last executing test programs:

10m41.624733022s ago: executing program 2 (id=3):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x16)
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180)
getdents64(r6, &(0x7f0000000280)=""/100, 0x64)

10m40.621283449s ago: executing program 2 (id=6):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010103}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x38}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000000)=0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2)
fcntl$addseals(r3, 0x409, 0xb)
io_setup(0xb4, &(0x7f0000002340)=<r4=>0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000000)="0000000009800089", 0x8)
io_submit(r4, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000540)='p', 0x1}])
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
r7 = syz_io_uring_setup(0x2b8b, &(0x7f00000002c0)={0x0, 0xc58, 0x40, 0x3, 0x30e}, &(0x7f0000000080), &(0x7f0000000340))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f0000000600), 0x12)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000002880)={0x2, 0x0, @ioapic={0x0, 0x2, 0x0, 0xeffffdff, 0x0, [{}, {0x59, 0x5}, {0x0, 0x4}, {0x1, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x81}, {0x0, 0x4}, {}, {0x0, 0x6}, {}, {0x0, 0x50}, {0x0, 0x3, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {}, {0x8, 0x6, 0x8, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x40}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x4}, {0xfc, 0x86, 0xff}]}})

10m36.715444755s ago: executing program 2 (id=16):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010103000000000000000900000028000380080001000100000086475704006a85bbe6c164b282f887080003000000000014000200636169663000"/69], 0x3c}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_bridge\x00', {0x4}, 0x43})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_LK(r6, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

10m20.37732426s ago: executing program 32 (id=16):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010103000000000000000900000028000380080001000100000086475704006a85bbe6c164b282f887080003000000000014000200636169663000"/69], 0x3c}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x0, 'veth1_to_bridge\x00', {0x4}, 0x43})
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_LK(r6, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

12.259894326s ago: executing program 4 (id=1371):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000900000000000000000000000200010000000000000000070000000005000500000000000a00000000000000ff01000000000000b4000000000000010000000000000000"], 0x48}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.029512213s ago: executing program 3 (id=1374):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mm'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb)

11.035539032s ago: executing program 1 (id=1376):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "fafb0b01"}]}}, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57)

10.783560236s ago: executing program 3 (id=1377):
ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x14)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)=@can, 0x80)
openat$nvram(0xffffffffffffff9c, 0x0, 0x810b01, 0x0)
mmap(&(0x7f0000615000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1b578000)
sendmsg$unix(r2, &(0x7f0000000c80)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0}, 0x10)
syz_open_dev$dri(0x0, 0x0, 0x100)
pipe2$watch_queue(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='ufs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

10.721300819s ago: executing program 4 (id=1378):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
mlockall(0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0xec3f681731049508, 0x0)
capset(&(0x7f0000000340)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x3, 0x5f22, 0x7ff})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(0x0, 0xa, 0x101080)

7.973099585s ago: executing program 3 (id=1379):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioperm(0x8, 0x8000, 0x72de)
getrlimit(0x1, &(0x7f00000000c0))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0xfffffffd, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x62, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4, 0x4}, 0xe}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000014000000100007"], 0x70}}, 0x0)

7.72227397s ago: executing program 4 (id=1381):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r8, r7, 0x1c, 0x3, 0x2})
ioctl$TIOCVHANGUP(r2, 0x40046f41, 0x1000000000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r10, 0x201, 0x70bd25, 0xfffffffc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

7.057394827s ago: executing program 1 (id=1383):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x2, @sdr={0x31303553, 0x4}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x0, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0)
mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000040)='ocfs2\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="44000000000000000000000000000000000000000097bb35524af5092966ba9334135f024c67315f74801fd825a33889aff771919d14aa9a7a8653c46cb55a8af4122774e652f516b40b15c2e211d844d6ea22ce06afd5c9c4075c96e9fa12309bbee56e3a1d72b10637caf045dacee57c0aa3bca314c35ddc39a518a7edc81fb0030c48e0968d3699fd64496e3d36aa1d996d1730c2e54bf007a16baa1b39336b3850d9a9f958214a9bab858fdf9dfe520b8f9d1fa201209ad396222435e6441b16e5437422bccdcce84aaba4bba78997dbbd5b452a305f7849b0eb0311d6fcce4cf32c427710434e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x4000800)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "b742b4d0d79441749fdc87c088e1a0ee"})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)

