+0x10/0x10
[  491.259192][T10761]  ? __fget_files+0x20e/0x3c0
[  491.259205][T10761]  ? __fget_files+0x170/0x3c0
[  491.259222][T10761]  ? do_writev+0x132/0x340
[  491.259232][T10761]  do_writev+0x132/0x340
[  491.259244][T10761]  ? __pfx_do_writev+0x10/0x10
[  491.259256][T10761]  ? fput+0x70/0xf0
[  491.259267][T10761]  do_syscall_64+0xcd/0x4c0
[  491.259282][T10761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.259293][T10761] RIP: 0033:0x7fb82ad8e929
[  491.259302][T10761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  491.259312][T10761] RSP: 002b:00007fb82bc21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  491.259322][T10761] RAX: ffffffffffffffda RBX: 00007fb82afb5fa0 RCX: 00007fb82ad8e929
[  491.259329][T10761] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000005
[  491.259335][T10761] RBP: 00007fb82bc21090 R08: 0000000000000000 R09: 0000000000000000
[  491.259340][T10761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  491.259351][T10761] R13: 0000000000000000 R14: 00007fb82afb5fa0 R15: 00007fffd06ae098
[  491.259364][T10761]  </TASK>
[  491.461767][    C1] vkms_vblank_simulate: vblank timer overrun
[  491.531976][  T974] usb 4-1: USB disconnect, device number 28
[  491.567160][  T974] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  491.648285][  T974] belkin_sa 4-1:32.40: device disconnected
[  492.597714][   T30] audit: type=1400 audit(1752142105.198:509): avc:  denied  { read write } for  pid=10782 comm="syz.5.1266" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  492.719973][   T30] audit: type=1400 audit(1752142105.198:510): avc:  denied  { open } for  pid=10782 comm="syz.5.1266" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  492.769229][   T30] audit: type=1400 audit(1752142105.238:511): avc:  denied  { ioctl } for  pid=10782 comm="syz.5.1266" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  494.377671][T10812] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  494.389341][T10812] sp0: Synchronizing with TNC
[  495.679163][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'.
[  497.278980][   T30] audit: type=1400 audit(1752142109.878:512): avc:  denied  { setopt } for  pid=10839 comm="syz.5.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  498.175424][T10859] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.709593][T10869] FAULT_INJECTION: forcing a failure.
[  499.709593][T10869] name failslab, interval 1, probability 0, space 0, times 0
[  499.722254][T10869] CPU: 1 UID: 0 PID: 10869 Comm: syz.5.1291 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  499.722270][T10869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  499.722276][T10869] Call Trace:
[  499.722280][T10869]  <TASK>
[  499.722285][T10869]  dump_stack_lvl+0x16c/0x1f0
[  499.722304][T10869]  should_fail_ex+0x512/0x640
[  499.722321][T10869]  should_failslab+0xc2/0x120
[  499.722338][T10869]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  499.722359][T10869]  ? skb_clone+0x190/0x3f0
[  499.722384][T10869]  skb_clone+0x190/0x3f0
[  499.722404][T10869]  netlink_deliver_tap+0xabd/0xd30
[  499.722432][T10869]  netlink_unicast+0x5df/0x7f0
[  499.722450][T10869]  ? __pfx_netlink_unicast+0x10/0x10
[  499.722474][T10869]  netlink_sendmsg+0x8d1/0xdd0
[  499.722503][T10869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  499.722530][T10869]  ____sys_sendmsg+0xa95/0xc70
[  499.722548][T10869]  ? copy_msghdr_from_user+0x10a/0x160
[  499.722570][T10869]  ? __pfx_____sys_sendmsg+0x10/0x10
[  499.722599][T10869]  ___sys_sendmsg+0x134/0x1d0
[  499.722623][T10869]  ? __pfx____sys_sendmsg+0x10/0x10
[  499.722643][T10869]  ? __lock_acquire+0x622/0x1c90
[  499.722692][T10869]  __sys_sendmsg+0x16d/0x220
[  499.722716][T10869]  ? __pfx___sys_sendmsg+0x10/0x10
[  499.722755][T10869]  do_syscall_64+0xcd/0x4c0
[  499.722781][T10869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.722798][T10869] RIP: 0033:0x7fb82ad8e929
[  499.722812][T10869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.722829][T10869] RSP: 002b:00007fb82bc00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.722846][T10869] RAX: ffffffffffffffda RBX: 00007fb82afb6080 RCX: 00007fb82ad8e929
[  499.722858][T10869] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[  499.722868][T10869] RBP: 00007fb82bc00090 R08: 0000000000000000 R09: 0000000000000000
[  499.722878][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.722887][T10869] R13: 0000000000000000 R14: 00007fb82afb6080 R15: 00007fffd06ae098
[  499.722910][T10869]  </TASK>
[  500.989675][   T30] audit: type=1400 audit(1752142113.588:513): avc:  granted  { setsecparam } for  pid=10881 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  501.033591][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.042059][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  501.537229][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  502.160791][T10906] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[  502.327829][T10912] syz.4.1302: attempt to access beyond end of device
[  502.327829][T10912] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  502.368716][T10914] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4)
