last executing test programs:

2m36.023426786s ago: executing program 4 (id=845):
socket$tipc(0x1e, 0x2, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0), 0x12)
r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x104)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
finit_module(r3, 0x0, 0x3)
r4 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x94cb, 0x400, 0x40, 0x3, 0x0, r2})
io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, 0x0, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, 0x0)
sendfile(r6, r7, 0x0, 0x2000002389a)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x8, 0x102, 0x8000, 0x1a, "7a58beca3900000000000000000000000200"})
r9 = dup(r0)
write$UHID_INPUT(r9, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006)
socket$tipc(0x1e, 0x2, 0x0)

2m33.909739559s ago: executing program 4 (id=851):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x81}, 0x8)

2m33.819849811s ago: executing program 4 (id=854):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r1 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)

2m33.562073723s ago: executing program 4 (id=857):
r0 = syz_io_uring_setup(0xceb, &(0x7f0000000000)={0x0, 0xb61a, 0x4000, 0x2, 0x148}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000017c0)=[{0x2, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000180)=""/83, 0x53}], &(0x7f0000000240)=[0x3, 0xfff]}, {0x8, 0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/101, 0x65}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000001400)=""/74, 0x4a}, {&(0x7f0000001480)=""/82, 0x52}, {&(0x7f0000001500)=""/124, 0x7c}, {&(0x7f0000001580)=""/226, 0xe2}, {&(0x7f0000001680)=""/117, 0x75}], &(0x7f0000001780)=[0xfff, 0x6, 0x9, 0xee4f, 0x5]}], 0x2)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001800), 0x802, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000001840)={0xe, {0x1, 0x7e, 0x8, 0x39, "1412e8ca3a7fb00be6d248b68632159c4775f2aac46f7fd502da2aaa0d40f657d26c49c06b7d339c7d17d2a6566e726eb24443fe36d95a6cfe"}}, 0x45)
r2 = syz_io_uring_setup(0x7624, &(0x7f00000018c0)={0x0, 0x5008, 0x8000, 0x1, 0x175, 0x0, r0}, &(0x7f0000001940)=<r3=>0x0, &(0x7f0000001980)=<r4=>0x0)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000003040)=[{0x8, 0x1, 0x0, &(0x7f0000002f80)=[{&(0x7f00000019c0)=""/76, 0x4c}, {&(0x7f0000001a40)=""/126, 0x7e}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/171, 0xab}, {&(0x7f0000002b80)=""/195, 0xc3}, {&(0x7f0000002c80)=""/197, 0xc5}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/226, 0xe2}], &(0x7f0000003000)=[0x1ff]}], 0x1)
sched_setscheduler(0x0, 0x0, &(0x7f0000003080)=0x10)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000030c0)={0x9, 0x1, 0x10, 0x500000}, 0x10)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000003100)={0x2b632fb28bb97f8, 0x4})
r5 = epoll_create(0x55)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000003140)={0x1})
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000003180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x58, 0x0, @fd_index=0x1, 0x7, 0x0, 0xe, 0x4, 0x1, {0x0, r6}})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000031c0)='stack\x00')
setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000003200)=0x7, 0x4)
sync()
ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000003240)=r7)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000003280), 0xc180, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f00000032c0), 0x4, 0x101000)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4140, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0)
recvmsg$can_raw(r7, &(0x7f0000003880)={&(0x7f0000003300)=@un=@abs, 0x80, &(0x7f0000003740)=[{&(0x7f0000003380)=""/184, 0xb8}, {&(0x7f0000003440)=""/223, 0xdf}, {&(0x7f0000003540)=""/30, 0x1e}, {&(0x7f0000003580)=""/172, 0xac}, {&(0x7f0000003640)=""/154, 0x9a}, {&(0x7f0000003700)=""/50, 0x32}], 0x6, &(0x7f00000037c0)=""/132, 0x84}, 0x10110)
r10 = accept$nfc_llcp(r7, &(0x7f00000038c0), &(0x7f0000003940)=0x60)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003980)=<r11=>0x0)
bind$nfc_llcp(r10, &(0x7f00000039c0)={0x27, r11, 0xffffffffffffffff, 0x5, 0xe2, 0x0, "fb66be7210e7fb66be114dc737b120db6e29b2bced5b849e63fe028bce1ef2cb08ac579306d1f8c1cb2168dbef9eeef733ec5b7aae3699cac13a82e2fd3c3a", 0x17}, 0x60)
writev(r8, &(0x7f0000003c40)=[{&(0x7f0000003a40)="70c5138ca643551d1a426f4154ff48633dd62ca54e6067644af1c4ec3e0ba751c71bc967226e53d0b2ec114d7fee785ec44d925b426639264e6d166e65b36ca534a27ccc58f440e36d8fb2daa8f92be93db2dab7f01f83792b6b64fabd5cce394cb9e1425aaa71f59252c9f6a96ef3f129839bb53308f9abb4dd3c520045cd1f6b8c1b12ed118c", 0x87}, {&(0x7f0000003b00)="cfc4fec8cdc6c141e5398209a4d0dbaaeb377354c031039f0e025030ec0feef338e2dfc20b2460af44b6281c155ea11be7e8c45a11e0128e330faa", 0x3b}, {&(0x7f0000003b40)="e79a5e70df0a9d1c38d475f5a142289b5f96dd36c6fb25b3faf7ecd847174cdc39d46e0830b58f98006d97002a8242507d2fd66c3ef6e49dc9d7ab462554449435dafcf5c391c182a50008fa447d3f7370c88f6b37699627fb20860ffc7cbba5f65117af22135340ec197098f7e0e0d137ea622fe6b380ffbd296d00e39b07829b4c3f5bfc97b5bf4a0e057c23403528e5b0bccf9d76759edf44c1063008ae99648aca319bfbecd40d1f2244bd72b28eaac15c8967f1855bf149e5482602e18f8bf92219102b7715109844726a08af3e1294f1e570d48a06b9bf859e6f38e9aa6ffa4b77e4b8be5a4862d186fb04", 0xee}], 0x3)
add_key(&(0x7f0000003c80)='keyring\x00', &(0x7f0000003cc0)={'syz', 0x2}, &(0x7f0000003d00)="df11d335a3917724439a5541c82c4ee8cd9bf9423340016fec257aab971ea4fe6abfb5a2a496ae00dbd2dced6ba63f0e1d251d2541e71a04dea7157faa", 0x3d, 0xfffffffffffffffc)
r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003d40), 0x440000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000003d80)={'vcan0\x00'})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000004440)={0x2c, &(0x7f0000004280)={0x20, 0x1b, 0x85, {0x85, 0x22, "c385a10e152249abb2f06e63f4fb4745b149960abd51e68348095db2756ffe3abfbdf1098d7bf9d40677fcb124c5ab35b722aac92e5cd256340d3c903ca3eb44f50470b9d2f789b1bca98b5e735b7f9cc8b08655b1ed75906321824c5c80d4103cb324dbe17243646f963ea8c27a5769c9013bec3e25bf9c64f3ea06b0a9f68b023fea"}}, &(0x7f0000004340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, &(0x7f0000004380)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000043c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0x18, 0x0, 0x4, "2b590eb8", "4104f0ff"}}, &(0x7f0000004400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x1, 0x8, 0x4, 0x0, 0xd}}}, &(0x7f0000004900)={0x84, &(0x7f0000004480)={0x40, 0xf, 0x95, "ecf45ead3a93bbe24cd6a3f516109ed15c335e3fab6d2a3f35985bf72d7f3f19f8d47f37b1a86e053b0e5e26198b173f8e328625daad97cdbad1e9680a0716d3937904853d7b2155130f94e1aba0bac1902498572f7c665ee27ab0b8d3d3b7088178030abbd21f3d018b2a4e2254adcea5f8b257494ca41cff8e25d595fa752e51fb9afa7f5d5a6532664758ced93abee94177853b"}, &(0x7f0000004540)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000004580)={0x0, 0x8, 0x1, 0x2f}, &(0x7f00000045c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000004600)={0x20, 0x0, 0x4, {0x1000}}, &(0x7f0000004640)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000004680)={0x40, 0x9, 0x1, 0xf}, &(0x7f00000046c0)={0x40, 0xb, 0x2, "778a"}, &(0x7f0000004700)={0x40, 0xf, 0x2, 0x99}, &(0x7f0000004740)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004780)={0x40, 0x17, 0x6, @local}, &(0x7f00000047c0)={0x40, 0x19, 0x2, "78e0"}, &(0x7f0000004800)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000004840)={0x40, 0x1c, 0x1}, &(0x7f0000004880)={0x40, 0x1e, 0x1}, &(0x7f00000048c0)={0x40, 0x21, 0x1, 0x8}})

2m31.771959931s ago: executing program 4 (id=865):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setresgid(0xee00, 0xee01, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002440))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$kcm(0xa, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
listen(r3, 0x4)
setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r4, 0x4)
read$msr(r2, 0x0, 0x0)
r5 = eventfd(0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xc, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="b40000000000000063110700000000008510000002000000850000000800000095000000000000009500000000000000", @ANYRESOCT=r0, @ANYBLOB="446b1549a267379f15f14db7391fcd66dbd3a7378b1cca6b046c7387ece5ce935e8a4306000000df182809d14143aaead25a9f419664b0022fd30cbc1a0aa0fd", @ANYRESOCT, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x335, @void, @value}, 0x94)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000100)={0x5, 0x2})
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r5, &(0x7f00000023c0)={r4, r1, 0x9})
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000002380)={0xeeee8000, 0x0, 0x9, 0x6, 0x6})
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a)

2m31.055054644s ago: executing program 4 (id=869):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x4)

2m15.963502049s ago: executing program 32 (id=869):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0xfdef}], 0x1, 0x8, 0x7, 0x4)

11.014513497s ago: executing program 0 (id=1335):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x10, 0x0, 0x0, 0x3}])
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xed, 0x0, 0x8000}, 0x0)
ioperm(0x2, 0x7, 0xfffff7ffbfffffff)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_open_dev$rtc(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
write(r3, &(0x7f0000000000)='U', 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000003c0)=""/104, &(0x7f0000000280)=0x68)

10.646302549s ago: executing program 0 (id=1337):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x9, 0x2040)
syz_usb_connect(0x3, 0x3d, &(0x7f0000008ec0)=ANY=[], 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
sendto$packet(r1, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_pidfd_open(r2, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
setns(r3, 0x6000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r4, 0x4bfa, &(0x7f0000004100)=""/42)

8.721756523s ago: executing program 1 (id=1347):
r0 = syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x211c, 0x10, 0x3, 0x144}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0x7}, &(0x7f0000000040)='./file0/file0\x00', 0x18})
io_uring_enter(r0, 0x47f6, 0x1f, 0xc, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

7.689852307s ago: executing program 1 (id=1352):
add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2001ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]})
r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000dc0)={0x9a, &(0x7f00000002c0)=ANY=[@ANYBLOB="001503000000e507bb292b091fc86cc39242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001300))
r5 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0})
connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc)
r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000a1c872e2564e1386700b50dd578d495700104c05e60c00000000950700097aad03020300010009210000000000000000"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="200100000080"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0xd}})
syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40070200000002055eacea581226123649e9ba27324bad02fe2f3f5a5d040569dbb219b880dfd7db74a84e57d28d06f3317d9b544ef0"], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="001f05000000050f050000"], 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2], 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x6, 0x2, 0x65, @loopback={0x2900}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8, 0x2e}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

6.510596122s ago: executing program 0 (id=1355):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x23, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x46b9, 0x0, &(0x7f0000000040), 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000180)=[r1, r2], &(0x7f00000001c0)=[{0x1, 0x4, 0xc}, {0x1, 0x2, 0xa, 0x2}, {0x4, 0x3, 0x1, 0x7}, {0x3, 0x5, 0x7, 0x2e736384692d2070}, {0x2, 0x2, 0x0, 0x3}, {0x1, 0x3, 0x4, 0xa}, {0x0, 0x2, 0x7, 0x6}, {0x0, 0x2, 0xf, 0x7}], 0x10, 0x69, @void, @value}, 0x94)
r3 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x41, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_enter(r3, 0x47f6, 0x880e, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
read$msr(0xffffffffffffffff, &(0x7f0000000600)=""/116, 0x74)

5.914130703s ago: executing program 3 (id=1357):
r0 = syz_open_procfs(0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x2b, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)
socket(0x1, 0x803, 0x0)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r3, 0x3)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x130, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x18, 0x100, 0x70bd28, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x8, 0xb, 0x1, "ce829dc70dc58906f6479a36ffb7325c988fe2ed9a8c39758d4e45388f9b2c6e", 0x38415261})
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r5, &(0x7f0000001500), 0x588, 0x1f8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x66)
fanotify_init(0x2, 0x101000)

5.146817103s ago: executing program 5 (id=1358):
r0 = socket$inet(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0xa8}}, 0x40000)

5.132225425s ago: executing program 3 (id=1359):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="c900"/20, @ANYRES32=0x0, @ANYRES32], 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000280)={@empty, @multicast1, @local}, 0xc)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x40000000000004)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140))
creat(&(0x7f0000000240)='./file0\x00', 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
chmod(&(0x7f0000000140)='./file0\x00', 0xfeff)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r10 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x2004c8d1)

5.108782049s ago: executing program 0 (id=1360):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x10000, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400001c00000000000000000a68000000060a0b040000000000000000020000003c0004800b0001007461726765740000280002800c0001004e4651554555450008000240000000000d000300aabd6355631221c9f90000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x90}}, 0x0)
r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0)
ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000080)={0x5, 0x0, 0x1})
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4800)
r6 = syz_io_uring_setup(0x20052b8, &(0x7f0000000640)={0x0, 0x6fd2, 0x0, 0x0, 0x40000333, 0x0, r5}, &(0x7f0000000240)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r4, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a180400aaaaaaaaaafd00000a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRESOCT=0x0], 0x68}}, 0x4000880)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)

4.954738149s ago: executing program 5 (id=1361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_io_uring_submit(r0, 0x0, 0x0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0xf6776413865238c7, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = accept4(r4, 0x0, &(0x7f0000000240), 0x80000)
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x5, &(0x7f0000000440)=0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000540)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000480)={{0x1, @private=0xa010101, 0x4e22, 0x0, 'wlc\x00'}, {@private=0xa010102, 0x8000, 0x2, 0x0, 0xfffffffe, 0x8000000}}, 0x44)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f0000000300)={0x3, @raw_data="6c23dcd0b6728c6367d1e0f8e3bf1f941b70097f0914a09fd6721b8411c7645fe09860bc7d3c9d73a9771eedfc38997d0c8233dfcccc00f7e8c651c5c4d1f4ad162efc8a66334f4d1a22e97bb4908f200af8450ec3f96a97286b2499925c1b7d46e2eee7a1a09a4160e81bee732f04729e819b8c6d09fed0482fa72da17b8ffdfa0643938f8f819e1c568476651fe20c39434a0fbfe71f25a3d78450779fbbcfa91b6793283a278690f0edb57a3d850c46cea71467b61a6f5459a85abd95f4f5e3e358753ab1de8f"})
getsockopt$inet_tcp_int(r7, 0x6, 0x9, 0x0, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
accept4(r9, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r10=>r5, {0x6}}, './file0\x00'})
ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0)