6.95337588s ago: executing program 3 (id=1384):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024b0001100000000904000003fe03010009cd8d1f01020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "d42911"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8000, 0x5, 0x2}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x3, 0x60}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x5, 0x10}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xfe, 0x9, 0x1, 0x20, 0x9a}, 0x83, &(0x7f0000000500)={0x5, 0xf, 0x83, 0x1, [@generic={0x7e, 0x10, 0x5, "3339609f75063ae9f572280ecdeb1e55568900f7279b0d7e4463f1489ddc5b833bef142cbf90552f6afc91e5b09071f8a217be34247260daf83b8d4e45cc95ce77863afdf6786539309783eee4ef3756c8fbb01fc48bd852cfffa8f66a04285e67ea3fa67f5bbeab037883233fa3467c32d3fe66f24d9780246cb7"}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}]})
syz_usb_control_io(r4, &(0x7f0000000900)={0x2c, &(0x7f0000000740)={0x20, 0x31, 0xff, {0xff, 0x24, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0xe6, @string={0xe6, 0x3, "8f25106774c21aee1479998e5d93eb65fc02f83e8abe70669fa5aa3298b003d39c62709210924e391b938fa93687f3e1c659dc99872fd6f8d48b7ff25ba9d209d2c516ef5c96de22ebe1874e9b7a2abc9fc2f824e198dd04d855f1db8ee96fb054dec80fccf896ced1c4c06c4ac68f3ddc6c9710a68ce4b60ee327b36c5f03fecad882148cbf7e6aff5c5b68c46285f8ae98d9915a984e20559cf0fc497ef65b5c070512fa8f32c4b86950255523d3a20998a906f1f20616e2e50d42e0528906ff5bbdcc4754c00df4e0f3b052c6de45518809467fd08ba34f3b97c858ebea8840af1351"}}, &(0x7f0000000880)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xe, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0xcf, 0x0, 0x4, 0x1}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x60, 0x0, 0x4, "99083095", "4ac47f50"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x80, 0x80, 0x4, 0xb, 0xf, 0x150b}}}, &(0x7f0000000d80)={0x84, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "d6f9"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000c40)={0x40, 0x19, 0x2, 'K~'}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x5}})
ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x6)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000180)=0x5)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x1a)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
r7 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x0, 0x20}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
r10 = io_uring_setup(0x532c, &(0x7f0000000e40)={0x0, 0xe49, 0x4, 0x1, 0x10c, 0x0, r7})
io_uring_enter(r10, 0x629b, 0xee77, 0x0, &(0x7f0000000ec0)={[0x40]}, 0x8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000e6000075000040"])

6.077374225s ago: executing program 4 (id=1385):
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x114, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xea, 0x6, "33df0fcc73f0ec2ab80a3651bf2c406af3ef79480cef263303433fb47558b5d6a180c4f5f1cc7eb4b6ee1724f3fac6dd4ee8375c87ca2edd4134ad7459e6f3a317fe665403853bd7c5f284102415a3dc43716220f048892958a4e56d4d8349275f14eaf189f94b7cfd43fb84dd27cd279a0f66d145b85370d610557fbcf6325d32ec750296bd2287533932806d52140ced6aa5231d2fe0716a7a405eb311e2122f161ebea1ca1ef72c68680014eb689edc316ec573d4496ce1f26d8f0792180a91cd8df25ae8a93e31d5e1671966c3d11ec21806f31f428556ccaebf44683df576ad10de31ac"}]}], {0x14}}, 0x188}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='3']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc)
socket$inet_udp(0x2, 0x2, 0x0)