[  502.440637][T10912] SQUASHFS error: Failed to read block 0x0: -5
[  502.443102][T10914] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  502.453647][T10912] unable to read squashfs_super_block
[  502.459091][T10914] comedi comedi3: 8255: I/O port conflict (0x100000,4)
[  502.486812][T10914] comedi comedi3: 8255: I/O port conflict (0x8f,4)
[  502.502797][T10914] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  502.537914][T10914] comedi comedi3: 8255: I/O port conflict (0x100010,4)
[  502.551028][   T30] audit: type=1400 audit(1752142115.138:514): avc:  denied  { setopt } for  pid=10913 comm="syz.3.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  502.638155][T10914] comedi comedi3: 8255: I/O port conflict (0x1000002,4)
[  502.660457][T10914] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffbf,4)
[  502.672950][   T30] audit: type=1400 audit(1752142115.188:515): avc:  denied  { read write } for  pid=10911 comm="syz.4.1302" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  502.728582][T10914] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  502.739669][T10914] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  502.805255][T10914] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  502.807624][   T30] audit: type=1400 audit(1752142115.188:516): avc:  denied  { open } for  pid=10911 comm="syz.4.1302" path="/251/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  502.869377][T10914] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  503.305375][T10914] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  503.340376][T10914] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  503.348630][T10914] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  503.439998][T10914] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  503.468228][T10914] comedi comedi3: 8255: I/O port conflict (0x100,4)
[  503.488694][T10914] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  503.504556][T10914] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  503.514706][T10914] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  503.527435][T10914] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  503.547636][T10914] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  503.557273][T10914] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  503.577409][T10914] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  503.656862][T10926] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1305'.
[  503.714570][T10930] syz.0.1308: attempt to access beyond end of device
[  503.714570][T10930] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[  503.728370][T10930] XFS (nbd0): SB validate failed with error -5.
[  503.809763][T10937] 9pnet_fd: Insufficient options for proto=fd
[  503.816139][   T30] audit: type=1400 audit(1752142116.408:517): avc:  denied  { bind } for  pid=10935 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  504.608338][T10953] 9pnet_fd: Insufficient options for proto=fd
[  505.390125][T10028] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  505.450210][T10963] Invalid source name
[  505.710632][T10968] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  505.710632][T10968]    program syz.3.1318 not setting count and/or reply_len properly
[  505.770164][T10028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.800063][T10028] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  505.830390][T10028] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  505.859796][T10028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.892190][T10028] usb 3-1: config 0 descriptor??
[  505.913415][T10028] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  506.358022][   T30] audit: type=1326 audit(1752142118.778:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  506.479931][   T30] audit: type=1326 audit(1752142118.778:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  506.601856][   T30] audit: type=1326 audit(1752142118.778:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  506.720303][   T30] audit: type=1326 audit(1752142118.778:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  506.805156][   T30] audit: type=1326 audit(1752142118.778:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  507.126077][   T30] audit: type=1326 audit(1752142118.778:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  507.209933][   T30] audit: type=1326 audit(1752142118.778:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  507.292742][   T30] audit: type=1326 audit(1752142118.778:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  507.650126][   T30] audit: type=1326 audit(1752142118.778:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  507.890912][   T30] audit: type=1326 audit(1752142118.778:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd838e929 code=0x7ffc0000
[  508.195637][   T10] usb 3-1: USB disconnect, device number 25
[  508.572333][T11000] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  509.003182][ T5838] Bluetooth: Frame is too long (len 18, expected len 4)
[  509.539507][T11021] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1334'.