4.954505404s ago: executing program 3 (id=1362):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x28, 0x0, 0x0, 0x0)

4.415790817s ago: executing program 3 (id=1363):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000000000008100000000", @ANYRES32=0x0, @ANYBLOB="00000000041000002c001280090001007866726d000000001c000280080001000400000008000100020000000800020004000000"], 0x4c}}, 0x800)
fsopen(&(0x7f0000000040)='hfsplus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000380)={r2, r3+60000000}, 0x0)
syz_usb_connect(0x5, 0xffffffffffffff33, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xae, 0x0, 0x1, r1}}, 0x40)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x9)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000780)={0x5, 0x0, [{0x3000, 0x56, &(0x7f0000000180)=""/86}, {0xffff1000, 0xf9, &(0x7f0000000580)=""/249}, {0x0, 0x1000, &(0x7f0000002080)=""/4096}, {0xeeee0000, 0x1f, &(0x7f0000000200)=""/31}, {0x0, 0xc8, &(0x7f0000000840)=""/200}]})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.39059423s ago: executing program 5 (id=1364):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x8)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

4.096494232s ago: executing program 0 (id=1366):
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000380)={r0, r1+60000000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xae, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)={0x5, 0x0, [{0x3000, 0x56, &(0x7f0000000180)=""/86}, {0xffff1000, 0xf9, &(0x7f0000000580)=""/249}, {0x0, 0x1000, &(0x7f0000002080)=""/4096}, {0xeeee0000, 0x1f, &(0x7f0000000200)=""/31}, {0x0, 0xc8, &(0x7f0000000840)=""/200}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

3.769071405s ago: executing program 5 (id=1368):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000043000900ffffffff000008000200000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x44850)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x0, 0x7fff0000}]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xb)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "89d5bde381543ea8", "e43ff59db682888fda2281474c55f548", "1c312c39", "5efd74ad062ef9dc"}, 0x28)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000800), 0x62, 0x12141, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)

3.768469755s ago: executing program 0 (id=1369):
r0 = syz_open_procfs(0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x2b, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)
socket(0x1, 0x803, 0x0)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r3, 0x3)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r5 = accept4(r3, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x130, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x18, 0x100, 0x70bd28, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x8, 0xb, 0x1, "ce829dc70dc58906f6479a36ffb7325c988fe2ed9a8c39758d4e45388f9b2c6e", 0x38415261})
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r5, &(0x7f0000001500), 0x588, 0x1f8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x66)
fanotify_init(0x2, 0x101000)

3.20626996s ago: executing program 2 (id=1370):
syz_open_dev$tty1(0xc, 0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
preadv(r1, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/52, 0x34}], 0x1, 0x83, 0xc)
execveat$binfmt(r1, 0x0, &(0x7f00000003c0)={[&(0x7f0000000040)='{*$\x00', &(0x7f0000000280)='NET_DM\x00', &(0x7f00000002c0)='ethtool\x00', &(0x7f0000000340)='bond0\x00', &(0x7f0000000380)='$@$[\x00']}, &(0x7f00000004c0)={[&(0x7f0000000400)='NET_DM\x00', &(0x7f0000000440)='[]:\x00', &(0x7f0000000480)='bond0\x00']}, 0x800)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x78}}], 0x2, 0x3404c8d4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6)
sendmsg$NET_DM_CMD_STOP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000018}, 0xc800)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r9, 0x431, 0x70bd28, 0x800, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c2}, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r10, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
listen(r10, 0x0)
ioctl$int_in(r10, 0x5421, &(0x7f00000000c0)=0x80000001)

3.203360182s ago: executing program 5 (id=1371):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)
r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x3f00)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

2.9468114s ago: executing program 2 (id=1372):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r0=>0x0)
ptrace(0x4207, r0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20)
ftruncate(r2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f00000014c0)=r6, 0x4)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xd0300, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r9=>0x0)
io_getevents(r9, 0x4, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000300)={0x0, 0x989680})
ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000100)={{0x82cd, 0x9}, {0x8, 0x1}, 0x6, 0x1})

2.844642885s ago: executing program 2 (id=1373):
socket(0x1d, 0x2, 0x6)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd2c6, 0x0, 0x0, 0x221}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.485920614s ago: executing program 2 (id=1374):
r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x8, 0x6})
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xb6ca)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
io_submit(r3, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x10, 0x0, 0x0, 0x3}])
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xed, 0x0, 0x8000}, 0x0)
ioperm(0x2, 0x7, 0xfffff7ffbfffffff)
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
setpriority(0x1, 0xffffffffffffffff, 0xb)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_open_dev$rtc(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
write(r4, &(0x7f0000000000)='U', 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000018003480140035"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x268, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xfd, 0x6, "b1384b1af1eeb54315d390011b6af68c3fd92ff89bc791c0f49c199cff8e9337d030fee23749e98a4c9600df3678c0e87e3826e75327a51bb29422b82fd326bfee032d708ff7c34e4b5dc50a85edfc894c11b29f53ae8108a23c91d542c5b93a32f19589e1f1b514f69fbd302b2fc43b3bfabe2cf1ea8703e2729e9cd42ebc5f6b52b803fa28836b080e5bb5e6bac28ab846a002020b1f22a0a78a9154f1ca297088373a58ee99ecae0a26fae10617c9e07c560fa33133d30a934a6e2a1eb60123053b18b3de4565a10b43ed5663b46e1dd51eb3e6c4f192a7c62be24a7819c4bf3b412b68a2644690d452c43d80d7b99d889d819dd5d16089"}, @NFTA_TABLE_USERDATA={0x80, 0x6, "a20aad534254f2d2de73a26762a69017b8272bc3ebd8b30b951ccfc997f65754466dd1cc4d2d0ac0d9eef17dd4df2aeb5dae0a6c12c693b54101c675e76f2760c3b73c99a7076ce05197ed96102fecf2ac8c16e34a507046fae9ad370889fb59b7f08097fefb875177ec09a2d1e65c8f3019686876b6d60825e7240a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "5067ac1a2ce76bd4b898082549a957a9ef5a74d71cde78371f44aab32fd3a71e8a2f31c704b83946d7060f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "b442fd845fd53fa8c1d68bb7c23dc9075dfb1cd02bdfc34dbd849a0e849801f3cb9b50644e293a587af47b6e84032b3d87a709652a2fb633df6627171ea248e5f6d4419739ba58898226dcd69cd9cc0f257586f31de58c3631def00da7b542ad47d496b7de5e1cc5ed8c8a5190f3bfd66d765e439c9fee3bdeec"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x3d4, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x200, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe630}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x56c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_DESC={0x1e8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x4}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd79}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xafc8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x842f}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x34c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6ba2c561}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ae8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b5e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10fc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, @NFTA_SET_DESC_CONCAT={0xc0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff6e9c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31e7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6682}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52cd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}]}, @NFTA_SET_DESC_CONCAT={0x124, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa66}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe89}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x86c1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x695}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef}]}]}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}]}], {0x14}}, 0xbd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f00000003c0)=""/104, &(0x7f0000000280)=0x68)

2.394795394s ago: executing program 1 (id=1375):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x5421, &(0x7f0000000140)={0xc})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64)
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1})
close(r0)

2.030693421s ago: executing program 3 (id=1376):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x300000, 0x0, 0xffffffffffffffff, 0xffff478c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1492420, 0x2, 0x0, 0x0, 0x8fb}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x140)
syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1001}])
dup3(r2, r4, 0x6700000000000000)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x3, 0x0, 0x40045, 0x1, 0xfffffff7, '\x00', r1, r4, 0x1, 0x1, 0x3, 0x6, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

2.030109266s ago: executing program 5 (id=1377):
creat(0x0, 0x158)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x28, 0x140d, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890)
r1 = syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010109021b00027f09908009041c5e0020ba71050904cc06003f9e120147a35c5b905b8e101d44879277660c014ff12aeb8e7214a98b6e121d4357a8953fb6b7a92dcbf4137e058255c634472dc01e8ffe9157063647984204b1406a000000000000000000000000000000b3d6168c513f832ef0dca6c3c2bdf14d3000b47ba05f8f4ecde2327783be7adce53993a639"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.006488739s ago: executing program 1 (id=1378):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x480)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f00000000c0), 0x0)
sendto$inet6(r4, &(0x7f0000000180)="b8", 0x1, 0x20000814, &(0x7f0000000080)={0xa, 0x4e23, 0x5d, @loopback, 0x2}, 0x1c)
r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc})
ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r6, &(0x7f00000002c0)=""/75, 0x4b, 0x0)
ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000140)={0xb})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x1, 0x7, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x4004000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x9, 0x29, 0x3, 0x80000}, {0x7d2, 0xc, 0x7, 0xa305}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.756900272s ago: executing program 2 (id=1379):
clock_gettime(0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000380)={r0, r1+60000000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xae, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)={0x5, 0x0, [{0x3000, 0x56, &(0x7f0000000180)=""/86}, {0xffff1000, 0xf9, &(0x7f0000000580)=""/249}, {0x0, 0x1000, &(0x7f0000002080)=""/4096}, {0xeeee0000, 0x1f, &(0x7f0000000200)=""/31}, {0x0, 0xc8, &(0x7f0000000840)=""/200}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

1.122255392s ago: executing program 3 (id=1380):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = dup2(r0, r1)
getpeername$packet(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
close(r4)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80100007, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x16, 0x1, 0x0, "4f80ff219b1c2c426ebb117c0cab04cd00"})
prctl$PR_SET_NAME(0xf, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x30, 0xffffffffffffffff, 0x789cb000)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r7})
close(r6)

1.027003351s ago: executing program 2 (id=1381):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002440)={[{@uid={'uid', 0x3d, 0xee01}}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = socket$kcm(0xa, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
listen(r3, 0x4)
setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = eventfd(0x6)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0xc, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB="446b1549a267379f15f14db7391fcd66dbd3a7378b1cca6b046c7387ece5ce935e8a4306000000df182809d14143aaead25a9f419664b0022fd30cbc1a0aa0fd", @ANYRESOCT, @ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x335, @void, @value}, 0x94)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000100)={0x5, 0x2})
r7 = socket(0x2, 0x80805, 0x0)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r5, &(0x7f00000023c0)={r4, r1, 0x9})
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, &(0x7f0000000100)=ANY=[])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0xcb0a)

1.026333035s ago: executing program 1 (id=1382):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x8000, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)
sendmsg$inet6(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = dup(r5)
sendmsg$netlink(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ptrace(0x10, 0x1)

0s ago: executing program 1 (id=1383):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x50)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x50840)
r4 = add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$search(0xa, r4, 0x0, &(0x7f00000000c0)={'syz', 0x1}, 0xfffffffffffffff9)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="00000400000066002d"], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, 0x0, 0x0)
sendmsg$nl_route(r5, 0x0, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(0x0, r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

kernel console output (not intermixed with test programs):