5.68472598s ago: executing program 5 (id=1387):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb)

4.734749667s ago: executing program 0 (id=1388):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mm'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb)

4.727770484s ago: executing program 5 (id=1389):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xec79, 0x10100, 0xfffffffe, 0xe0, 0x0, r1}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000010c0))
socket$l2tp6(0xa, 0x2, 0x73)
futex_waitv(&(0x7f0000001080)=[{0x800000003, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)

4.656129312s ago: executing program 4 (id=1390):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300))
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc)
r3 = dup(r1)
write$UHID_INPUT(r3, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000001240)=""/4088, 0xff8}], 0x1, 0xec, 0xfffffffe)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x61, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x4b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0xc1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x3, 0xf, 0x5, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x40, 0x7800, 0x235, 0x10000}})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.572199219s ago: executing program 1 (id=1391):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18cee800000000000000000000000000000000722be0dea0df415c19e3f83488c7e8af00", @ANYRESOCT, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
mlockall(0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0xec3f681731049508, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(0x0, 0xa, 0x101080)

4.4675371s ago: executing program 0 (id=1392):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e4", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000240001030000000000000000010000000c004b00020075"], 0x20}}, 0x4000)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)

3.326528945s ago: executing program 1 (id=1393):
socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0)

2.420771453s ago: executing program 5 (id=1394):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00'], 0x48)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000300)=ANY=[])
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0400000004000000040000000100150000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000000c0), 0x20000000}, 0x20)

2.347667207s ago: executing program 0 (id=1395):
socket$kcm(0x21, 0x2, 0x2)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '[{\x91&+'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "72585a175040d60d7063fba6039809c49db42640d147e18043ee53a166daec52527713e1d8da824ac0a2509ad49e"}, 0x43)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
listen(r4, 0x5)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x4008}, 0x0)

2.250511865s ago: executing program 0 (id=1396):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r7, r6, 0x1c, 0x3, 0x2})
ioctl$TIOCVHANGUP(r2, 0x40046f41, 0x1000000000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r9, 0x201, 0x70bd25, 0xfffffffc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

2.250198938s ago: executing program 1 (id=1397):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e4", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000240001030000000000000000010000000c004b00020075"], 0x20}}, 0x4000)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)

1.9134521s ago: executing program 5 (id=1398):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x14, 0x1e, 0x109, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x2b1e}, 0x0)

1.893195314s ago: executing program 5 (id=1399):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1b, 0x2})
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r6, r5, 0x1c, 0x3, 0x2})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r8, 0x201, 0x70bd25, 0xfffffffc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.805594162s ago: executing program 0 (id=1400):
socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000019480))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0xffd, 0xffffffb8})

681.321531ms ago: executing program 4 (id=1401):
r0 = syz_io_uring_setup(0xf4c, &(0x7f0000000140)={0x0, 0xc9db, 0x0, 0x2, 0x145}, &(0x7f00000001c0), &(0x7f0000000240))
io_uring_setup(0x8000132f, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200, 0x0, r0})
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d59351755863603e11b1131e4eb02f883ddbe51e0fdd5505d"]}]})
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1e4}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
ioctl$FIOCLEX(r2, 0x5451)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@mcast2, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10200})
syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400483a00fe80000000000000000000ed000000bbff02000000000000000000000000000102009078000005006050835900000000fc010000000000000000000000000000fc0200000000000000000000000000003a0100000000000007080000000000008000000000000000"], 0x0)
prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4048aec9, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={<r6=>0x0, @remote, @initdev}, &(0x7f0000000940)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x81, 0x0, 0xfffffffb, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x8, 0xfffffffa, 0x318}})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000a80)={@private, @multicast1, <r8=>0x0}, &(0x7f0000000ac0)=0xc)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00)=<r9=>0x0, &(0x7f0000000b40)=0x4)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000b80)={@loopback, @rand_addr, <r10=>0x0}, &(0x7f0000000bc0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c80)={'gretap0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d40)={'syztnl1\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', <r11=>0x0, 0x4, 0x8, 0xe, 0x7fff, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x20, 0x6, 0x7}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000580)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf251700000034000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="84000180140002006c6f000000000000000000000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300020000001400020070696d367265670000000000000000001400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="1800018014000200766c616e3100000000000000000000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="7800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000010585b05f68ec3b70000000000040000140002006c6f000000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300020000001400020076657468305f766972745f77696669000800030001000000180001801400020076657468315f746f5f627269646765004800018008000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467650008000300030000001c00018008000100", @ANYRES32=r11, @ANYBLOB="08000300010000000800030000000000"], 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x48014)
syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0x0, 0x80000}, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000100)=<r13=>0x0)
setuid(0xee00)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(r12, r13, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r14, 0x80, &(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x0, 0x80}})