[  509.947398][T11029] Invalid source name
[  513.281815][T11048] [U] 
[  513.960094][   T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  514.209937][   T10] usb 4-1: Using ep0 maxpacket: 8
[  514.221838][T11062] lo speed is unknown, defaulting to 1000
[  514.233249][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  514.245635][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.325959][T11075] Invalid source name
[  514.714510][   T10] usb 4-1: Product: syz
[  514.792893][T11076] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  515.109155][   T10] usb 4-1: Manufacturer: syz
[  515.120388][   T10] usb 4-1: SerialNumber: syz
[  515.140450][   T10] usb 4-1: config 0 descriptor??
[  515.571126][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  516.121982][T11090] netlink: 'syz.4.1354': attribute type 4 has an invalid length.
[  516.140612][  T974] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  516.144902][T11090] netlink: 'syz.4.1354': attribute type 2 has an invalid length.
[  516.340261][  T974] usb 3-1: Using ep0 maxpacket: 16
[  516.363677][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.783296][  T974] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  516.822861][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.432540][  T974] usb 3-1: config 0 descriptor??
[  517.450044][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  517.894877][ T5973] usb 4-1: USB disconnect, device number 29
[  518.152542][  T974] steelseries 0003:1038:1410.0006: not enough fields in HID_OUTPUT_REPORT 0
[  518.662981][  T974] usb 3-1: USB disconnect, device number 26
[  518.907305][T11123] Invalid source name
[  519.120147][  T974] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  519.352089][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.379606][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.398527][T11125] 9pnet_fd: Insufficient options for proto=fd
[  519.401898][  T974] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  519.421645][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.585938][  T974] usb 5-1: config 0 descriptor??
[  519.787076][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  519.944124][T11133] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.036110][T11133] sp0: Synchronizing with TNC
[  520.099878][   T10] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.138947][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  521.264819][   T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  521.384736][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.634747][  T974] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[  521.646581][   T10] usb 3-1: config 0 descriptor??
[  522.173620][T11152] netlink: 'syz.5.1369': attribute type 4 has an invalid length.
[  522.181606][T11152] netlink: 'syz.5.1369': attribute type 2 has an invalid length.
[  522.436196][   T10] aquacomputer_d5next 0003:0C70:F003.0008: hidraw1: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0
[  523.323413][   T10] usb 3-1: USB disconnect, device number 27
[  523.345859][  T974] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device
[  523.353383][  T974] pyra 0003:1E7D:2CF6.0007: couldn't install mouse
[  523.395838][  T974] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71
[  523.826607][  T974] usb 5-1: USB disconnect, device number 23
[  523.831864][T11160] fido_id[11160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  523.996657][T11173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  524.275529][T11176] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  525.056890][T11180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'.
[  525.152814][T11189] 9pnet_fd: Insufficient options for proto=fd
[  525.821260][  T974] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  526.061493][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  526.411752][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.441973][  T974] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  526.464576][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.507478][  T974] usb 3-1: config 0 descriptor??
[  526.656216][T11208] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1385'.
[  526.768307][T11209] Cannot find del_set index 0 as target
[  527.537509][T11213] Invalid source name
[  527.554412][  T974] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  528.383844][  T974] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[  528.391503][  T974] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[  528.398962][  T974] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71
[  528.427845][  T974] usb 3-1: USB disconnect, device number 28
[  528.558361][T11226] IPv6: Can't replace route, no match found
[  529.431462][T11222] [U] 
[  529.708396][T11234] 9pnet_fd: Insufficient options for proto=fd
[  529.751232][   T43] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  530.075747][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.127233][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  530.176125][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  530.203011][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  530.237475][   T43] usb 3-1: SerialNumber: syz
[  530.277279][   T43] usb 3-1: 0:2 : does not exist
[  530.536997][   T43] usb 3-1: USB disconnect, device number 29
[  530.604142][T11055] udevd[11055]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  530.689996][ T9268] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  530.945174][ T5973] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  530.953206][ T9268] usb 6-1: Using ep0 maxpacket: 8
[  530.967394][ T9268] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  530.976972][ T9268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.985395][ T9268] usb 6-1: Product: syz
[  530.989554][ T9268] usb 6-1: Manufacturer: syz
[  530.994202][ T9268] usb 6-1: SerialNumber: syz
[  531.010790][ T9268] usb 6-1: config 0 descriptor??
[  531.051438][ T9268] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  531.100068][ T5973] usb 5-1: Using ep0 maxpacket: 8
[  531.173088][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  531.247434][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  531.348005][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  531.402206][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  531.424094][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  531.428292][T11254] FAULT_INJECTION: forcing a failure.