] Bluetooth: hci1: failed to register connection device
[  322.066906][   T29] audit: type=1400 audit(1740378046.269:451): avc:  denied  { bind } for  pid=8893 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  322.850624][   T29] audit: type=1400 audit(1740378047.579:452): avc:  denied  { getopt } for  pid=8904 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  323.733064][ T8915] ubi: mtd0 is already attached to ubi31
[  323.990153][ T5133] Bluetooth: hci1: command 0x0406 tx timeout
[  324.494330][ T8924] netdevsim netdevsim2: Direct firmware load for .
[  324.494330][ T8924]  failed with error -2
[  324.505884][ T8924] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  324.505884][ T8924] 
[  324.624132][ T8925] libceph: resolve '0.0' (ret=-3): failed
[  324.833069][   T29] audit: type=1400 audit(1740378049.539:453): avc:  denied  { read } for  pid=8926 comm="syz.4.778" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  324.894618][ T8927] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  324.971445][   T29] audit: type=1400 audit(1740378049.539:454): avc:  denied  { open } for  pid=8926 comm="syz.4.778" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  324.973544][ T8927] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  325.184082][ T8927] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  325.478673][ T8927] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  325.546223][ T8927] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  325.571466][ T8927] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  325.612342][ T8927] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  325.674886][ T8927] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  325.682945][ T8927] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  326.032745][ T8927] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  326.076666][ T8927] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  326.100471][ T8927] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  326.114133][ T8927] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  326.399719][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  326.713668][    T9] usb 1-1: config 0 has no interfaces?
[  326.719513][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  326.719806][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.721622][    T9] usb 1-1: config 0 descriptor??
[  326.759681][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  326.890596][    T8] usb 4-1: device descriptor read/64, error -71
[  326.960278][ T5133] Bluetooth: hci1: command 0x0406 tx timeout
[  327.130327][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  327.232815][ T8963] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  327.249283][ T3510] Bluetooth: hci5: Frame reassembly failed (-84)
[  327.259694][    T8] usb 4-1: device descriptor read/64, error -71
[  327.380912][    T8] usb usb4-port1: attempt power cycle
[  327.589774][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  327.749830][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  327.769726][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  327.821191][    T8] usb 4-1: device descriptor read/8, error -71
[  328.422504][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  328.597908][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  328.640920][    T8] usb 4-1: device descriptor read/8, error -71
[  328.800704][    T8] usb usb4-port1: unable to enumerate USB device
[  329.029724][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  329.269822][   T54] Bluetooth: hci5: command 0x1003 tx timeout
[  329.440801][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  329.468069][ T5874] usb 1-1: USB disconnect, device number 18
[  330.020920][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  330.027353][ T5133] Bluetooth: hci2: command 0x0406 tx timeout
[  330.474681][ T8995] tmpfs: Unknown parameter ''
[  330.483552][ T5133] Bluetooth: hci4: command 0x0406 tx timeout
[  331.120759][ T5133] Bluetooth: hci1: command 0x0406 tx timeout
[  331.964246][   T29] audit: type=1400 audit(1740378055.969:455): avc:  denied  { write } for  pid=9002 comm="syz.0.801" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  332.033769][ T9003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'.
[  332.079711][ T5133] Bluetooth: hci2: command 0x0406 tx timeout
[  332.085828][ T5133] Bluetooth: hci3: command 0x0406 tx timeout
[  332.559698][ T5133] Bluetooth: hci4: command 0x0406 tx timeout
[  332.863384][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  332.892059][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'.
[  333.168640][   T29] audit: type=1400 audit(1740378057.889:456): avc:  denied  { connect } for  pid=9024 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  333.190255][ T5133] Bluetooth: hci1: command 0x0406 tx timeout
[  333.344494][ T5133] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  333.530327][   T25] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  333.721371][   T25] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  333.751209][   T25] usb 3-1: config 0 interface 0 has no altsetting 0
[  333.768448][   T25] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  333.780229][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.811334][   T25] usb 3-1: Product: syz
[  333.824509][   T25] usb 3-1: Manufacturer: syz
[  333.850758][   T25] usb 3-1: SerialNumber: syz
[  333.861844][   T25] usb 3-1: config 0 descriptor??
[  333.900793][   T25] usb 3-1: selecting invalid altsetting 0
[  333.959233][ T9039] tmpfs: Unknown parameter ''
[  334.109775][ T5874] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  334.311030][ T5874] usb 2-1: config 0 has no interfaces?
[  334.332908][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  334.350779][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.415641][ T5874] usb 2-1: config 0 descriptor??
[  334.444762][    T9] usb 3-1: USB disconnect, device number 13
[  334.630520][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  335.623642][ T9052] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  335.726626][ T5962] Bluetooth: hci5: Frame reassembly failed (-84)
[  335.779728][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  335.953537][    T9] usb 1-1: Using ep0 maxpacket: 16
[  335.962072][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  336.128535][    T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  336.139209][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.147442][    T9] usb 1-1: Product: syz
[  336.151885][    T9] usb 1-1: Manufacturer: syz
[  336.156545][    T9] usb 1-1: SerialNumber: syz
[  336.165375][    T9] usb 1-1: config 0 descriptor??
[  336.173113][    T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  336.182322][    T9] usb 1-1: Detected FT232R
[  336.569758][    T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  336.798910][    T8] usb 3-1: device descriptor read/64, error -71
[  337.049725][    T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  337.180584][    T8] usb 3-1: device descriptor read/64, error -71
[  337.290697][    T8] usb usb3-port1: attempt power cycle
[  337.302986][  T117] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  337.461321][  T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.472876][  T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.484053][  T117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  337.497971][  T117] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  337.516463][  T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.537282][  T117] usb 4-1: config 0 descriptor??
[  337.545483][ T9070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9070 comm=syz.4.820
[  337.561323][ T9070] overlayfs: failed to resolve './file1': -2
[  337.630568][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  337.661229][    T8] usb 3-1: device descriptor read/8, error -71
[  337.669930][   T54] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  337.709172][ T1876] usb 2-1: USB disconnect, device number 18
[  337.820525][ T9065] xt_connbytes: Forcing CT accounting to be enabled
[  337.827410][ T9065] xt_NFQUEUE: number of total queues is 0
[  337.963891][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  338.156616][    T8] usb 3-1: device descriptor read/8, error -71
[  338.270097][    T8] usb usb3-port1: unable to enumerate USB device
[  338.291347][  T117] usbhid 4-1:0.0: can't add hid device: -71
[  338.303799][  T117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  338.322205][  T117] usb 4-1: USB disconnect, device number 13
[  338.438539][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  338.516031][ T9086] tmpfs: Unknown parameter ''
[  338.571450][   T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  338.818192][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  338.937479][    T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  338.946253][    T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  338.952008][   T46] usb 2-1: Using ep0 maxpacket: 16
[  339.531851][    T9] usb 1-1: USB disconnect, device number 19
[  339.552615][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  339.562781][    T9] ftdi_sio 1-1:0.0: device disconnected
[  339.610037][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  339.636922][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  339.650219][ T8082] udevd[8082]: setting owner of /dev/bus/usb/001/019 to uid=0, gid=0 failed: No such file or directory
[  339.694799][   T46] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  339.709433][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.725748][   T46] usb 2-1: Product: syz
[  339.741006][   T46] usb 2-1: Manufacturer: syz
[  339.749604][   T46] usb 2-1: SerialNumber: syz
[  339.879001][   T46] usb 2-1: config 0 descriptor??
[  339.885200][ T9101] netdevsim netdevsim4: Direct firmware load for .
[  339.885200][ T9101]  failed with error -2
[  339.896359][ T9101] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  339.896359][ T9101] 
[  339.982671][   T46] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  340.122110][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  340.210153][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  340.592985][ T9102] libceph: resolve '0.0' (ret=-3): failed
[  340.607427][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  340.621510][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  340.629247][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  340.640866][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  340.650244][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  340.702667][   T46] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  340.765696][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  340.826060][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  340.834031][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  340.843154][   T46] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  340.857801][   T46] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  340.999225][   T46] usb 2-1: USB disconnect, device number 19
[  341.102159][   T29] audit: type=1400 audit(1740378065.829:457): avc:  denied  { read } for  pid=9109 comm="syz.0.831" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  341.182520][ T9119] tmpfs: Unknown parameter ''
[  341.488971][   T46] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  341.566013][   T46] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  341.585700][   T29] audit: type=1400 audit(1740378065.829:458): avc:  denied  { open } for  pid=9109 comm="syz.0.831" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  341.638538][   T46] keyspan 2-1:0.0: device disconnected
[  341.890447][ T5905] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  341.997932][ T9127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.111823][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  342.155810][ T9136] tmpfs: Unknown parameter ''
[  342.163657][ T5905] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.212113][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.245367][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.303573][ T9142] libceph: resolve '0.0' (ret=-3): failed
[  342.341883][ T9116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.370918][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  342.621420][   T29] audit: type=1400 audit(1740378067.339:459): avc:  denied  { write } for  pid=9141 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  342.654635][ T5905] usb 3-1: USB disconnect, device number 18
[  342.739283][   T29] audit: type=1400 audit(1740378067.459:460): avc:  denied  { mount } for  pid=9144 comm="syz.1.841" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  342.880398][ T9149] netdevsim netdevsim0: Direct firmware load for .
[  342.880398][ T9149]  failed with error -2
[  342.891440][ T9149] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  342.891440][ T9149] 
[  342.936721][ T8554] udevd[8554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.954782][   T29] audit: type=1400 audit(1740378067.659:461): avc:  denied  { unmount } for  pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  343.021611][ T9152] libceph: resolve '0.0' (ret=-3): failed
[  343.265569][   T29] audit: type=1400 audit(1740378067.979:462): avc:  denied  { ioctl } for  pid=9153 comm="syz.3.844" path="socket:[20768]" dev="sockfs" ino=20768 ioctlcmd=0x5108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  343.559872][ T1876] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  343.771577][   T29] audit: type=1400 audit(1740378068.369:463): avc:  denied  { name_bind } for  pid=9156 comm="syz.1.846" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  343.812974][ T9157] 9pnet: p9_errstr2errno: server reported unknown error �@b0x0000000000000000)~$ 2m$%’Ù¡Ã
[  344.213376][ T1876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.242639][ T1876] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  344.270556][ T9151] Invalid ELF header magic: != ELF
[  344.274339][   T29] audit: type=1400 audit(1740378068.999:464): avc:  denied  { module_load } for  pid=9150 comm="syz.4.845" path="/sys/kernel/notes" dev="sysfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  344.310207][ T1876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.338079][ T1876] usb 4-1: config 0 descriptor??
[  344.353130][ T1876] pwc: Askey VC010 type 2 USB webcam detected.
[  344.643344][ T9168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9168 comm=syz.0.849
[  344.644412][ T9168] overlayfs: failed to resolve './file1': -2
[  344.854139][ T1876] pwc: recv_control_msg error -32 req 02 val 2b00
[  345.058293][ T9180] tmpfs: Unknown parameter ''
[  345.102828][ T1876] pwc: recv_control_msg error -71 req 02 val 2700
[  345.111526][ T1876] pwc: recv_control_msg error -71 req 02 val 2c00
[  345.121049][ T1876] pwc: recv_control_msg error -71 req 04 val 1000
[  345.137164][   T29] audit: type=1326 audit(1740378069.859:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45df8d169 code=0x7ffc0000
[  345.160411][    C0] vkms_vblank_simulate: vblank timer overrun
[  345.181762][ T1876] pwc: recv_control_msg error -71 req 04 val 1300
[  345.188562][ T1876] pwc: recv_control_msg error -71 req 04 val 1400
[  345.202030][   T29] audit: type=1326 audit(1740378069.859:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.2.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fa45df8d169 code=0x7ffc0000
[  345.237886][ T1876] pwc: recv_control_msg error -71 req 02 val 2000
[  345.283349][ T1876] pwc: recv_control_msg error -71 req 02 val 2100
[  345.323136][ T1876] pwc: recv_control_msg error -71 req 04 val 1500
[  345.336913][ T1876] pwc: recv_control_msg error -71 req 02 val 2500
[  345.346905][ T1876] pwc: recv_control_msg error -71 req 02 val 2400
[  345.385061][ T1876] pwc: recv_control_msg error -71 req 02 val 2600
[  345.395364][ T1876] pwc: recv_control_msg error -71 req 02 val 2900
[  345.403911][ T1876] pwc: recv_control_msg error -71 req 02 val 2800
[  345.420749][ T1876] pwc: recv_control_msg error -71 req 04 val 1100
[  345.428446][ T1876] pwc: recv_control_msg error -71 req 04 val 1200
[  345.483477][ T1876] pwc: Registered as video103.
[  345.504500][ T1876] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  345.607663][ T1876] usb 4-1: USB disconnect, device number 14
[  345.757881][ T9200] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  345.793047][ T9200] netlink: 'syz.3.859': attribute type 3 has an invalid length.
[  346.913204][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  346.913224][   T29] audit: type=1400 audit(1740378071.629:476): avc:  denied  { write } for  pid=9210 comm="syz.3.862" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  347.030061][   T29] audit: type=1400 audit(1740378071.639:477): avc:  denied  { cmd } for  pid=9210 comm="syz.3.862" path="socket:[20869]" dev="sockfs" ino=20869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  347.116053][ T9217] tmpfs: Unknown parameter ''
[  347.624503][   T29] audit: type=1400 audit(1740378071.789:478): avc:  denied  { write } for  pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  347.645916][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.684613][   T29] audit: type=1400 audit(1740378071.789:479): avc:  denied  { remove_name } for  pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  347.721517][ T9221] tmpfs: Unknown parameter ''
[  347.865320][ T9228] tmpfs: Unknown parameter ''
[  348.153688][   T29] audit: type=1400 audit(1740378071.789:480): avc:  denied  { add_name } for  pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  348.176148][    C0] vkms_vblank_simulate: vblank timer overrun
[  348.253858][   T29] audit: type=1400 audit(1740378072.939:481): avc:  denied  { setattr } for  pid=9229 comm="syz.4.869" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  348.275335][    C0] vkms_vblank_simulate: vblank timer overrun
[  348.338784][   T29] audit: type=1400 audit(1740378072.949:482): avc:  denied  { write } for  pid=9229 comm="syz.4.869" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  348.359385][    C0] vkms_vblank_simulate: vblank timer overrun