333.876352ms ago: executing program 3 (id=1402):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10410, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mm'])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$binfmt_script(r3, &(0x7f0000000280)={'#! ', './file0'}, 0xb)

316.386612ms ago: executing program 0 (id=1403):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18cee800000000000000000000000000000000722be0dea0df415c19e3f83488c7e8af00", @ANYRESOCT, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
mlockall(0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0xec3f681731049508, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sg(0x0, 0xa, 0x101080)

315.079558ms ago: executing program 1 (id=1404):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0xb, 0x40000000000008b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
setrlimit(0xd, &(0x7f00000001c0)={0xb, 0x2})
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000bd7000fedbdf25060000000e7464657673696d0000000f0002006e657464657673696d30000008000300010000000600040000000000a7eb70d44059d13d766ce0d62b0f085d7dbdab73e6047dae0c449b2e7a7042700747decf5d43dd58423499a8ecd2f509b2677c13a23bc644c8afab003d636435b66c7c3f682580b941a938730a2160ca6ce7fe78b024ee00c71324df9ab2d80c669fb9f8b5df4e122e400f5505755779f635d604a141f269933e13b300"/193], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x54000)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000040)={0x40001, {{0xa, 0x0, 0xffffffff, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty}}}, 0x108)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4})
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xffff})
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x532d2cba, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)

242.859687ms ago: executing program 5 (id=1405):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) (fail_nth: 6)
write$FUSE_INIT(r2, 0x0, 0x0)
dup3(r2, r0, 0x0)

0s ago: executing program 3 (id=1406):
socket$kcm(0x21, 0x2, 0x2)
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '[{\x91&+'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "72585a175040d60d7063fba6039809c49db42640d147e18043ee53a166daec52527713e1d8da824ac0a2509ad49e"}, 0x43)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
listen(r4, 0x5)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYRES16=r6], 0x54}, 0x1, 0x0, 0x0, 0x4008}, 0x0)

kernel console output (not intermixed with test programs):