[  531.428292][T11254] name failslab, interval 1, probability 0, space 0, times 0
[  531.433837][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.455145][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.2.1399 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  531.455169][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.455179][T11254] Call Trace:
[  531.455185][T11254]  <TASK>
[  531.455192][T11254]  dump_stack_lvl+0x16c/0x1f0
[  531.455220][T11254]  should_fail_ex+0x512/0x640
[  531.455247][T11254]  should_failslab+0xc2/0x120
[  531.455272][T11254]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  531.455294][T11254]  ? skb_clone+0x190/0x3f0
[  531.455321][T11254]  skb_clone+0x190/0x3f0
[  531.455345][T11254]  netlink_deliver_tap+0xabd/0xd30
[  531.455378][T11254]  netlink_unicast+0x5df/0x7f0
[  531.455397][T11254]  ? __pfx_netlink_unicast+0x10/0x10
[  531.455421][T11254]  netlink_sendmsg+0x8d1/0xdd0
[  531.455441][T11254]  ? __pfx_netlink_sendmsg+0x10/0x10
[  531.455467][T11254]  ____sys_sendmsg+0xa95/0xc70
[  531.455484][T11254]  ? copy_msghdr_from_user+0x10a/0x160
[  531.455505][T11254]  ? __pfx_____sys_sendmsg+0x10/0x10
[  531.455535][T11254]  ___sys_sendmsg+0x134/0x1d0
[  531.455558][T11254]  ? __pfx____sys_sendmsg+0x10/0x10
[  531.455577][T11254]  ? __lock_acquire+0x622/0x1c90
[  531.455628][T11254]  __sys_sendmsg+0x16d/0x220
[  531.455651][T11254]  ? __pfx___sys_sendmsg+0x10/0x10
[  531.455690][T11254]  do_syscall_64+0xcd/0x4c0
[  531.455714][T11254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.455732][T11254] RIP: 0033:0x7fd1d138e929
[  531.455746][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.455762][T11254] RSP: 002b:00007fd1d21e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.455777][T11254] RAX: ffffffffffffffda RBX: 00007fd1d15b5fa0 RCX: 00007fd1d138e929
[  531.455788][T11254] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[  531.455798][T11254] RBP: 00007fd1d21e3090 R08: 0000000000000000 R09: 0000000000000000
[  531.455808][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.455818][T11254] R13: 0000000000000000 R14: 00007fd1d15b5fa0 R15: 00007ffd8fee5c38
[  531.455840][T11254]  </TASK>
[  531.455861][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'.
[  531.758919][ T5973] usb 5-1: GET_CAPABILITIES returned 0
[  531.766402][ T5973] usbtmc 5-1:16.0: can't read capabilities
[  531.861045][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  531.861081][   T30] audit: type=1400 audit(1752142144.468:570): avc:  denied  { write } for  pid=11257 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  531.901121][   T30] audit: type=1400 audit(1752142144.488:571): avc:  denied  { ioctl } for  pid=11257 comm="syz.2.1401" path="socket:[26166]" dev="sockfs" ino=26166 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  532.014234][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.026151][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.063553][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.075782][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.090227][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.100122][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.109214][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.121627][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.130763][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.139847][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.148923][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.157983][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.169018][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.169021][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  532.200855][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.210007][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.219065][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  532.274871][ T9268] gspca_sonixj: reg_w1 err -71
[  532.370506][ T9268] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  532.370941][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.382474][ T5973] usb 5-1: USB disconnect, device number 24
[  532.428039][ T9268] usb 6-1: USB disconnect, device number 8
[  532.476983][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.500066][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  532.520003][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.531713][    T9] usb 4-1: config 0 descriptor??
[  532.678098][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4511 sclass=netlink_route_socket pid=11263 comm=syz.2.1403
[  533.435832][    T9] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  533.830159][ T9268] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  533.980621][   T30] audit: type=1400 audit(1752142146.578:572): avc:  denied  { block_suspend } for  pid=11280 comm="syz.0.1408" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  534.120346][ T9268] usb 6-1: Using ep0 maxpacket: 32
[  534.133497][ T9268] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  534.183110][ T9268] usb 6-1: config 0 has no interface number 0
[  534.200235][ T9268] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  534.209597][ T9268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.217964][ T9268] usb 6-1: Product: syz
[  534.222504][ T9268] usb 6-1: Manufacturer: syz
[  534.227857][ T9268] usb 6-1: SerialNumber: syz
[  534.237005][ T9268] usb 6-1: config 0 descriptor??