[  348.497692][   T29] audit: type=1400 audit(1740378072.949:483): avc:  denied  { open } for  pid=9229 comm="syz.4.869" path="/174/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  348.539643][   T29] audit: type=1400 audit(1740378073.129:484): avc:  denied  { ioctl } for  pid=9234 comm="syz.1.870" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  348.564467][    C0] vkms_vblank_simulate: vblank timer overrun
[  348.601153][   T29] audit: type=1400 audit(1740378073.129:485): avc:  denied  { map } for  pid=9234 comm="syz.1.870" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  351.194901][ T9268] ptrace attach of "./syz-executor exec"[5822] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  351.650737][ T9265] tmpfs: Unknown parameter ''
[  351.741795][    C0] vkms_vblank_simulate: vblank timer overrun
[  351.946085][ T9274] openvswitch: netlink: EtherType 50a is less than min 600
[  352.015169][ T9275] tmpfs: Unknown parameter ''
[  352.292833][   T25] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  352.449778][   T25] usb 3-1: Using ep0 maxpacket: 32
[  352.465780][   T25] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  352.478693][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  352.478710][   T29] audit: type=1400 audit(1740378077.199:489): avc:  denied  { setattr } for  pid=9277 comm="syz.0.881" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  352.485048][   T25] usb 3-1: config 0 has no interface number 0
[  352.508195][    C0] vkms_vblank_simulate: vblank timer overrun
[  352.526901][   T25] usb 3-1: config 0 interface 89 has no altsetting 0
[  352.536270][   T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  352.576376][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.594903][   T25] usb 3-1: Product: syz
[  352.609378][   T25] usb 3-1: Manufacturer: syz
[  352.618828][   T25] usb 3-1: SerialNumber: syz
[  352.724980][   T25] usb 3-1: config 0 descriptor??
[  352.841640][   T25] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  352.940371][   T25] em28xx 3-1:0.89: Video interface 89 found: bulk
[  353.244549][ T9274] process 'syz.2.880' launched './file1' with NULL argv: empty string added
[  353.303840][   T29] audit: type=1400 audit(1740378078.029:490): avc:  denied  { execute_no_trans } for  pid=9272 comm="syz.2.880" path="/187/file1" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  353.327242][    C0] vkms_vblank_simulate: vblank timer overrun
[  353.521590][   T25] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  353.956684][ T9299] ubi: mtd0 is already attached to ubi31
[  354.009278][   T25] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  354.021841][   T25] em28xx 3-1:0.89: board has no eeprom
[  354.089678][   T25] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  354.104208][   T25] em28xx 3-1:0.89: analog set to bulk mode.
[  354.122331][   T46] em28xx 3-1:0.89: Registering V4L2 extension
[  354.143662][   T25] usb 3-1: USB disconnect, device number 19
[  354.159280][   T25] em28xx 3-1:0.89: Disconnecting em28xx
[  354.241045][   T46] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  354.262353][   T46] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  354.267252][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9302 comm=syz.1.887
[  354.295506][ T9302] overlayfs: failed to resolve './file1': -2
[  354.298042][   T46] em28xx 3-1:0.89: No AC97 audio processor
[  354.336632][   T46] usb 3-1: Decoder not found
[  354.345869][   T46] em28xx 3-1:0.89: failed to create media graph
[  354.365537][   T46] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  354.396893][   T46] em28xx 3-1:0.89: Registering snapshot button...
[  354.419914][   T46] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input8
[  354.462725][   T46] em28xx 3-1:0.89: Remote control support is not available for this card.
[  354.488651][   T25] em28xx 3-1:0.89: Closing input extension
[  354.512348][   T25] em28xx 3-1:0.89: Deregistering snapshot button
[  354.769813][   T29] audit: type=1400 audit(1740378079.479:491): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  355.284655][   T25] em28xx 3-1:0.89: Freeing device
[  356.837824][   T29] audit: type=1400 audit(1740378081.559:492): avc:  denied  { create } for  pid=9334 comm="syz.3.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  357.530902][ T9334] delete_channel: no stack
[  357.818863][ T9344] netdevsim netdevsim2: Direct firmware load for .
[  357.818863][ T9344]  failed with error -2
[  357.850796][ T9344] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  357.850796][ T9344] 
[  357.885661][ T9345] libceph: resolve '0.0' (ret=-3): failed
[  358.294448][   T29] audit: type=1400 audit(1740378083.019:493): avc:  denied  { accept } for  pid=9348 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  358.889067][ T9359] netlink: 666 bytes leftover after parsing attributes in process `syz.1.900'.
[  358.920062][ T9351] libceph: resolve '0.0' (ret=-3): failed
[  359.219815][   T25] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  359.363244][   T29] audit: type=1400 audit(1740378084.089:494): avc:  denied  { mount } for  pid=9357 comm="syz.2.901" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  359.411412][   T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.464339][   T25] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  359.478825][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.487887][   T25] usb 2-1: Product: syz
[  359.494493][   T25] usb 2-1: Manufacturer: syz
[  359.499243][   T25] usb 2-1: SerialNumber: syz
[  359.516428][   T25] usb 2-1: config 0 descriptor??
[  359.926213][   T25] ims_pcu 2-1:0.0: Missing CDC union descriptor
[  359.933081][   T25] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22
[  360.013324][   T29] audit: type=1400 audit(1740378084.739:495): avc:  denied  { unmount } for  pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  360.077422][ T9370] syz.2.904 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  360.418006][ T9376] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  360.718909][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'.
[  360.785458][   T29] audit: type=1400 audit(1740378085.509:496): avc:  denied  { recv } for  pid=9348 comm="syz.3.899" saddr=10.128.0.169 src=30006 daddr=10.128.0.145 dest=59222 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  360.929182][   T29] audit: type=1400 audit(1740378085.509:497): avc:  denied  { read } for  pid=9382 comm="syz.2.909" laddr=127.0.0.1 lport=38712 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  361.174811][ T9390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9390 comm=syz.0.911
[  361.238781][ T9390] overlayfs: failed to resolve './file1': -2
[  361.430088][ T9394] libceph: resolve '0.0' (ret=-3): failed
[  361.672506][   T46] usb 2-1: USB disconnect, device number 20
[  361.692629][   T29] audit: type=1400 audit(1740378086.419:498): avc:  denied  { unmount } for  pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  362.057206][ T9404] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  362.509829][ T9406] libceph: resolve '0.0' (ret=-3): failed
[  362.780279][   T29] audit: type=1400 audit(1740378087.509:499): avc:  denied  { connect } for  pid=9410 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  362.842218][ T9409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.893582][   T29] audit: type=1400 audit(1740378087.609:500): avc:  denied  { shutdown } for  pid=9410 comm="syz.0.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  363.270258][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  363.765161][ T5905] usb 3-1: Using ep0 maxpacket: 32
[  363.781931][ T5905] usb 3-1: config 0 has an invalid interface number: 146 but max is 0
[  363.794592][ T5905] usb 3-1: config 0 has no interface number 0
[  363.810710][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.822045][ T5905] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  363.836753][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.845515][ T5905] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  363.857289][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.865388][ T5905] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  363.876123][ T5905] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[  363.880531][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.887956][ T5905] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  363.972033][ T5905] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  363.976419][ T5905] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  363.976496][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.976561][ T5905] usb 3-1: Product: syz
[  363.976621][ T5905] usb 3-1: Manufacturer: syz
[  363.976682][ T5905] usb 3-1: SerialNumber: syz
[  364.005436][ T5905] usb 3-1: config 0 descriptor??
[  364.005889][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  364.029979][ T9415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  364.030757][ T9415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  364.034154][ T9427] FAULT_INJECTION: forcing a failure.
[  364.034154][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.039824][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.049166][ T5905] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  364.060977][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.238843][ T9427] CPU: 0 UID: 0 PID: 9427 Comm: syz.1.925 Not tainted 6.14.0-rc4-syzkaller #0
[  364.238871][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  364.238881][ T9427] Call Trace:
[  364.238886][ T9427]  <TASK>
[  364.238893][ T9427]  dump_stack_lvl+0x16c/0x1f0
[  364.238920][ T9427]  should_fail_ex+0x50a/0x650
[  364.238950][ T9427]  _copy_to_user+0x32/0xd0
[  364.238970][ T9427]  simple_read_from_buffer+0xd0/0x160
[  364.238997][ T9427]  proc_fail_nth_read+0x198/0x270
[  364.239022][ T9427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.239046][ T9427]  ? rw_verify_area+0xcf/0x680
[  364.239069][ T9427]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.239092][ T9427]  vfs_read+0x1df/0xbf0
[  364.239118][ T9427]  ? __fget_files+0x1fc/0x3a0
[  364.239135][ T9427]  ? __pfx___mutex_lock+0x10/0x10
[  364.239156][ T9427]  ? __pfx_vfs_read+0x10/0x10
[  364.239194][ T9427]  ? __fget_files+0x206/0x3a0
[  364.239216][ T9427]  ksys_read+0x12b/0x250
[  364.239241][ T9427]  ? __pfx_ksys_read+0x10/0x10
[  364.239273][ T9427]  do_syscall_64+0xcd/0x250
[  364.239297][ T9427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.239320][ T9427] RIP: 0033:0x7f831b58bb7c
[  364.239334][ T9427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  364.239350][ T9427] RSP: 002b:00007f831c452030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  364.239368][ T9427] RAX: ffffffffffffffda RBX: 00007f831b7a5fa0 RCX: 00007f831b58bb7c
[  364.239379][ T9427] RDX: 000000000000000f RSI: 00007f831c4520a0 RDI: 000000000000000a
[  364.239389][ T9427] RBP: 00007f831c452090 R08: 0000000000000000 R09: 0000000000000000
[  364.239399][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.239409][ T9427] R13: 0000000000000000 R14: 00007f831b7a5fa0 R15: 00007ffc0e44da08
[  364.239431][ T9427]  </TASK>
[  364.479046][ T5905] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  364.563995][   T29] audit: type=1400 audit(1740378089.279:501): avc:  denied  { mounton } for  pid=9423 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  364.671614][   T29] audit: type=1400 audit(1740378089.399:502): avc:  denied  { read } for  pid=9433 comm="syz.1.928" path="socket:[21311]" dev="sockfs" ino=21311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  364.870716][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  364.996273][ T9440] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[9440]
[  365.759829][   T29] audit: type=1400 audit(1740378090.439:503): avc:  denied  { map } for  pid=9445 comm="syz.1.929" path="socket:[21410]" dev="sockfs" ino=21410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  365.964661][ T9423] chnl_net:caif_netlink_parms(): no params data found
[  365.985433][   T29] audit: type=1400 audit(1740378090.469:504): avc:  denied  { accept } for  pid=9445 comm="syz.1.929" path="socket:[21410]" dev="sockfs" ino=21410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  366.008763][    C1] vkms_vblank_simulate: vblank timer overrun
[  366.410671][ T9423] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.419394][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.464867][ T9423] bridge_slave_0: entered allmulticast mode
[  366.523897][    T8] usb 3-1: USB disconnect, device number 20
[  366.535627][ T9423] bridge_slave_0: entered promiscuous mode
[  366.566782][ T9423] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.584832][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.592964][ T9423] bridge_slave_1: entered allmulticast mode
[  366.599414][ T9423] bridge_slave_1: entered promiscuous mode
[  366.633122][ T5133] Bluetooth: hci5: command tx timeout
[  366.657329][ T9423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.684774][ T9455] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  366.721858][ T9423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.862663][   T29] audit: type=1400 audit(1740378091.579:505): avc:  denied  { create } for  pid=9456 comm="syz.2.933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  366.890351][ T9462] xt_policy: neither incoming nor outgoing policy selected
[  366.921407][ T9423] team0: Port device team_slave_0 added
[  366.946202][ T9423] team0: Port device team_slave_1 added
[  367.096007][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.189127][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.215107][    C1] vkms_vblank_simulate: vblank timer overrun
[  367.250043][ T9423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.262714][ T9423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.270498][ T9423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.296415][    C1] vkms_vblank_simulate: vblank timer overrun
[  367.330245][ T9423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.397705][ T9423] hsr_slave_0: entered promiscuous mode
[  367.404487][ T9423] hsr_slave_1: entered promiscuous mode
[  367.434104][ T9423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.451197][ T9423] Cannot create hsr debugfs directory
[  367.672889][   T29] audit: type=1400 audit(1740378092.399:506): avc:  denied  { unlink } for  pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  368.138496][ T9486] tmpfs: Unknown parameter ''
[  368.389366][ T9423] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  368.426107][ T9423] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  368.507629][ T9423] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  368.540946][ T9423] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  368.711918][ T9423] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.720430][ T5133] Bluetooth: hci5: command tx timeout
[  368.755048][ T9423] 8021q: adding VLAN 0 to HW filter on device team0
[  368.769362][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.776562][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.819576][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.826760][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.839617][   T29] audit: type=1400 audit(1740378093.559:507): avc:  denied  { egress } for  pid=5874 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  368.944348][   T29] audit: type=1400 audit(1740378093.559:508): avc:  denied  { sendto } for  pid=5874 comm="kworker/1:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  369.319359][   T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  369.396067][ T9423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.451072][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  369.479799][   T29] audit: type=1400 audit(1740378094.169:509): avc:  denied  { append } for  pid=9502 comm="syz.1.945" name="nbd1" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  369.622745][    T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  369.628444][   T46] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  369.639828][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.646056][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.657474][    T8] usb 3-1: Product: syz
[  369.657497][    T8] usb 3-1: Manufacturer: syz
[  369.657513][    T8] usb 3-1: SerialNumber: syz
[  369.669936][    T8] r8152-cfgselector 3-1: Unknown version 0x0000
[  369.677822][    T8] r8152-cfgselector 3-1: config 0 descriptor??
[  369.686906][   T46] usb 1-1: Product: syz
[  369.695675][   T46] usb 1-1: Manufacturer: syz
[  369.701236][   T46] usb 1-1: SerialNumber: syz
[  369.710638][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  369.718144][   T46] r8152-cfgselector 1-1: Unknown version 0x0000
[  369.725587][   T46] r8152-cfgselector 1-1: config 0 descriptor??
[  369.769194][ T9423] veth0_vlan: entered promiscuous mode
[  369.784782][ T9423] veth1_vlan: entered promiscuous mode
[  369.811770][ T9423] veth0_macvtap: entered promiscuous mode
[  369.820740][ T9423] veth1_macvtap: entered promiscuous mode
[  369.837412][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.847996][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.864773][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.875363][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.885500][    T9] usb 2-1: Using ep0 maxpacket: 16
[  369.896208][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.910695][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  369.920558][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.930719][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.941448][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.952282][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.963961][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.976083][    T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  369.988658][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.992667][   T46] r8152-cfgselector 1-1: Unknown version 0x0000
[  369.999848][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.019992][    T9] usb 2-1: Product: syz
[  370.024354][   T46] r8152-cfgselector 1-1: bad CDC descriptors
[  370.036474][   T46] r8152-cfgselector 1-1: USB disconnect, device number 20
[  370.040499][    T9] usb 2-1: Manufacturer: syz
[  370.049923][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.069279][    T9] usb 2-1: SerialNumber: syz