 Comm: syz.4.757 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  425.582283][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  425.592361][ T9145] Call Trace:
[  425.595659][ T9145]  <TASK>
[  425.598591][ T9145]  dump_stack_lvl+0x16c/0x1f0
[  425.603299][ T9145]  should_fail_ex+0x497/0x5b0
[  425.607991][ T9145]  _copy_from_user+0x2e/0xd0
[  425.612594][ T9145]  copy_msghdr_from_user+0x99/0x160
[  425.617808][ T9145]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  425.623653][ T9145]  ___sys_sendmsg+0xff/0x1e0
[  425.628270][ T9145]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.631129][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.633485][ T9145]  ? __pfx_lock_release+0x10/0x10
[  425.633514][ T9145]  ? trace_lock_acquire+0x14e/0x1f0
[  425.642184][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.646816][ T9145]  ? __fget_files+0x206/0x3a0
[  425.658808][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.659671][ T9145]  __sys_sendmsg+0x16e/0x220
[  425.677258][ T9145]  ? __pfx___sys_sendmsg+0x10/0x10
[  425.682392][ T9145]  do_syscall_64+0xcd/0x250
[  425.686905][ T9145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.692795][ T9145] RIP: 0033:0x7fde7d785d19
[  425.697223][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.716839][ T9145] RSP: 002b:00007fde7e5b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.725258][ T9145] RAX: ffffffffffffffda RBX: 00007fde7d975fa0 RCX: 00007fde7d785d19
[  425.733226][ T9145] RDX: 0000000004000040 RSI: 0000000020000100 RDI: 0000000000000003
[  425.741195][ T9145] RBP: 00007fde7e5b1090 R08: 0000000000000000 R09: 0000000000000000
[  425.749173][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.757133][ T9145] R13: 0000000000000000 R14: 00007fde7d975fa0 R15: 00007ffd2f464d38
[  425.765112][ T9145]  </TASK>
[  425.768210][    C1] vkms_vblank_simulate: vblank timer overrun
[  425.775784][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.143956][ T9151] netlink: 48 bytes leftover after parsing attributes in process `syz.5.756'.
[  426.352919][ T9123] capability: warning: `syz.0.752' uses 32-bit capabilities (legacy support in use)
[  426.612481][   T46] usb 2-1: USB disconnect, device number 38
[  426.620076][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.670767][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.762086][   T25] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930
[  427.942796][   T29] audit: type=1400 audit(1734025008.430:1314): avc:  denied  { getopt } for  pid=9157 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  429.452016][   T25] usb 1-1: [UEAGLE-ATM] interface 1 not found
[  429.458287][   T25] ueagle-atm 1-1:127.0: usbatm_usb_probe: bind failed: -19!
[  429.468647][   T25] usb 1-1: USB disconnect, device number 35
[  429.861691][   T29] audit: type=1400 audit(1734025011.050:1315): avc:  denied  { mounton } for  pid=9180 comm="syz.4.766" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  429.884578][    C1] vkms_vblank_simulate: vblank timer overrun
[  429.893433][ T9184] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  429.912883][ T5899] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  430.246615][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'.
[  430.262737][   T29] audit: type=1400 audit(1734025011.440:1316): avc:  denied  { create } for  pid=9180 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  430.329382][   T29] audit: type=1400 audit(1734025011.440:1317): avc:  denied  { write } for  pid=9180 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  430.367244][ T5899] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  430.398641][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.428932][ T5899] usb 4-1: config 0 descriptor??
[  430.734288][ T9195] netlink: 'syz.4.769': attribute type 75 has an invalid length.
[  431.517149][ T5899] usb 4-1: USB disconnect, device number 32
[  431.645057][ T9203] netlink: 68 bytes leftover after parsing attributes in process `syz.1.771'.
[  433.873853][ T9215] netlink: 68 bytes leftover after parsing attributes in process `syz.3.775'.
[  434.719800][ T9220] netlink: 68 bytes leftover after parsing attributes in process `syz.4.776'.
[  435.586698][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.777'.
[  436.502490][ T9228] netlink: 76 bytes leftover after parsing attributes in process `syz.4.779'.
[  436.511564][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'.
[  437.004979][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'.
[  437.026855][   T29] audit: type=1400 audit(1734025018.180:1318): avc:  denied  { write } for  pid=9229 comm="syz.0.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  437.912422][ T9244] program syz.0.783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.256936][ T9250] trusted_key: encrypted_key: insufficient parameters specified