[  534.248832][ T9268] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  534.292457][    T9] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device
[  534.300173][    T9] pyra 0003:1E7D:2CF6.000A: couldn't install mouse
[  534.327978][    T9] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71
[  534.340139][    T9] usb 4-1: USB disconnect, device number 30
[  534.458794][ T9268] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  534.491805][ T9268] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  535.120853][T11295] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1405'.
[  535.139542][   T30] audit: type=1400 audit(1752142147.698:573): avc:  denied  { write } for  pid=11269 comm="syz.5.1405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  535.519364][   T30] audit: type=1400 audit(1752142147.728:574): avc:  denied  { nlmsg_read } for  pid=11269 comm="syz.5.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  536.258900][T11291] lo speed is unknown, defaulting to 1000
[  536.558801][T11302] netlink: 'syz.3.1413': attribute type 3 has an invalid length.
[  536.579924][T11302] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1413'.
[  536.623019][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  536.664883][ T9268] usb 6-1: USB disconnect, device number 9
[  536.682768][ T9268] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  536.727120][ T9268] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  536.802333][ T9268] quatech2 6-1:0.51: device disconnected
[  537.210739][   T30] audit: type=1326 audit(1752142149.798:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  537.316593][   T30] audit: type=1326 audit(1752142149.798:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  537.348791][   T30] audit: type=1326 audit(1752142149.798:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  537.400074][T10028] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  537.588733][   T30] audit: type=1326 audit(1752142149.798:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  537.742492][T10028] usb 4-1: device descriptor read/64, error -71
[  537.753769][   T30] audit: type=1326 audit(1752142149.798:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  537.860925][   T30] audit: type=1326 audit(1752142149.798:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  538.010080][T10028] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  538.090406][   T30] audit: type=1326 audit(1752142149.798:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  538.150379][   T30] audit: type=1326 audit(1752142149.798:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  538.177131][   T30] audit: type=1326 audit(1752142149.798:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  538.204167][   T30] audit: type=1326 audit(1752142149.798:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11304 comm="syz.4.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89d8d8e929 code=0x7ffc0000
[  538.529963][T10028] usb 4-1: device descriptor read/64, error -71
[  538.669479][T10028] usb usb4-port1: attempt power cycle
[  538.785241][T11330] Invalid source name
[  539.401358][ T5973] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  539.609933][T10028] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  539.652666][T10028] usb 4-1: device descriptor read/8, error -71
[  539.672281][ T5973] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  539.693437][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.710648][ T5973] usb 5-1: Product: syz
[  539.720036][ T5973] usb 5-1: Manufacturer: syz
[  539.724649][ T5973] usb 5-1: SerialNumber: syz
[  539.741232][ T5973] usb 5-1: config 0 descriptor??
[  539.747815][ T5973] ipw 5-1:0.0: IPWireless converter converter detected
[  539.903415][T10028] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  539.954681][T10028] usb 4-1: device descriptor read/8, error -71
[  540.002299][  T974] usb 5-1: USB disconnect, device number 25
[  540.024873][  T974] ipw 5-1:0.0: device disconnected
[  540.092859][T10028] usb usb4-port1: unable to enumerate USB device
[  540.104665][T11346] FAULT_INJECTION: forcing a failure.