[  370.076557][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.087310][    T9] usb 2-1: config 0 descriptor??
[  370.095404][    T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  370.103654][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.114796][    T9] usb 2-1: Detected FT232R
[  370.119928][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.130854][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.141441][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.152930][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.165043][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.176623][ T9423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.187441][ T9423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.196950][   T25] r8152-cfgselector 3-1: USB disconnect, device number 21
[  370.199272][ T9423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.222879][ T9423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.245348][ T9423] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.254963][ T9423] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.265903][ T9423] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.304514][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  370.314691][    T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32
[  370.325708][    T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  370.352407][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.367622][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.409242][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.418673][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.445280][   T29] audit: type=1400 audit(1740378095.169:510): avc:  denied  { mount } for  pid=9423 comm="syz-executor" name="/" dev="gadgetfs" ino=7191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  370.651406][ T9522] libceph: resolve '0.0' (ret=-3): failed
[  370.801704][ T5133] Bluetooth: hci5: command tx timeout
[  370.889857][ T9531] netlink: 96 bytes leftover after parsing attributes in process `syz.5.951'.
[  371.255320][   T25] usb 2-1: USB disconnect, device number 21
[  371.284773][   T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  371.339137][   T25] ftdi_sio 2-1:0.0: device disconnected
[  371.468686][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'.
[  371.750350][ T5133] Bluetooth: hci3: command 0x0406 tx timeout
[  372.893783][ T5133] Bluetooth: hci5: command tx timeout
[  373.099672][ T9549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  373.210295][   T29] audit: type=1400 audit(1740378097.769:511): avc:  denied  { create } for  pid=9543 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  373.512638][   T29] audit: type=1400 audit(1740378097.809:512): avc:  denied  { connect } for  pid=9543 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  373.925310][ T9559] libceph: resolve '0.0' (ret=-3): failed
[  374.109591][   T29] audit: type=1400 audit(1740378098.829:513): avc:  denied  { module_request } for  pid=9556 comm="syz.0.960" kmod="fs-<NULL>" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  374.511392][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'.
[  374.574263][ T9568] netlink: 'syz.3.962': attribute type 4 has an invalid length.
[  376.640812][   T29] audit: type=1400 audit(1740378101.279:514): avc:  denied  { create } for  pid=9587 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  377.090548][   T29] audit: type=1400 audit(1740378101.289:515): avc:  denied  { setopt } for  pid=9587 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  377.111154][   T29] audit: type=1400 audit(1740378101.289:516): avc:  denied  { create } for  pid=9587 comm="syz.3.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  378.199250][ T9599] FAULT_INJECTION: forcing a failure.
[  378.199250][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  378.213041][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.5.971 Not tainted 6.14.0-rc4-syzkaller #0
[  378.213062][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  378.213072][ T9599] Call Trace:
[  378.213078][ T9599]  <TASK>
[  378.213084][ T9599]  dump_stack_lvl+0x16c/0x1f0
[  378.213113][ T9599]  should_fail_ex+0x50a/0x650
[  378.213142][ T9599]  _copy_from_user+0x2e/0xd0
[  378.213160][ T9599]  kstrtouint_from_user+0xd7/0x1c0
[  378.213182][ T9599]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  378.213212][ T9599]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  378.213239][ T9599]  proc_fail_nth_write+0x84/0x250
[  378.213264][ T9599]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  378.213286][ T9599]  ? ksys_write+0x12b/0x250
[  378.213318][ T9599]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  378.213340][ T9599]  vfs_write+0x24c/0x1150
[  378.213366][ T9599]  ? __fget_files+0x1fc/0x3a0
[  378.213384][ T9599]  ? __pfx___mutex_lock+0x10/0x10
[  378.213404][ T9599]  ? __pfx_vfs_write+0x10/0x10
[  378.213437][ T9599]  ? __fget_files+0x206/0x3a0
[  378.213460][ T9599]  ksys_write+0x12b/0x250
[  378.213485][ T9599]  ? __pfx_ksys_write+0x10/0x10
[  378.213519][ T9599]  do_syscall_64+0xcd/0x250
[  378.213541][ T9599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.213564][ T9599] RIP: 0033:0x7fee8458bc1f
[  378.213579][ T9599] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  378.213595][ T9599] RSP: 002b:00007fee85370030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  378.213611][ T9599] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee8458bc1f
[  378.213622][ T9599] RDX: 0000000000000001 RSI: 00007fee853700a0 RDI: 0000000000000005
[  378.213632][ T9599] RBP: 00007fee85370090 R08: 0000000000000000 R09: 0000000000000000
[  378.213642][ T9599] R10: 0000400000000b00 R11: 0000000000000293 R12: 0000000000000001
[  378.213652][ T9599] R13: 0000000000000000 R14: 00007fee847a6160 R15: 00007ffc5760a068
[  378.213675][ T9599]  </TASK>
[  379.181392][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.187798][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.394873][ T9607] libceph: resolve '0.0' (ret=-3): failed
[  379.832000][   T29] audit: type=1326 audit(1740378104.559:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  379.878803][   T29] audit: type=1326 audit(1740378104.559:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  379.938467][   T29] audit: type=1326 audit(1740378104.579:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  379.961687][    C0] vkms_vblank_simulate: vblank timer overrun
[  380.016368][   T29] audit: type=1326 audit(1740378104.579:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  380.039662][    C0] vkms_vblank_simulate: vblank timer overrun
[  380.116020][   T29] audit: type=1326 audit(1740378104.579:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  380.154470][   T29] audit: type=1326 audit(1740378104.579:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  380.232620][   T29] audit: type=1326 audit(1740378104.579:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9610 comm="syz.5.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8458d169 code=0x7ffc0000
[  380.343966][ T9628] libceph: resolve '0.0' (ret=-3): failed
[  380.403231][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  380.415097][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:3 Not tainted 6.14.0-rc4-syzkaller #0
[  380.415128][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  380.415142][ T5831] Workqueue: hci5 hci_rx_work
[  380.415176][ T5831] Call Trace:
[  380.415182][ T5831]  <TASK>
[  380.415189][ T5831]  dump_stack_lvl+0x16c/0x1f0
[  380.415210][ T5831]  sysfs_warn_dup+0x7f/0xa0
[  380.415238][ T5831]  sysfs_create_dir_ns+0x24d/0x2b0
[  380.415262][ T5831]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  380.415287][ T5831]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  380.415306][ T5831]  ? kobject_add_internal+0x12d/0x990
[  380.415331][ T5831]  ? do_raw_spin_unlock+0x172/0x230
[  380.415353][ T5831]  kobject_add_internal+0x2c8/0x990
[  380.415383][ T5831]  kobject_add+0x16f/0x240
[  380.415406][ T5831]  ? __pfx_kobject_add+0x10/0x10
[  380.415427][ T5831]  ? class_to_subsys+0x3e/0x160
[  380.415451][ T5831]  ? do_raw_spin_unlock+0x172/0x230
[  380.415468][ T5831]  ? kobject_put+0xab/0x5a0
[  380.415497][ T5831]  device_add+0x289/0x1a70
[  380.415520][ T5831]  ? __pfx_dev_set_name+0x10/0x10
[  380.415545][ T5831]  ? __pfx_device_add+0x10/0x10
[  380.415567][ T5831]  ? mgmt_send_event_skb+0x2f2/0x460
[  380.415599][ T5831]  hci_conn_add_sysfs+0x17e/0x230
[  380.415627][ T5831]  le_conn_complete_evt+0x107f/0x1da0
[  380.415656][ T5831]  ? __pfx_lock_release+0x10/0x10
[  380.415679][ T5831]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  380.415704][ T5831]  ? __mutex_lock+0x1cc/0xb10
[  380.415733][ T5831]  hci_le_conn_complete_evt+0x23c/0x370
[  380.415763][ T5831]  hci_le_meta_evt+0x2e2/0x5d0
[  380.415788][ T5831]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  380.415816][ T5831]  hci_event_packet+0x666/0x1180
[  380.415843][ T5831]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  380.415869][ T5831]  ? __pfx_hci_event_packet+0x10/0x10
[  380.415892][ T5831]  ? mark_held_locks+0x9f/0xe0
[  380.415917][ T5831]  ? kcov_remote_start+0x3cf/0x6e0
[  380.415943][ T5831]  ? lockdep_hardirqs_on+0x7c/0x110
[  380.415975][ T5831]  hci_rx_work+0x2c5/0x16b0
[  380.416001][ T5831]  ? process_one_work+0x921/0x1ba0
[  380.416032][ T5831]  process_one_work+0x9c5/0x1ba0
[  380.416068][ T5831]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  380.416096][ T5831]  ? __pfx_process_one_work+0x10/0x10
[  380.416130][ T5831]  ? assign_work+0x1a0/0x250
[  380.416157][ T5831]  worker_thread+0x6c8/0xf00
[  380.416192][ T5831]  ? __pfx_worker_thread+0x10/0x10
[  380.416216][ T5831]  kthread+0x3af/0x750
[  380.416237][ T5831]  ? __pfx_kthread+0x10/0x10
[  380.416257][ T5831]  ? lock_acquire+0x2f/0xb0
[  380.416284][ T5831]  ? __pfx_kthread+0x10/0x10
[  380.416306][ T5831]  ret_from_fork+0x45/0x80
[  380.416328][ T5831]  ? __pfx_kthread+0x10/0x10
[  380.416348][ T5831]  ret_from_fork_asm+0x1a/0x30
[  380.416379][ T5831]  </TASK>
[  380.677110][    C0] vkms_vblank_simulate: vblank timer overrun
[  380.697514][ T5831] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  380.713214][ T5831] Bluetooth: hci5: failed to register connection device
[  381.868658][ T9645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.989'.
[  381.877631][   T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  382.065578][   T25] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  382.076794][   T25] usb 2-1: config 0 has no interface number 0
[  382.256169][   T25] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  382.277632][   T25] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  382.296135][   T25] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  382.318077][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.327561][   T25] usb 2-1: Product: syz
[  382.339913][   T25] usb 2-1: Manufacturer: syz
[  382.345088][   T25] usb 2-1: SerialNumber: syz
[  382.390855][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  382.404263][   T25] usb 2-1: config 0 descriptor??
[  382.410748][ T9638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  382.422866][   T25] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  382.805237][   T25] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  382.913914][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  382.916024][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'.
[  383.139184][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  383.139201][   T29] audit: type=1400 audit(1740378107.839:577): avc:  denied  { write } for  pid=9634 comm="syz.1.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  384.059452][ T5194] udevd[5194]: worker [9162] terminated by signal 32 (Unknown signal 32)
[  384.072129][    T8] usb 2-1: USB disconnect, device number 22
[  384.097799][ T5194] udevd[5194]: worker [9162] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.69/ttyUSB0'
[  384.131206][ T9664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.163778][    T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  384.191991][    T8] cyberjack 2-1:0.69: device disconnected
[  384.970426][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  385.012615][   T29] audit: type=1400 audit(1740378109.739:578): avc:  denied  { bind } for  pid=9669 comm="syz.2.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  385.160076][ T9674] libceph: resolve '0.0' (ret=-3): failed
[  385.250445][    T9] usb 6-1: config 0 has no interfaces?
[  385.419497][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  385.504118][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.842026][    T9] usb 6-1: config 0 descriptor??
[  386.960038][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  387.281268][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1006'.
[  387.291343][ T9699] ALSA: mixer_oss: invalid OSS volume 'L'
[  387.331958][  T117] usb 6-1: USB disconnect, device number 2
[  388.313360][ T9713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.581377][  T117] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  388.592452][   T29] audit: type=1400 audit(1740378113.309:579): avc:  denied  { read write } for  pid=9689 comm="syz.2.1005" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  388.628558][   T29] audit: type=1400 audit(1740378113.309:580): avc:  denied  { open } for  pid=9689 comm="syz.2.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  388.812246][   T29] audit: type=1400 audit(1740378113.309:581): avc:  denied  { map } for  pid=9689 comm="syz.2.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  388.835156][    C1] vkms_vblank_simulate: vblank timer overrun
[  388.842715][   T29] audit: type=1400 audit(1740378113.309:582): avc:  denied  { execute } for  pid=9689 comm="syz.2.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  388.867457][  T117] usb 6-1: Using ep0 maxpacket: 32
[  388.873035][   T29] audit: type=1400 audit(1740378113.529:583): avc:  denied  { ioctl } for  pid=9689 comm="syz.2.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  388.905220][  T117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  388.923304][  T117] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  388.937144][  T117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.956676][  T117] usb 6-1: Product: syz
[  388.963963][  T117] usb 6-1: Manufacturer: syz
[  388.968673][  T117] usb 6-1: SerialNumber: syz
[  388.972181][ T9720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9720 comm=syz.2.1011
[  388.991495][ T9720] overlayfs: failed to resolve './file1': -2
[  389.005810][  T117] usb 6-1: config 0 descriptor??
[  389.053938][  T117] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  389.086195][ T9720] Failed to initialize the IGMP autojoin socket (err -2)
[  389.295157][ T9729] libceph: resolve '0.0' (ret=-3): failed
[  389.618484][  T117] usb 6-1: USB disconnect, device number 3
[  389.624642][ T3510] usb 6-1: Failed to submit usb control message: -71
[  389.649756][ T3510] usb 6-1: unable to send the bmi data to the device: -71
[  389.657053][ T3510] usb 6-1: unable to get target info from device
[  389.663983][ T3510] usb 6-1: could not get target info (-71)
[  389.673282][ T3510] usb 6-1: could not probe fw (-71)
[  390.437142][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'.
[  390.882349][ T9748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9748 comm=syz.0.1020
[  390.897529][ T9748] overlayfs: failed to resolve './file1': -2
[  392.006997][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  392.366927][ T9748] Failed to initialize the IGMP autojoin socket (err -2)
[  392.585314][ T9768] libceph: resolve '0.0' (ret=-3): failed
[  392.835450][   T29] audit: type=1400 audit(1740378117.549:584): avc:  denied  { write } for  pid=9757 comm="syz.5.1023" path="socket:[23129]" dev="sockfs" ino=23129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  392.884965][ T9758] ubi: mtd0 is already attached to ubi31
[  392.963585][ T9775] bridge1: entered promiscuous mode
[  392.968819][ T9775] bridge1: entered allmulticast mode
[  393.109708][ T5875] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  393.562432][ T9780] ptrace attach of "./syz-executor exec"[5827] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  393.851613][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  394.024488][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64
[  394.039572][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  394.049484][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.059278][ T5875] usb 4-1: config 0 descriptor??
[  394.088150][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1030'.
[  394.401640][ T5875] ath6kl: Failed to submit usb control message: -71
[  394.418521][   T29] audit: type=1326 audit(1740378119.119:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  394.447812][ T5875] ath6kl: unable to send the bmi data to the device: -71
[  394.455858][ T5875] ath6kl: Unable to send get target info: -71
[  394.464099][ T5875] ath6kl: Failed to init ath6kl core: -71
[  394.502985][   T29] audit: type=1326 audit(1740378119.119:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  394.538248][ T5875] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  394.593299][ T9795] tmpfs: Unknown parameter ''
[  394.708954][ T5875] usb 4-1: USB disconnect, device number 15
[  394.897956][   T29] audit: type=1326 audit(1740378119.119:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  394.945894][   T29] audit: type=1326 audit(1740378119.119:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  394.976681][   T29] audit: type=1326 audit(1740378119.119:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  395.452438][   T29] audit: type=1326 audit(1740378119.119:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9769 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313b8d169 code=0x7ffc0000
[  395.640777][ T9806] pim6reg1: entered promiscuous mode
[  395.664518][ T9806] pim6reg1: entered allmulticast mode
[  395.756693][ T9811] tmpfs: Unknown parameter ''
[  396.867353][   T29] audit: type=1400 audit(1740378121.019:591): avc:  denied  { bind } for  pid=9814 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  397.141050][ T9822] FAULT_INJECTION: forcing a failure.