[  439.006999][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.788'.
[  440.333610][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.340339][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.917997][ T9273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.790'.
[  443.296164][ T9291] netlink: 68 bytes leftover after parsing attributes in process `syz.3.796'.
[  444.718727][   T29] audit: type=1400 audit(1734025025.910:1319): avc:  denied  { append } for  pid=9297 comm="syz.3.800" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  444.727285][ T9298] loop6: detected capacity change from 0 to 524287999
[  444.773930][    T8] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  444.780890][ T9301] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  444.816913][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  444.828144][   T66] loop: Write error at byte offset 1, length 4096.
[  444.842924][    C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  444.852772][    C0] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  444.907935][   T29] audit: type=1400 audit(1734025026.100:1320): avc:  denied  { connect } for  pid=9297 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  444.932478][   T29] audit: type=1400 audit(1734025026.100:1321): avc:  denied  { ioctl } for  pid=9297 comm="syz.3.800" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20641 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  444.968656][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  444.983240][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  445.006537][    T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  445.017399][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.023078][   T11] loop: Write error at byte offset 1, length 4096.
[  445.039800][    T8] usb 1-1: config 0 descriptor??
[  445.041422][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  445.054281][    C1] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  446.459271][    T8] usb 1-1: USB disconnect, device number 36
[  448.241857][ T9333] hub 6-0:1.0: USB hub found
[  448.246847][ T9333] hub 6-0:1.0: 1 port detected
[  449.368484][ T9326] netlink: 76 bytes leftover after parsing attributes in process `syz.0.806'.
[  449.377608][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'.
[  450.192974][   T46] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  450.328095][ T9349] netlink: 108 bytes leftover after parsing attributes in process `syz.0.811'.
[  450.492746][ T9357] netlink: 68 bytes leftover after parsing attributes in process `syz.5.812'.
[  451.319949][   T29] audit: type=1326 audit(1734025031.620:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.0.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9385d19 code=0x0
[  451.422826][   T46] usb 2-1: Using ep0 maxpacket: 16
[  451.437091][   T46] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  451.446333][   T46] usb 2-1: config 0 has no interface number 0
[  451.458838][   T46] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  451.470327][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.481342][   T46] usb 2-1: Product: syz
[  451.485895][   T46] usb 2-1: Manufacturer: syz
[  451.492790][   T46] usb 2-1: SerialNumber: syz
[  451.512454][   T46] usb 2-1: config 0 descriptor??
[  451.590557][   T46] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 039
[  451.754542][ T5899] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  451.974310][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'.
[  452.200381][   T29] audit: type=1400 audit(1734025033.390:1323): avc:  denied  { create } for  pid=9345 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  452.454623][ T5899] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  452.463825][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.473661][ T5899] usb 1-1: config 0 descriptor??
[  452.626852][   T46] i2c i2c-1: failure reading functionality
[  452.634974][   T46] i2c i2c-1: connected i2c-tiny-usb device
[  452.652786][   T46] usb 2-1: USB disconnect, device number 39
[  452.798569][ T5899] usb 1-1: USB disconnect, device number 37
[  453.797595][   T29] audit: type=1400 audit(1734025034.320:1324): avc:  denied  { getopt } for  pid=9376 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  454.078983][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'.