[  540.104665][T11346] name failslab, interval 1, probability 0, space 0, times 0
[  540.117915][T11346] CPU: 0 UID: 0 PID: 11346 Comm: syz.5.1427 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  540.117937][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  540.117946][T11346] Call Trace:
[  540.117952][T11346]  <TASK>
[  540.117958][T11346]  dump_stack_lvl+0x16c/0x1f0
[  540.117986][T11346]  should_fail_ex+0x512/0x640
[  540.118011][T11346]  ? io_alloc_ocqe+0x7e/0x610
[  540.118032][T11346]  should_failslab+0xc2/0x120
[  540.118057][T11346]  __kmalloc_noprof+0xd2/0x510
[  540.118085][T11346]  io_alloc_ocqe+0x7e/0x610
[  540.118105][T11346]  ? io_cqe_cache_refill+0x221/0x2c0
[  540.118133][T11346]  __io_submit_flush_completions+0x9b3/0x17f0
[  540.118152][T11346]  ? io_connect_prep+0x28b/0x350
[  540.118175][T11346]  io_submit_sqes+0x9eb/0x2580
[  540.118206][T11346]  __do_sys_io_uring_enter+0xd6a/0x1630
[  540.118226][T11346]  ? __fget_files+0x20e/0x3c0
[  540.118247][T11346]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  540.118266][T11346]  ? fput+0x70/0xf0
[  540.118281][T11346]  ? ksys_write+0x1ac/0x250
[  540.118300][T11346]  ? __pfx_ksys_write+0x10/0x10
[  540.118327][T11346]  do_syscall_64+0xcd/0x4c0
[  540.118352][T11346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.118368][T11346] RIP: 0033:0x7fb82ad8e929
[  540.118381][T11346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.118395][T11346] RSP: 002b:00007fb82bc21038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  540.118411][T11346] RAX: ffffffffffffffda RBX: 00007fb82afb5fa0 RCX: 00007fb82ad8e929
[  540.118422][T11346] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 000000000000000e
[  540.118431][T11346] RBP: 00007fb82bc21090 R08: 0000000000000000 R09: 0000000000000000
[  540.118441][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.118449][T11346] R13: 0000000000000000 R14: 00007fb82afb5fa0 R15: 00007fffd06ae098
[  540.118470][T11346]  </TASK>
[  540.537004][T11354] 9pnet_fd: Insufficient options for proto=fd
[  541.142881][T11362] syz.4.1432: attempt to access beyond end of device
[  541.142881][T11362] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  541.186494][T11362] SQUASHFS error: Failed to read block 0x0: -5
[  541.250164][T11362] unable to read squashfs_super_block
[  541.590819][T11370] Invalid source name
[  542.094452][T11355] [U] 
[  542.427035][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  542.427052][   T30] audit: type=1400 audit(1752142155.028:638): avc:  denied  { connect } for  pid=11382 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  542.484677][T11386] FAULT_INJECTION: forcing a failure.
[  542.484677][T11386] name failslab, interval 1, probability 0, space 0, times 0
[  542.537802][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.0.1442 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  542.537831][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  542.537842][T11386] Call Trace:
[  542.537848][T11386]  <TASK>
[  542.537854][T11386]  dump_stack_lvl+0x16c/0x1f0
[  542.537883][T11386]  should_fail_ex+0x512/0x640
[  542.537904][T11386]  ? fs_reclaim_acquire+0xae/0x150
[  542.537930][T11386]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  542.537955][T11386]  should_failslab+0xc2/0x120
[  542.537981][T11386]  __kmalloc_noprof+0xd2/0x510
[  542.538010][T11386]  tomoyo_realpath_from_path+0xc2/0x6e0
[  542.538037][T11386]  ? tomoyo_profile+0x47/0x60
[  542.538066][T11386]  tomoyo_path_number_perm+0x245/0x580
[  542.538085][T11386]  ? tomoyo_path_number_perm+0x237/0x580
[  542.538107][T11386]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  542.538130][T11386]  ? find_held_lock+0x2b/0x80
[  542.538177][T11386]  ? find_held_lock+0x2b/0x80
[  542.538197][T11386]  ? hook_file_ioctl_common+0x145/0x410
[  542.538219][T11386]  ? __fget_files+0x20e/0x3c0
[  542.538248][T11386]  security_file_ioctl+0x9b/0x240
[  542.538273][T11386]  __x64_sys_ioctl+0xb7/0x210
[  542.538295][T11386]  do_syscall_64+0xcd/0x4c0
[  542.538321][T11386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.538338][T11386] RIP: 0033:0x7fa60298e929
[  542.538352][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.538369][T11386] RSP: 002b:00007fa6038e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  542.538386][T11386] RAX: ffffffffffffffda RBX: 00007fa602bb5fa0 RCX: 00007fa60298e929
[  542.538397][T11386] RDX: 0000200000000040 RSI: 0000000000005386 RDI: 0000000000000003
[  542.538407][T11386] RBP: 00007fa6038e1090 R08: 0000000000000000 R09: 0000000000000000
[  542.538417][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.538427][T11386] R13: 0000000000000000 R14: 00007fa602bb5fa0 R15: 00007fffa1168978
[  542.538451][T11386]  </TASK>
[  542.538459][T11386] ERROR: Out of memory at tomoyo_realpath_from_path.