[  397.141050][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.154161][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.2.1041 Not tainted 6.14.0-rc4-syzkaller #0
[  397.154174][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  397.154180][ T9822] Call Trace:
[  397.154183][ T9822]  <TASK>
[  397.154187][ T9822]  dump_stack_lvl+0x16c/0x1f0
[  397.154205][ T9822]  should_fail_ex+0x50a/0x650
[  397.154224][ T9822]  _copy_from_user+0x2e/0xd0
[  397.154236][ T9822]  memdup_user+0x71/0xd0
[  397.154252][ T9822]  strndup_user+0x78/0xe0
[  397.154267][ T9822]  __x64_sys_mount+0x138/0x310
[  397.154280][ T9822]  ? __pfx___x64_sys_mount+0x10/0x10
[  397.154295][ T9822]  do_syscall_64+0xcd/0x250
[  397.154309][ T9822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.154325][ T9822] RIP: 0033:0x7fa45df8d169
[  397.154334][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.154345][ T9822] RSP: 002b:00007fa45edd9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  397.154355][ T9822] RAX: ffffffffffffffda RBX: 00007fa45e1a6080 RCX: 00007fa45df8d169
[  397.154361][ T9822] RDX: 00004000000002c0 RSI: 0000400000000240 RDI: 0000000000000000
[  397.154367][ T9822] RBP: 00007fa45edd9090 R08: 0000400000000300 R09: 0000000000000000
[  397.154373][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.154379][ T9822] R13: 0000000000000000 R14: 00007fa45e1a6080 R15: 00007ffcccb16748
[  397.154391][ T9822]  </TASK>
[  397.302567][    C0] vkms_vblank_simulate: vblank timer overrun
[  397.744958][ T5905] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  397.780513][    T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  398.027104][    T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  398.086652][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.179345][    T8] usb 1-1: Product: syz
[  398.239638][ T5905] usb 4-1: Using ep0 maxpacket: 16
[  398.251284][    T8] usb 1-1: Manufacturer: syz
[  398.256155][ T5905] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  398.265797][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.268463][    T8] usb 1-1: SerialNumber: syz
[  398.278790][ T5905] usb 4-1: Product: syz
[  398.387010][    T8] r8152-cfgselector 1-1: Unknown version 0x0000
[  398.387411][ T5905] usb 4-1: Manufacturer: syz
[  398.393704][    T8] r8152-cfgselector 1-1: config 0 descriptor??
[  398.406128][ T5905] usb 4-1: SerialNumber: syz
[  398.417716][ T5905] usb 4-1: config 0 descriptor??
[  399.073789][ T5905] as10x_usb: device has been detected
[  399.182019][    T8] r8152-cfgselector 1-1: Unknown version 0x0000
[  399.228138][    T8] r8152-cfgselector 1-1: bad CDC descriptors
[  399.327716][ T9846] tmpfs: Unknown parameter ''
[  399.543348][    T8] r8152-cfgselector 1-1: USB disconnect, device number 21
[  399.592856][ T5905] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  400.379791][ T9842] random: crng reseeded on system resumption
[  400.381928][   T29] audit: type=1400 audit(1740378125.099:592): avc:  denied  { write } for  pid=9829 comm="syz.3.1044" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  400.416873][ T5905] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  400.430337][ T9852] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 9852 comm: syz.2.1051)
[  400.572206][   T29] audit: type=1800 audit(1740378125.189:593): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1051" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=19113 res=0 errno=0
[  400.583612][ T9855] tmpfs: Unknown parameter ''
[  400.694974][ T5905] as10x_usb: error during firmware upload part1
[  400.706735][ T5905] Registered device Sky IT Digital Key (green led)
[  401.815477][ T9863] libceph: resolve '0.0' (ret=-3): failed
[  402.228108][ T5905] usb 4-1: USB disconnect, device number 16
[  402.404627][ T5905] Unregistered device Sky IT Digital Key (green led)
[  402.405612][ T5905] as10x_usb: device has been disconnected
[  402.567545][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1058'.
[  403.417749][   T29] audit: type=1400 audit(1740378128.129:594): avc:  denied  { map } for  pid=9889 comm="syz.0.1062" path="socket:[23439]" dev="sockfs" ino=23439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  403.487829][ T9896] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 9896 comm: syz.2.1064)
[  403.499323][   T29] audit: type=1800 audit(1740378128.219:595): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1064" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=19113 res=0 errno=0
[  403.625542][ T9898] wireguard: wireguard0: Could not create IPv4 socket
[  403.626040][   T29] audit: type=1400 audit(1740378128.349:596): avc:  denied  { bind } for  pid=9900 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  403.654847][ T9898] wireguard0: entered promiscuous mode
[  403.661522][ T9898] wireguard0: entered allmulticast mode
[  403.908805][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[  404.322871][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  404.698154][ T5875] usb 1-1: device descriptor read/64, error -71
[  405.030127][ T5875] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  405.178884][ T9919] libceph: resolve '0.0' (ret=-3): failed
[  405.440312][ T5875] usb 1-1: device descriptor read/64, error -71
[  405.549928][ T5875] usb usb1-port1: attempt power cycle
[  405.624022][ T9921] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[9921]
[  405.900002][ T5875] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  405.941865][ T5875] usb 1-1: device descriptor read/8, error -71
[  406.361861][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  406.533796][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  406.572643][ T5905] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  406.674382][ T5875] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  406.685551][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.715308][ T5905] usb 2-1: config 0 descriptor??
[  406.792657][ T9943] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 9943 comm: syz.0.1077)
[  406.849214][   T29] audit: type=1800 audit(1740378131.569:597): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1077" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=25651 res=0 errno=0
[  406.909865][ T5875] usb 1-1: device not accepting address 25, error -71
[  406.936371][ T5875] usb usb1-port1: unable to enumerate USB device
[  407.876268][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.885466][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.916717][ T5905] usbhid 2-1:0.0: can't add hid device: -71
[  407.932723][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  408.050965][ T5905] usb 2-1: USB disconnect, device number 23
[  408.081903][   T29] audit: type=1400 audit(1740378132.789:598): avc:  denied  { read } for  pid=9957 comm="syz.5.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  408.828558][ T9960] libceph: resolve '0.0' (ret=-3): failed
[  409.259022][ T9974] syzkaller1: entered promiscuous mode
[  409.259051][ T9974] syzkaller1: entered allmulticast mode
[  410.282831][ T9987] ptrace attach of "./syz-executor exec"[5828] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  410.522081][   T29] audit: type=1400 audit(1740378135.249:599): avc:  denied  { nlmsg_read } for  pid=9989 comm="syz.5.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  410.613098][    C1] vkms_vblank_simulate: vblank timer overrun
[  410.824212][ T9996] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 9996 comm: syz.0.1089)
[  410.834789][   T29] audit: type=1800 audit(1740378135.569:600): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1089" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=25651 res=0 errno=0
[  412.038499][T10015] libceph: resolve '0.0' (ret=-3): failed
[  412.307281][T10006] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  412.438374][T10018] block device autoloading is deprecated and will be removed.
[  412.448805][T10018] syz.3.1096: attempt to access beyond end of device
[  412.448805][T10018] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  412.517405][T10019] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[  412.524111][T10019] PKCS7: Only support pkcs7_signedData type
[  414.177715][T10038] ptrace attach of "./syz-executor exec"[5828] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  414.938356][T10048] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 10048 comm: syz.5.1104)
[  415.048165][   T29] audit: type=1800 audit(1740378139.769:601): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1104" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=25802 res=0 errno=0
[  415.310516][ T6783] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  415.570219][ T6783] usb 2-1: Using ep0 maxpacket: 32
[  415.587316][ T6783] usb 2-1: config 42 has an invalid descriptor of length 205, skipping remainder of the config
[  415.615270][ T6783] usb 2-1: config 42 has 0 interfaces, different from the descriptor's value: 1
[  415.652809][ T6783] usb 2-1: New USB device found, idVendor=05a9, idProduct=8450, bcdDevice=2c.a0
[  415.666385][ T6783] usb 2-1: New USB device strings: Mfr=83, Product=2, SerialNumber=3
[  415.693034][ T6783] usb 2-1: Product: syz
[  415.697460][ T6783] usb 2-1: Manufacturer: syz
[  415.703639][ T6783] usb 2-1: SerialNumber: syz
[  415.953448][ T6783] usb 2-1: USB disconnect, device number 24
[  416.505672][  T117] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  416.840538][  T117] usb 4-1: Using ep0 maxpacket: 32
[  416.853479][  T117] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  416.868075][  T117] usb 4-1: config 0 has no interface number 0
[  416.876565][  T117] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  416.889040][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  416.906241][  T117] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  416.925628][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[  416.946122][  T117] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  417.009044][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  417.031385][  T117] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  417.043434][  T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.053736][  T117] usb 4-1: Product: syz
[  417.058014][  T117] usb 4-1: Manufacturer: syz
[  417.065455][  T117] usb 4-1: SerialNumber: syz
[  417.078197][  T117] usb 4-1: config 0 descriptor??
[  417.090645][T10066] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  417.102243][T10066] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  417.142651][  T117] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  417.181685][  T117] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  418.097481][T10086] ptrace attach of "./syz-executor exec"[5828] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  418.332284][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'.
[  418.600995][T10092] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 10092 comm: syz.1.1117)
[  418.781928][   T29] audit: type=1800 audit(1740378143.389:602): pid=10092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1117" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=25957 res=0 errno=0
[  419.345512][T10098] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[10098]
[  420.802624][  T117] usb 4-1: USB disconnect, device number 17
[  421.572117][T10122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  421.867546][T10130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.192407][T10139] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 10139 comm: syz.2.1130)
[  422.205480][   T29] audit: type=1800 audit(1740378146.939:603): pid=10139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1130" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=19113 res=0 errno=0
[  422.260746][T10144] libceph: resolve '0.0' (ret=-3): failed
[  423.787427][   T29] audit: type=1400 audit(1740378148.489:604): avc:  denied  { create } for  pid=10147 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  424.403752][   T29] audit: type=1400 audit(1740378149.129:605): avc:  denied  { write } for  pid=10147 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  424.787004][T10167] libceph: resolve '0.0' (ret=-3): failed
[  425.001441][T10171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.621629][T10176] libceph: resolve '0.0' (ret=-3): failed
[  425.809869][T10183] tmpfs: Unknown parameter ''
[  426.002495][  T117] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  426.166431][  T117] usb 2-1: Using ep0 maxpacket: 32
[  426.183669][  T117] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  426.192550][  T117] usb 2-1: config 0 has no interface number 0
[  426.432771][  T117] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  426.435142][T10190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10190 comm=syz.2.1147
[  426.483873][  T117] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  426.498582][  T117] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  426.511648][T10190] overlayfs: failed to resolve './file1': -2
[  426.520267][  T117] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[  426.532000][  T117] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  426.544730][  T117] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  426.558474][  T117] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  426.607346][  T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.631496][T10190] Failed to initialize the IGMP autojoin socket (err -2)
[  426.794147][  T117] usb 2-1: Product: syz
[  426.798819][  T117] usb 2-1: Manufacturer: syz
[  426.931194][  T117] usb 2-1: SerialNumber: syz
[  426.952781][  T117] usb 2-1: config 0 descriptor??
[  426.958515][T10178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  426.976910][T10178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  427.059818][T10202] tmpfs: Unknown parameter ''
[  427.331025][  T117] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  427.699730][  T117] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  427.889372][T10214] libceph: resolve '0.0' (ret=-3): failed
[  428.135557][  T117] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  428.460301][T10220] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[10220]
[  429.068788][  T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.079998][  T117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.091215][  T117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.105705][  T117] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.128822][  T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.151532][  T117] usb 4-1: config 0 descriptor??
[  429.648464][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.662744][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.674073][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.681831][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.693500][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.701615][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.713406][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.723622][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.735457][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.744111][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.756422][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.767216][  T117] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  429.797554][  T117] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  429.906086][T10234] tmpfs: Unknown parameter ''
[  430.233146][  T117] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  430.273861][  T117] usb 4-1: USB disconnect, device number 18
[  430.703797][    T8] usb 2-1: USB disconnect, device number 25
[  432.085117][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1170'.
[  432.293856][T10270] tmpfs: Unknown parameter ''
[  432.327144][    T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  432.700967][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  432.721310][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1173'.
[  432.731689][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64
[  432.765470][    T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  432.798371][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.839183][    T8] usb 1-1: config 0 descriptor??
[  433.825887][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.841074][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.409890][    T8] ath6kl: Failed to submit usb control message: -71
[  434.436189][    T8] ath6kl: unable to send the bmi data to the device: -71
[  434.473327][    T8] ath6kl: Unable to send get target info: -71
[  434.599581][    T8] ath6kl: Failed to init ath6kl core: -71
[  434.650029][    T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  434.909441][    T8] usb 1-1: USB disconnect, device number 26
[  436.585510][T10305] 9pnet_fd: p9_fd_create_tcp (10305): problem creating socket
[  436.587089][   T29] audit: type=1400 audit(1740378161.309:606): avc:  denied  { mounton } for  pid=10303 comm="syz.0.1181" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[  436.635559][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'.
[  437.114803][ T5874] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  437.312302][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short
[  437.398125][ T5874] usb 1-1: not running at top speed; connect to a high speed hub
[  437.529366][ T5874] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  437.548424][ T5874] usb 1-1: config 4 has an invalid descriptor of length 55, skipping remainder of the config
[  437.676382][ T5874] usb 1-1: config 4 has no interface number 0
[  437.685427][ T5874] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  437.695011][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.703397][ T5874] usb 1-1: Product: syz
[  437.707611][ T5874] usb 1-1: Manufacturer: syz
[  437.717820][ T5874] usb 1-1: SerialNumber: syz
[  438.694818][T10327] ptrace attach of "./syz-executor exec"[9423] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  439.223893][ T5874] usb 1-1: USB disconnect, device number 27
[  440.158796][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.167173][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  440.902547][T10334] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  441.869809][ T5875] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  442.177075][ T5875] usb 6-1: config 0 has no interfaces?