[  454.432779][   T29] audit: type=1400 audit(1734025035.570:1325): avc:  denied  { map } for  pid=9385 comm="syz.5.822" path="socket:[20261]" dev="sockfs" ino=20261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  458.073892][   T29] audit: type=1400 audit(1734025039.250:1326): avc:  denied  { map } for  pid=9420 comm="syz.5.832" path="socket:[20320]" dev="sockfs" ino=20320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  458.635030][   T29] audit: type=1400 audit(1734025039.260:1327): avc:  denied  { read } for  pid=9420 comm="syz.5.832" path="socket:[20320]" dev="sockfs" ino=20320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  459.482451][   T29] audit: type=1400 audit(1734025040.580:1328): avc:  denied  { shutdown } for  pid=9420 comm="syz.5.832" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  459.866473][ T9434] use of bytesused == 0 is deprecated and will be removed in the future,
[  459.916394][ T9434] use the actual size instead.
[  461.408022][ T9455] syz.1.838: attempt to access beyond end of device
[  461.408022][ T9455] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  461.420759][ T9455] (syz.1.838,9455,1):ocfs2_get_sector:1769 ERROR: status = -5
[  461.428312][ T9455] (syz.1.838,9455,1):ocfs2_sb_probe:749 ERROR: status = -5
[  461.436413][ T9455] (syz.1.838,9455,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  461.445027][ T9455] (syz.1.838,9455,1):ocfs2_fill_super:1178 ERROR: status = -5
[  461.465031][ T9456] xt_TPROXY: Can be used only with -p tcp or -p udp
[  462.192730][   T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  463.220641][   T46] usb 1-1: config 0 has an invalid interface number: 18 but max is 0
[  463.233415][   T46] usb 1-1: config 0 has no interface number 0
[  464.158210][   T46] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.201940][   T46] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.150289][   T46] usb 1-1: string descriptor 0 read error: -71
[  465.232565][ T9481] loop6: detected capacity change from 0 to 524287999
[  465.323341][   T46] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  465.333432][   T46] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  465.344351][   T46] usb 1-1: config 0 descriptor??
[  465.349730][   T46] usb 1-1: can't set config #0, error -71
[  465.358383][   T46] usb 1-1: USB disconnect, device number 38
[  465.375010][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  465.386077][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  465.452662][ T9486] netlink: 108 bytes leftover after parsing attributes in process `syz.3.844'.
[  465.581162][   T29] audit: type=1326 audit(1734025046.730:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.3.844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d3985d19 code=0x0
[  465.660789][   T12] loop: Write error at byte offset 1, length 4096.
[  465.695788][    C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  465.705309][    C0] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  466.334181][ T9499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.849'.
[  468.217392][ T9513] netlink: 68 bytes leftover after parsing attributes in process `syz.5.854'.
[  469.078262][ T9510] netlink: 'syz.1.853': attribute type 13 has an invalid length.
[  469.087897][ T9510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.853'.
[  469.104411][ T9510] syz_tun: refused to change device tx_queue_len
[  469.111828][ T9510] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  470.291110][ T9525] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  471.340833][ T9531] netlink: 108 bytes leftover after parsing attributes in process `syz.1.860'.
[  472.312751][   T29] audit: type=1326 audit(1734025052.700:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9527 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f185d19 code=0x0
[  472.844195][ T9544] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  473.627942][ T9547] program syz.4.862 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.457568][ T9562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.867'.
[  475.638825][ T9567] netlink: 76 bytes leftover after parsing attributes in process `syz.5.866'.
[  475.647833][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.866'.
[  476.133381][ T5899] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  476.597470][ T9571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'.
[  476.618430][ T9571] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  476.810838][   T29] audit: type=1400 audit(1734025057.620:1331): avc:  denied  { bind } for  pid=9568 comm="syz.5.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  476.836375][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  476.919545][ T5899] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  476.932493][ T5899] usb 5-1: config 0 has no interface number 0
[  476.939204][   T29] audit: type=1400 audit(1734025058.130:1332): avc:  denied  { read } for  pid=9559 comm="syz.0.868" path="socket:[21594]" dev="sockfs" ino=21594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  478.556436][ T5899] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  478.565862][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.885569][ T9603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.880'.