[  542.770016][   T30] audit: type=1400 audit(1752142155.078:639): avc:  denied  { shutdown } for  pid=11382 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  543.094044][T11393] syz.3.1445: attempt to access beyond end of device
[  543.094044][T11393] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0
[  543.120863][T11393] SQUASHFS error: Failed to read block 0x0: -5
[  543.134643][T11393] unable to read squashfs_super_block
[  543.145671][T11395] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  543.254614][T11395] CIFS mount error: No usable UNC path provided in device string!
[  543.254614][T11395] 
[  543.267910][T11395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  543.270074][ T9268] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  543.305517][T11395] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96
[  543.487489][ T9268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.533300][ T9268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  543.602460][ T9268] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  543.708750][ T9268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.733538][ T9268] usb 3-1: config 0 descriptor??
[  543.831510][T11410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  544.179468][T11412] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1451'.
[  544.547073][ T9268] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  544.741669][T11421] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  545.124035][   T30] audit: type=1400 audit(1752142157.728:640): avc:  denied  { mount } for  pid=11418 comm="syz.5.1455" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  545.204478][T11421] @: renamed from vlan0 (while UP)
[  545.257568][T11430] syz.4.1456: attempt to access beyond end of device
[  545.257568][T11430] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  545.271554][   T30] audit: type=1400 audit(1752142157.878:641): avc:  denied  { unmount } for  pid=8260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  545.288768][T11430] SQUASHFS error: Failed to read block 0x0: -5
[  545.299649][T11430] unable to read squashfs_super_block
[  545.433393][ T9268] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device
[  545.449786][ T9268] pyra 0003:1E7D:2CF6.000B: couldn't install mouse
[  545.461037][ T9268] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71
[  545.501700][ T9268] usb 3-1: USB disconnect, device number 30
[  547.180317][T11460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1463'.
[  547.673131][T11463] syz.5.1465: attempt to access beyond end of device
[  547.673131][T11463] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0
[  547.698183][T11463] SQUASHFS error: Failed to read block 0x0: -5
[  547.717120][T11463] unable to read squashfs_super_block
[  547.728947][T11466] syzkaller1: entered promiscuous mode
[  547.736046][T11466] syzkaller1: entered allmulticast mode
[  547.904542][T11440] netlink: 'syz.4.1460': attribute type 29 has an invalid length.
[  547.939676][T11440] netlink: 'syz.4.1460': attribute type 3 has an invalid length.
[  547.961867][T11440] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1460'.
[  548.200015][   T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  548.454705][   T43] usb 4-1: Using ep0 maxpacket: 16
[  548.763760][T10028] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  548.794054][   T43] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.820013][   T43] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  548.869724][   T43] usb 4-1: config 0 interface 0 has no altsetting 0
[  548.933924][T10028] usb 6-1: Using ep0 maxpacket: 32
[  548.943326][T10028] usb 6-1: config 32 has an invalid interface number: 40 but max is 0
[  548.960196][T10028] usb 6-1: config 32 has no interface number 0
[  548.967255][T10028] usb 6-1: config 32 interface 40 has no altsetting 0
[  548.983676][T10028] usb 6-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice=60.3f
[  548.988633][   T43] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  549.003222][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.008146][T10028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.021039][   T43] usb 4-1: config 0 descriptor??
[  549.123511][T11488] Invalid source name
[  549.494519][T10028] usb 6-1: Product: syz
[  549.548618][T10028] usb 6-1: Manufacturer: syz
[  549.553309][T10028] usb 6-1: SerialNumber: syz
[  549.570831][T10028] belkin_sa 6-1:32.40: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  549.586787][T10028] usb 6-1: bcdDevice: 603f, bfc: 0
[  549.605798][T10028] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  549.708296][   T43] cypress 0003:04B4:07B1.000C: unbalanced delimiter at end of report description
[  549.729393][   T43] cypress 0003:04B4:07B1.000C: parse failed
[  549.738552][   T43] cypress 0003:04B4:07B1.000C: probe with driver cypress failed with error -22
[  549.877918][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.913218][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.936347][   T43] usb 4-1: USB disconnect, device number 35
[  550.171351][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'.