[  442.217940][ T5875] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  442.259667][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.281397][ T5875] usb 6-1: config 0 descriptor??
[  442.892278][T10367] kernel read not supported for file / 
œ7³ÏüâW)ës“§Ç-ë (pid: 10367 comm: syz.0.1198)
[  442.925576][   T29] audit: type=1800 audit(1740378167.649:607): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1198" name=20019C1437B3CFFCC3A25729EB7393A7C72DEB dev="mqueue" ino=25651 res=0 errno=0
[  443.456165][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'.
[  443.473871][T10373] libceph: resolve '0.0' (ret=-3): failed
[  443.653001][T10378] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  443.664261][ T3510] Bluetooth: hci6: Frame reassembly failed (-84)
[  444.370337][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1204'.
[  445.389371][T10266] Set syz1 is full, maxelem 65536 reached
[  445.693097][ T5133] Bluetooth: hci6: command 0x1003 tx timeout
[  445.702404][   T54] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  446.973883][T10406] tmpfs: Unknown parameter ''
[  447.252234][ T5874] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  447.330236][ T5875] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  447.560359][ T5874] usb 2-1: Using ep0 maxpacket: 32
[  447.614950][ T5874] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  447.683903][ T5875] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  447.687629][ T5874] usb 2-1: config 0 has no interface number 0
[  447.709408][ T5874] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  447.716195][ T5875] usb 4-1: config 0 has no interface number 0
[  447.759740][ T5874] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  447.775466][ T5875] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  447.795522][ T5874] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  447.800106][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.813768][ T5874] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[  447.813802][ T5874] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  447.814121][ T5874] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  447.864013][ T5874] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  447.936264][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.993772][T10415] ip6gre1: entered allmulticast mode
[  448.000732][ T6783] usb 6-1: USB disconnect, device number 4
[  448.025704][T10411] tmpfs: Unknown parameter ''
[  448.032853][ T5874] usb 2-1: Product: syz
[  448.037113][ T5874] usb 2-1: Manufacturer: syz
[  448.271773][ T5874] usb 2-1: SerialNumber: syz
[  448.285606][ T5874] usb 2-1: config 0 descriptor??
[  448.295430][T10405] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  448.305136][T10405] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  448.324216][ T5874] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  448.342281][ T5874] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out.
[  448.363391][ T5875] usb 4-1: Product: syz
[  448.437253][ T5875] usb 4-1: Manufacturer: syz
[  448.457476][ T5875] usb 4-1: SerialNumber: syz
[  448.484014][ T5875] usb 4-1: config 0 descriptor??
[  448.500691][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'.
[  448.536883][ T5875] peak_usb 4-1:0.64: probe with driver peak_usb failed with error 64
[  448.875351][ T5874] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  449.485444][T10433] ptrace attach of "./syz-executor exec"[5828] was attempted by "./syz-executor exec"[10433]
[  449.665312][ T5874] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  449.735763][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.769853][ T5874] usb 6-1: Product: syz
[  449.776675][ T5874] usb 6-1: Manufacturer: syz
[  449.781663][ T5874] usb 6-1: SerialNumber: syz
[  449.859952][ T5874] r8152-cfgselector 6-1: Unknown version 0x0000
[  449.870137][  T117] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  449.875198][ T5874] r8152-cfgselector 6-1: config 0 descriptor??
[  449.877824][ T1876] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  450.111752][  T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  450.121997][  T117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  450.130350][ T5874] r8152-cfgselector 6-1: Unknown version 0x0000
[  450.131802][  T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  450.144131][ T5874] r8152-cfgselector 6-1: bad CDC descriptors
[  450.149183][  T117] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  450.164584][  T117] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  450.174648][  T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.186022][  T117] usb 1-1: config 0 descriptor??
[  450.260278][ T1876] usb 3-1: Using ep0 maxpacket: 16
[  450.267157][ T1876] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.278603][ T1876] usb 3-1: config 0 interface 0 has no altsetting 0
[  450.285358][ T1876] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  450.294953][ T1876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.305527][ T1876] usb 3-1: config 0 descriptor??
[  450.354743][ T5875] r8152-cfgselector 6-1: USB disconnect, device number 5
[  450.393870][  T117] hdpvr 1-1:0.0: firmware version 0x6d dated ð¦Â´í÷ªŒ’e\@^ë1«yØÀpŸHoîAÝqÎyÜάۛXñH¢
[  450.405552][  T117] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  450.599419][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.607122][    T8] usb 4-1: USB disconnect, device number 19
[  450.631750][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.667724][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'.
[  450.678571][  T117] hdpvr 1-1:0.0: device init failed
[  450.690555][  T117] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  450.717615][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.717767][  T117] usb 1-1: USB disconnect, device number 28
[  450.732830][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.137691][ T1876] usbhid 3-1:0.0: can't add hid device: -71
[  451.158211][ T1876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  451.214126][ T1876] usb 3-1: USB disconnect, device number 22
[  451.251418][  T117] usb 2-1: USB disconnect, device number 26
[  451.753924][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  451.923049][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'.
[  452.275773][    T8] usb 4-1: config 0 has no interfaces?
[  452.282028][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  452.300125][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.383492][    T8] usb 4-1: config 0 descriptor??
[  452.534149][T10471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10471 comm=syz.0.1232
[  452.612086][T10468] overlayfs: failed to resolve './file1': -2
[  454.188850][T10468] Failed to initialize the IGMP autojoin socket (err -2)
[  454.425953][ T5874] usb 4-1: USB disconnect, device number 20
[  454.700616][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  455.211993][    T8] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  455.229956][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.251485][    T8] usb 6-1: Product: syz
[  455.258898][    T8] usb 6-1: Manufacturer: syz
[  455.474571][    T8] usb 6-1: SerialNumber: syz
[  455.587313][    T8] r8152-cfgselector 6-1: Unknown version 0x0000
[  455.599731][    T8] r8152-cfgselector 6-1: config 0 descriptor??
[  455.828186][    T8] r8152-cfgselector 6-1: Unknown version 0x0000
[  455.838708][    T8] r8152-cfgselector 6-1: bad CDC descriptors
[  456.467855][T10504] ubi: mtd0 is already attached to ubi31
[  456.562306][ T6783] r8152-cfgselector 6-1: USB disconnect, device number 6
[  456.851813][   T29] audit: type=1400 audit(1740378181.409:608): avc:  denied  { getopt } for  pid=10507 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  457.142601][T10515] FAULT_INJECTION: forcing a failure.
[  457.142601][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  457.158801][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.2.1244 Not tainted 6.14.0-rc4-syzkaller #0
[  457.158824][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  457.158835][T10515] Call Trace:
[  457.158840][T10515]  <TASK>
[  457.158847][T10515]  dump_stack_lvl+0x16c/0x1f0
[  457.158874][T10515]  should_fail_ex+0x50a/0x650
[  457.158904][T10515]  _copy_to_user+0x32/0xd0
[  457.158924][T10515]  simple_read_from_buffer+0xd0/0x160
[  457.158951][T10515]  proc_fail_nth_read+0x198/0x270
[  457.158976][T10515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.159001][T10515]  ? rw_verify_area+0xcf/0x680
[  457.159025][T10515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  457.159048][T10515]  vfs_read+0x1df/0xbf0
[  457.159072][T10515]  ? __fget_files+0x1fc/0x3a0
[  457.159089][T10515]  ? __pfx___mutex_lock+0x10/0x10
[  457.159109][T10515]  ? __pfx_vfs_read+0x10/0x10
[  457.159142][T10515]  ? __fget_files+0x206/0x3a0
[  457.159166][T10515]  ksys_read+0x12b/0x250
[  457.159190][T10515]  ? __pfx_ksys_read+0x10/0x10
[  457.159224][T10515]  do_syscall_64+0xcd/0x250
[  457.159246][T10515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.159268][T10515] RIP: 0033:0x7fa45df8bb7c
[  457.159282][T10515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  457.159299][T10515] RSP: 002b:00007fa45edfa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  457.159316][T10515] RAX: ffffffffffffffda RBX: 00007fa45e1a5fa0 RCX: 00007fa45df8bb7c
[  457.159327][T10515] RDX: 000000000000000f RSI: 00007fa45edfa0a0 RDI: 0000000000000004
[  457.159337][T10515] RBP: 00007fa45edfa090 R08: 0000000000000000 R09: 0000000000000000
[  457.159347][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  457.159358][T10515] R13: 0000000000000000 R14: 00007fa45e1a5fa0 R15: 00007ffcccb16748
[  457.159382][T10515]  </TASK>
[  457.672304][T10519] libceph: resolve '0.0' (ret=-3): failed
[  458.430593][ T5905] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  458.671500][ T5905] usb 3-1: config 0 has no interfaces?
[  458.707395][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  458.719654][  T117] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  458.745033][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.794793][ T5905] usb 3-1: config 0 descriptor??
[  459.039994][  T117] usb 4-1: Using ep0 maxpacket: 32
[  459.826018][T10539] Failed to initialize the IGMP autojoin socket (err -2)
[  459.836192][  T117] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  459.851048][  T117] usb 4-1: config 0 has no interface number 0
[  460.829098][  T117] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  460.855972][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  461.520672][T10546] ptrace attach of "./syz-executor exec"[5828] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  461.564949][  T117] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  461.811084][    T8] usb 3-1: USB disconnect, device number 23
[  462.101336][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024
[  462.113761][  T117] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  462.187147][  T117] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  462.212273][  T117] usb 4-1: string descriptor 0 read error: -71
[  462.230295][  T117] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  462.304124][  T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.351894][  T117] usb 4-1: config 0 descriptor??
[  462.358302][  T117] usb 4-1: can't set config #0, error -71
[  462.410664][  T117] usb 4-1: USB disconnect, device number 21
[  462.605698][T10566] mkiss: ax0: crc mode is auto.
[  464.969989][  T117] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  465.147326][ T1876] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  465.743429][ T1876] usb 6-1: Using ep0 maxpacket: 8
[  466.080452][ T1876] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  466.112736][ T1876] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  466.140131][  T117] usb 4-1: device descriptor read/all, error -71
[  466.164100][ T1876] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  466.173628][ T1876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  466.183317][ T1876] usb 6-1: SerialNumber: syz
[  466.204179][ T1876] cdc_acm 6-1:1.0: skipping garbage
[  466.220870][ T1876] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  466.230699][ T1876] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  466.237344][ T1876] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  466.992751][T10590] VFS: could not find a valid V7 on nullb0.
[  467.367584][ T5905] usb 6-1: USB disconnect, device number 7
[  468.221935][T10603] sd 0:0:1:0: device reset
[  468.919602][ T5875] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  469.089778][ T6783] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  469.664157][ T5875] usb 1-1: config 0 has no interfaces?
[  469.674407][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  469.713429][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.717189][ T6783] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  469.733729][ T5875] usb 1-1: config 0 descriptor??
[  469.779373][ T6783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.104134][ T6783] usb 4-1: config 0 descriptor??
[  470.118704][T10626] libceph: resolve '0.0' (ret=-3): failed
[  470.136941][ T6783] cp210x 4-1:0.0: cp210x converter detected
[  470.645312][T10632] VFS: could not find a valid V7 on nullb0.
[  471.732173][T10640] Failed to initialize the IGMP autojoin socket (err -2)
[  472.096543][ T6783] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  472.120720][ T5875] usb 1-1: USB disconnect, device number 29
[  472.214687][ T6783] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  472.387442][   T29] audit: type=1400 audit(1740378197.109:609): avc:  denied  { ioctl } for  pid=10642 comm="syz.2.1281" path="socket:[28142]" dev="sockfs" ino=28142 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  472.502733][   T29] audit: type=1400 audit(1740378197.149:610): avc:  denied  { write } for  pid=10642 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  472.523132][   T29] audit: type=1400 audit(1740378197.149:611): avc:  denied  { read } for  pid=10642 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1
[  472.562299][T10645] Failed to initialize the IGMP autojoin socket (err -2)
[  472.618002][ T6783] usb 4-1: cp210x converter now attached to ttyUSB0
[  473.369613][   T29] audit: type=1400 audit(1740378197.449:612): avc:  denied  { read write } for  pid=10646 comm="syz.0.1282" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  473.624523][ T6783] usb 4-1: USB disconnect, device number 24
[  473.635141][   T29] audit: type=1400 audit(1740378197.449:613): avc:  denied  { open } for  pid=10646 comm="syz.0.1282" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  473.693034][ T6783] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  474.100871][ T6783] cp210x 4-1:0.0: device disconnected
[  474.597069][T10669] Failed to initialize the IGMP autojoin socket (err -2)
[  475.692854][T10675] ubi: mtd0 is already attached to ubi31
[  475.830145][ T1876] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  476.097734][T10693] mkiss: ax0: crc mode is auto.
[  476.570857][    T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  476.597664][ T1876] usb 4-1: config 0 has an invalid interface number: 81 but max is 0
[  476.627098][ T1876] usb 4-1: config 0 has no interface number 0
[  476.653336][ T1876] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=84.1a
[  476.710629][ T1876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.720768][ T1876] usb 4-1: Product: syz
[  476.773095][ T1876] usb 4-1: Manufacturer: syz
[  476.777731][ T1876] usb 4-1: SerialNumber: syz
[  476.792392][    T8] usb 1-1: config 0 has no interfaces?
[  476.797923][    T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  476.808138][ T1876] usb 4-1: config 0 descriptor??
[  476.815354][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.880357][    T8] usb 1-1: config 0 descriptor??
[  476.931060][ T1876] rtsx_usb 4-1:0.81: probe with driver rtsx_usb failed with error -22
[  477.287813][ T1876] usb 4-1: USB disconnect, device number 25
[  477.958364][T10705] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  478.331031][ T3510] Bluetooth: hci6: Frame reassembly failed (-84)
[  478.389822][T10707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10707 comm=syz.1.1296
[  478.427060][T10707] overlayfs: failed to resolve './file1': -2
[  478.786408][T10707] Failed to initialize the IGMP autojoin socket (err -2)
[  478.928518][T10724] smc: net device bond0 applied user defined pnetid SYZ0
[  480.237590][ T5133] Bluetooth: hci6: command 0x1003 tx timeout
[  480.237660][   T54] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  480.322344][    T8] usb 1-1: USB disconnect, device number 30
[  481.013040][T10756] Failed to initialize the IGMP autojoin socket (err -2)
[  482.339586][ T1876] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  482.566648][ T1876] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  482.687467][ T1876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.739593][ T1876] usb 2-1: Product: syz
[  482.746940][ T1876] usb 2-1: Manufacturer: syz
[  482.769242][ T1876] usb 2-1: SerialNumber: syz
[  482.804629][ T1876] r8152-cfgselector 2-1: Unknown version 0x0000
[  482.818535][ T1876] r8152-cfgselector 2-1: config 0 descriptor??
[  483.358084][ T1876] r8152-cfgselector 2-1: Unknown version 0x0000
[  483.369115][ T1876] r8152-cfgselector 2-1: bad CDC descriptors
[  483.632962][T10777] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  483.933604][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'.
[  483.986237][ T5905] r8152-cfgselector 2-1: USB disconnect, device number 27
[  484.013097][   T29] audit: type=1400 audit(1740378208.729:614): avc:  denied  { create } for  pid=10786 comm="syz.0.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  484.053616][   T29] audit: type=1400 audit(1740378208.729:615): avc:  denied  { ioctl } for  pid=10780 comm="syz.2.1317" path="socket:[27583]" dev="sockfs" ino=27583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  484.107127][T10790] Failed to initialize the IGMP autojoin socket (err -2)
[  484.201348][   T29] audit: type=1400 audit(1740378208.729:616): avc:  denied  { ioctl } for  pid=10786 comm="syz.0.1318" path="socket:[28529]" dev="sockfs" ino=28529 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  484.677737][   T29] audit: type=1400 audit(1740378209.389:617): avc:  denied  { create } for  pid=10799 comm="syz.5.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  485.911549][T10823] overlayfs: missing 'lowerdir'
[  486.248235][   T29] audit: type=1400 audit(1740378210.949:618): avc:  denied  { getopt } for  pid=10824 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  486.259883][    T8] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  486.326636][T10835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10835 comm=syz.1.1331
[  486.348180][T10835] overlayfs: failed to resolve './file1': -2
[  486.462027][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.502392][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  486.534020][T10835] Failed to initialize the IGMP autojoin socket (err -2)
[  486.549663][ T6783] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  487.043154][    T8] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  487.053951][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.097035][    T8] usb 4-1: config 0 descriptor??
[  487.106319][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  487.113739][    T8] dvb-usb: bulk message failed: -22 (3/0)
[  487.132769][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  487.146824][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  487.156998][    T8] usb 4-1: media controller created
[  487.249985][ T6783] usb 6-1: device descriptor read/64, error -71
[  487.297254][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  487.330412][   T29] audit: type=1400 audit(1740378212.049:619): avc:  denied  { append } for  pid=10817 comm="syz.3.1328" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  487.357741][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  487.409695][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  487.443141][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  487.517072][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  487.541601][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  487.560251][ T6783] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  487.581039][    T8] usb 4-1: USB disconnect, device number 26
[  487.629380][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  487.651281][   T29] audit: type=1400 audit(1740378212.369:620): avc:  denied  { bind } for  pid=10848 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  487.712506][ T6783] usb 6-1: device descriptor read/64, error -71
[  487.849879][ T6783] usb usb6-port1: attempt power cycle
[  488.319666][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  488.409734][ T6783] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  488.558149][ T6783] usb 6-1: device descriptor read/8, error -71
[  489.460246][ T5905] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  489.654407][   T29] audit: type=1400 audit(1740378214.369:621): avc:  denied  { write } for  pid=10873 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  489.683961][ T5905] usb 1-1: device descriptor read/64, error -71
[  489.796793][   T29] audit: type=1400 audit(1740378214.369:622): avc:  denied  { read } for  pid=10873 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  489.875640][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'.
[  490.092839][ T5905] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  490.759643][ T5905] usb 1-1: device descriptor read/64, error -71
[  490.844966][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.874671][T10900] ntfs3(nullb0): Primary boot signature is not NTFS.
[  490.893174][ T5905] usb usb1-port1: attempt power cycle
[  490.896793][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.942548][T10900] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  491.357852][   T29] audit: type=1404 audit(1740378215.969:623): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  491.400459][ T5905] usb 1-1: new high-speed USB device number 33 using dummy_hcd
Feb 24 06:23:36 syzkaller kern.notice kernel: [  491.357852][   T29] audit: type=1404 audit(1740378215.969:623): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
Feb 24 06:23:36 syzkaller kern.info kernel: [  491.400459][ T5905] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  491.628979][   T29] audit: type=1400 audit(1740378216.139:624): avc:  denied  { map_create } for  pid=10908 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
Feb 24 06:23:36 syzkaller kern.notice kernel: [  491.628979][   T29] audit: type=1400 audit(1740378216.139:624): avc:  denied  { map_create } for  pid=10908 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  491.757923][   T29] audit: type=1400 audit(1740378216.169:625): avc:  denied  { create } for  pid=10908 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  491.778399][    C1] vkms_vblank_simulate: vblank timer overrun
[  491.904866][ T5905] usb 1-1: device descriptor read/8, error -71
[  491.911230][   T29] audit: type=1400 audit(1740378216.189:626): avc:  denied  { recv } for  pid=10901 comm="syz.3.1350" saddr=10.128.0.169 src=30006 daddr=10.128.0.145 dest=59222 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  491.937845][   T29] audit: type=1400 audit(1740378216.219:627): avc:  denied  { read } for  pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  491.981096][   T29] audit: type=1400 audit(1740378216.249:628): avc:  denied  { read } for  pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
[  492.040261][ T5875] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  492.077165][   T29] audit: type=1400 audit(1740378216.319:629): avc:  denied  { map_create } for  pid=10908 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  492.159888][   T29] audit: type=1400 audit(1740378216.339:630): avc:  denied  { map_create } for  pid=10908 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  492.226053][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  492.249076][ T5875] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  492.273545][ T5875] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  492.832195][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.277725][ T5875] usb 2-1: Product: syz
[  493.285733][ T5875] usb 2-1: Manufacturer: syz
[  493.291396][ T5875] usb 2-1: SerialNumber: syz
[  493.300235][ T5875] usb 2-1: config 0 descriptor??
[  494.228615][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.256838][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.457593][T10954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10954 comm=syz.3.1363
[  494.482759][T10954] overlayfs: failed to resolve './file1': -2
[  494.756247][   T29] kauditd_printk_skb: 59 callbacks suppressed
[  494.756291][   T29] audit: type=1400 audit(1740378219.479:690): avc:  denied  { mount } for  pid=10955 comm="syz.5.1364" name="/" dev="rpc_pipefs" ino=29930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  494.807208][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.977429][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.074480][T10954] Failed to initialize the IGMP autojoin socket (err -2)
[  495.270339][   T29] audit: type=1400 audit(1740378219.989:691): avc:  denied  { unlink } for  pid=10969 comm="syz.5.1368" name="#14" dev="tmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  495.352193][T10976] libceph: resolve '0.0' (ret=-3): failed
[  495.500540][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'.
[  495.536048][   T29] audit: type=1400 audit(1740378220.059:692): avc:  denied  { create } for  pid=10968 comm="syz.2.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  495.574275][   T29] audit: type=1400 audit(1740378220.199:693): avc:  denied  { mount } for  pid=10969 comm="syz.5.1368" name="/" dev="overlay" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  495.620510][   T29] audit: type=1400 audit(1740378220.339:694): avc:  denied  { unmount } for  pid=9423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  495.682036][   T29] audit: type=1400 audit(1740378220.389:695): avc:  denied  { unmount } for  pid=9423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  495.833815][   T29] audit: type=1400 audit(1740378220.489:696): avc:  denied  { write } for  pid=10978 comm="syz.2.1370" name="tcp" dev="proc" ino=4026532992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  495.873917][   T29] audit: type=1400 audit(1740378220.509:697): avc:  denied  { create } for  pid=10978 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  495.894378][   T29] audit: type=1400 audit(1740378220.509:698): avc:  denied  { bind } for  pid=10978 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  495.915509][   T29] audit: type=1400 audit(1740378220.509:699): avc:  denied  { listen } for  pid=10978 comm="syz.2.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  496.362181][ T5905] usb 2-1: USB disconnect, device number 28
[  496.867166][T10996] netlink: 'syz.3.1376': attribute type 3 has an invalid length.
[  497.689900][    T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  497.850857][    T8] usb 6-1: device descriptor read/64, error -71
[  498.370821][T11016] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[11016]
[  499.029819][   T30] INFO: task kworker/u8:10:6196 blocked for more than 143 seconds.
[  499.050528][   T30]       Not tainted 6.14.0-rc4-syzkaller #0
[  499.056434][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  499.080420][    T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  499.162396][   T30] task:kworker/u8:10   state:D stack:25520 pid:6196  tgid:6196  ppid:2      task_flags:0x4208060 flags:0x00004000
[  499.195836][T11009] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  499.216946][   T30] Workqueue: events_unbound netfs_write_collection_worker
[  499.233432][   T30] Call Trace:
[  499.239815][   T30]  <TASK>
[  499.246228][   T30]  __schedule+0xf43/0x5890
[  499.251450][    T8] usb 6-1: device descriptor read/64, error -71
[  499.260155][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  499.268360][   T30]  ? __pfx___schedule+0x10/0x10
[  499.273780][   T30]  ? schedule+0x298/0x350
[  499.278400][   T30]  ? __pfx_lock_release+0x10/0x10
[  499.284694][   T30]  ? __pfx_lock_release+0x10/0x10
[  499.290964][   T30]  ? lock_acquire+0x2f/0xb0
[  499.295706][   T30]  ? schedule+0x1fd/0x350
[  499.300557][   T30]  schedule+0xe7/0x350
[  499.304845][   T30]  bit_wait+0x15/0xe0
[  499.309091][   T30]  __wait_on_bit+0x62/0x180
[  499.314650][   T30]  ? __pfx_bit_wait+0x10/0x10
[  499.319718][   T30]  out_of_line_wait_on_bit+0xda/0x110
[  499.325370][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  499.334379][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  499.341380][   T30]  netfs_retry_writes+0x2fa/0x1a00
[  499.346709][   T30]  ? add_lock_to_list+0x17d/0x390
[  499.354280][   T30]  ? lockdep_unlock+0x11a/0x290
[  499.359254][   T30]  ? __lock_acquire+0x2077/0x3c40
[  499.364797][    T8] usb usb6-port1: attempt power cycle
[  499.372071][   T30]  ? __pfx_netfs_retry_writes+0x10/0x10
[  499.378784][   T30]  ? rcu_is_watching+0x12/0xc0
[  499.384799][   T30]  netfs_write_collection_worker+0x23de/0x37c0
[  499.393076][   T30]  process_one_work+0x9c5/0x1ba0
[  499.400446][   T30]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  499.406345][   T30]  ? __pfx_process_one_work+0x10/0x10
[  499.412656][   T30]  ? assign_work+0x1a0/0x250
[  499.417263][   T30]  worker_thread+0x6c8/0xf00
[  499.422111][   T30]  ? __kthread_parkme+0x148/0x220
[  499.427192][   T30]  ? __pfx_worker_thread+0x10/0x10
[  499.432438][   T30]  kthread+0x3af/0x750
[  499.436679][   T30]  ? __pfx_kthread+0x10/0x10
[  499.442926][   T30]  ? lock_acquire+0x2f/0xb0
[  499.447469][   T30]  ? __pfx_kthread+0x10/0x10
[  499.452142][   T30]  ret_from_fork+0x45/0x80
[  499.456661][   T30]  ? __pfx_kthread+0x10/0x10
[  499.461317][   T30]  ret_from_fork_asm+0x1a/0x30
[  499.466176][   T30]  </TASK>
[  499.469208][   T30] 
[  499.469208][   T30] Showing all locks held in the system:
[  499.477865][   T30] 6 locks held by kworker/0:0/8:
[  499.483038][   T30]  #0: ffff8881412fa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  499.495166][   T30]  #1: ffffc900000d7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  499.500201][ T5905] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  499.507415][   T30]  #2: ffff888145747190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  499.523185][   T30]  #3: ffff88814579a510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10
[  499.534075][   T30]  #4: ffff888145759368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10
[  499.543843][   T30]  #5: ffffffff8f4e8c90 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1cd0
[  499.554354][   T30] 1 lock held by khungtaskd/30:
[  499.559219][   T30]  #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  499.570021][   T30] 2 locks held by kworker/u8:6/2932:
[  499.575343][   T30]  #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  499.585621][   T30]  #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  499.598332][   T30] 2 locks held by getty/5577:
[  499.603664][   T30]  #0: ffff888036bf90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  499.613536][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  499.624189][   T30] 6 locks held by kworker/1:5/5905:
[  499.629403][   T30]  #0: ffff8881412fa948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  499.640721][   T30]  #1: ffffc900021bfd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  499.652707][   T30]  #2: ffff888028cd7190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10
[  499.661709][   T30]  #3: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  499.662658][ T5905] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  499.671722][   T30]  #4: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: wg_packet_send_queued_handshake_initiation+0x6c/0x410
[  499.671790][   T30]  #5: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: lock_timer_base+0x12f/0x1e0
[  499.671850][   T30] 2 locks held by kworker/u8:10/6196:
[  499.671860][   T30]  #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[  499.671911][   T30]  #1: ffffc90005a97d18 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[  499.671964][   T30] 3 locks held by syz.4.869/9232:
[  499.671974][   T30]  #0: ffff8880315dc420 (sb_writers#20){.+.+}-{0:0}, at: do_pwritev+0x1b1/0x270
[  499.691842][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.695795][   T30]  #1: 
[  499.712623][ T5905] usb 2-1: Product: syz
[  499.723653][    T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  499.757892][ T5905] usb 2-1: Manufacturer: syz
[  499.761035][   T30] ffff8880260d8148
[  499.773399][ T5905] usb 2-1: SerialNumber: syz
[  499.786775][   T30]  (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80
[  499.789084][ T5905] r8152-cfgselector 2-1: Unknown version 0x0000
[  499.796290][   T30]  #2: ffff8880260d8500 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_begin_writethrough+0x64/0x1c0
[  499.811064][ T5905] r8152-cfgselector 2-1: config 0 descriptor??
[  499.815112][   T30] 4 locks held by udevd/10124:
[  499.825766][    T8] usb 6-1: device descriptor read/8, error -71
[  499.832946][   T30]  #0: ffff88807c9f1e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0
[  499.842258][   T30]  #1: ffff88807ad42488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240
[  499.851765][   T30]  #2: ffff88802923be18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240
[  499.862207][   T30]  #3: ffff88805e71d190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x188/0x3b0
[  499.871281][   T30] 
[  499.873912][   T30] =============================================
[  499.873912][   T30] 
[  499.884128][   T30] NMI backtrace for cpu 0
[  499.884142][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller #0
[  499.884161][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  499.884171][   T30] Call Trace:
[  499.884176][   T30]  <TASK>
[  499.884184][   T30]  dump_stack_lvl+0x116/0x1f0
[  499.884211][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  499.884237][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  499.884261][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  499.884289][   T30]  watchdog+0xf62/0x12b0
[  499.884317][   T30]  ? __pfx_watchdog+0x10/0x10
[  499.884341][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  499.884361][   T30]  ? __kthread_parkme+0x148/0x220
[  499.884379][   T30]  ? __pfx_watchdog+0x10/0x10
[  499.884405][   T30]  kthread+0x3af/0x750
[  499.884425][   T30]  ? __pfx_kthread+0x10/0x10
[  499.884448][   T30]  ? __pfx_kthread+0x10/0x10
[  499.884468][   T30]  ret_from_fork+0x45/0x80
[  499.884489][   T30]  ? __pfx_kthread+0x10/0x10
[  499.884508][   T30]  ret_from_fork_asm+0x1a/0x30
[  499.884538][   T30]  </TASK>
[  499.884545][   T30] Sending NMI from CPU 0 to CPUs 1:
[  499.999125][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20
[  500.000606][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  500.000617][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller #0
[  500.000654][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  500.000664][   T30] Call Trace:
[  500.000670][   T30]  <TASK>
[  500.000677][   T30]  dump_stack_lvl+0x3d/0x1f0
[  500.000698][   T30]  panic+0x71d/0x800
[  500.000717][   T30]  ? __pfx_panic+0x10/0x10
[  500.000733][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  500.000757][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  500.000777][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  500.000802][   T30]  ? watchdog+0xdcc/0x12b0
[  500.000824][   T30]  ? watchdog+0xdbf/0x12b0
[  500.000848][   T30]  watchdog+0xddd/0x12b0
[  500.000873][   T30]  ? __pfx_watchdog+0x10/0x10
[  500.000894][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  500.000912][   T30]  ? __kthread_parkme+0x148/0x220
[  500.000928][   T30]  ? __pfx_watchdog+0x10/0x10
[  500.000950][   T30]  kthread+0x3af/0x750
[  500.000968][   T30]  ? __pfx_kthread+0x10/0x10
[  500.000989][   T30]  ? __pfx_kthread+0x10/0x10
[  500.001007][   T30]  ret_from_fork+0x45/0x80
[  500.001025][   T30]  ? __pfx_kthread+0x10/0x10
[  500.001043][   T30]  ret_from_fork_asm+0x1a/0x30
[  500.001067][   T30]  </TASK>
[  500.131342][   T30] Kernel Offset: disabled
[  500.135645][   T30] Rebooting in 86400 seconds..