[  551.788717][T11506] syz.4.1480: attempt to access beyond end of device
[  551.788717][T11506] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  551.822502][T11506] SQUASHFS error: Failed to read block 0x0: -5
[  551.828734][T11506] unable to read squashfs_super_block
[  551.864765][T10028] usb 6-1: USB disconnect, device number 10
[  551.905442][T10028] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  551.932678][T10028] belkin_sa 6-1:32.40: device disconnected
[  552.514929][   T30] audit: type=1400 audit(1752142165.118:642): avc:  denied  { append } for  pid=11519 comm="syz.4.1485" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  552.772972][T11527] fuse: Unknown parameter 'rootmofe'
[  552.825750][T11527] openvswitch: netlink: IPv4 tunnel dst address is zero
[  553.047763][T11535] [U] 
[  553.126866][T11539] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI
[  553.138963][T11539] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  553.147371][T11539] CPU: 1 UID: 0 PID: 11539 Comm: syz.4.1485 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  553.159433][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  553.169482][T11539] RIP: 0010:h5_recv+0x104/0x910
[  553.174337][T11539] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 78 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  553.193952][T11539] RSP: 0018:ffffc900048cfc00 EFLAGS: 00010283
[  553.200021][T11539] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc9000f2ce000
[  553.207987][T11539] RDX: 0000000000080000 RSI: ffffffff886e7ebf RDI: 0000000000000005
[  553.215953][T11539] RBP: ffffc900048cfd88 R08: 0000000000000005 R09: 0000000000000000
[  553.223923][T11539] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[  553.231888][T11539] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb368c0
[  553.240027][T11539] FS:  00007f89d9bba6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000
[  553.248950][T11539] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  553.255511][T11539] CR2: 00007f89d9bb9f98 CR3: 000000007c65f000 CR4: 00000000003526f0
[  553.263465][T11539] Call Trace:
[  553.266720][T11539]  <TASK>
[  553.269629][T11539]  ? __pfx_h5_recv+0x10/0x10
[  553.274218][T11539]  hci_uart_tty_receive+0x254/0x7e0
[  553.279395][T11539]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  553.285092][T11539]  tty_ioctl+0x583/0x1640
[  553.289400][T11539]  ? __pfx_tty_ioctl+0x10/0x10
[  553.294139][T11539]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  553.300972][T11539]  ? hook_file_ioctl_common+0x145/0x410
[  553.306497][T11539]  ? selinux_file_ioctl+0x180/0x270
[  553.311671][T11539]  ? selinux_file_ioctl+0xb4/0x270
[  553.316761][T11539]  ? __pfx_tty_ioctl+0x10/0x10
[  553.321517][T11539]  __x64_sys_ioctl+0x18b/0x210
[  553.326272][T11539]  do_syscall_64+0xcd/0x4c0
[  553.330752][T11539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.336621][T11539] RIP: 0033:0x7f89d8d8e929
[  553.341012][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.360593][T11539] RSP: 002b:00007f89d9bba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.368976][T11539] RAX: ffffffffffffffda RBX: 00007f89d8fb6160 RCX: 00007f89d8d8e929
[  553.376932][T11539] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 000000000000000b
[  553.384891][T11539] RBP: 00007f89d8e10b39 R08: 0000000000000000 R09: 0000000000000000
[  553.392844][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.400798][T11539] R13: 0000000000000001 R14: 00007f89d8fb6160 R15: 00007ffc70e75428
[  553.408754][T11539]  </TASK>
[  553.411758][T11539] Modules linked in:
[  553.416294][T11539] ---[ end trace 0000000000000000 ]---
[  553.458426][T11539] RIP: 0010:h5_recv+0x104/0x910
[  553.464064][T11539] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 51 78 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  553.489308][T11539] RSP: 0018:ffffc900048cfc00 EFLAGS: 00010283
[  553.495672][T11539] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffc9000f2ce000
[  553.508232][T11539] RDX: 0000000000080000 RSI: ffffffff886e7ebf RDI: 0000000000000005
[  553.516511][T11539] RBP: ffffc900048cfd88 R08: 0000000000000005 R09: 0000000000000000
[  553.524806][T11539] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001
[  553.533144][T11539] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb368c0
[  553.541487][T11539] FS:  00007f89d9bba6c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000
[  553.550733][T11539] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  553.557610][T11539] CR2: 000000110c3b0f1f CR3: 000000007c65f000 CR4: 00000000003526f0
[  553.578177][   T30] audit: type=1400 audit(1752142166.118:643): avc:  denied  { read } for  pid=5184 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  553.584826][T11527] lo speed is unknown, defaulting to 1000
[  553.585960][T11539] Kernel panic - not syncing: Fatal exception
[  553.600284][T11539] Kernel Offset: disabled