[  479.566683][ T5899] usb 5-1: Product: syz
[  479.570882][ T5899] usb 5-1: Manufacturer: syz
[  479.619571][ T5899] usb 5-1: config 0 descriptor??
[  479.628080][ T5899] usb 5-1: can't set config #0, error -71
[  479.637943][ T5899] usb 5-1: USB disconnect, device number 42
[  480.294455][ T9585] netlink: 76 bytes leftover after parsing attributes in process `syz.5.873'.
[  481.111525][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'.
[  481.803596][ T9626] hub 6-0:1.0: USB hub found
[  481.809760][ T9626] hub 6-0:1.0: 1 port detected
[  481.866430][ T9626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.884'.
[  481.875464][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'.
[  483.891863][   T25] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  483.956358][ T9639] program syz.5.889 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  484.054516][   T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  484.066800][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.093391][   T25] usb 4-1: config 0 descriptor??
[  485.004501][ T9650] netlink: 60 bytes leftover after parsing attributes in process `syz.5.893'.
[  485.020321][ T9650] cgroup: Unknown subsys name 'euid<00000000000000000000'
[  485.272715][   T46] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  485.389653][   T25] usb 4-1: USB disconnect, device number 33
[  486.103779][   T46] usb 5-1: Using ep0 maxpacket: 16
[  486.111250][   T46] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  486.227032][   T46] usb 5-1: config 0 has no interface number 0
[  486.559544][ T9671] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  487.321416][   T46] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  488.145239][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.153431][   T46] usb 5-1: Product: syz
[  488.158253][   T46] usb 5-1: Manufacturer: syz
[  488.163437][   T46] usb 5-1: SerialNumber: syz
[  488.356455][   T46] usb 5-1: config 0 descriptor??
[  488.590684][   T46] usb 5-1: can't set config #0, error -71
[  488.597709][   T46] usb 5-1: USB disconnect, device number 43
[  488.988356][ T9685] ufs: You didn't specify the type of your ufs filesystem
[  488.988356][ T9685] 
[  488.988356][ T9685] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  488.988356][ T9685] 
[  488.988356][ T9685] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  489.019172][ T9685] ufs: ufstype=old is supported read-only
[  489.025195][ T9685] syz.5.900: attempt to access beyond end of device
[  489.025195][ T9685] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0
[  489.501392][ T9688] hub 6-0:1.0: USB hub found
[  489.506370][ T9688] hub 6-0:1.0: 1 port detected
[  489.520570][ T9688] netlink: 76 bytes leftover after parsing attributes in process `syz.4.899'.
[  489.529610][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'.
[  493.046992][ T9715] program syz.3.904 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  493.402191][ T9719] program syz.4.905 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  496.039200][ T9724] hub 6-0:1.0: USB hub found
[  496.045027][ T9724] hub 6-0:1.0: 1 port detected
[  496.074340][ T9724] netlink: 76 bytes leftover after parsing attributes in process `syz.0.907'.
[  496.083328][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'.
[  496.578751][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'.
[  496.942869][ T8848] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  497.665626][ T8848] usb 5-1: Using ep0 maxpacket: 16
[  497.861601][ T9740] hub 6-0:1.0: USB hub found
[  497.867023][ T9740] hub 6-0:1.0: 1 port detected
[  497.883683][ T9740] netlink: 76 bytes leftover after parsing attributes in process `syz.5.912'.
[  497.899835][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.912'.
[  498.134621][ T8848] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  498.152740][ T8848] usb 5-1: config 0 has no interface number 0
[  498.173795][ T8848] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  498.183028][ T8848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.201341][ T8848] usb 5-1: Product: syz
[  498.211510][ T8848] usb 5-1: Manufacturer: syz
[  498.228653][ T8848] usb 5-1: SerialNumber: syz
[  498.397666][ T8848] usb 5-1: config 0 descriptor??
[  498.824886][ T8848] i2c-tiny-usb 5-1:0.39: version 70.6d found at bus 005 address 044
[  499.536029][ T9750] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  499.542826][ T9750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  499.554058][ T9750] vhci_hcd vhci_hcd.0: Device attached
[  499.635246][ T9774] vhci_hcd: connection closed
[  499.639058][   T11] vhci_hcd: stop threads
[  499.740271][   T11] vhci_hcd: release socket
[  499.755768][   T11] vhci_hcd: disconnect device
[  499.783137][   T25] vhci_hcd: vhci_device speed not set
[  499.889556][ T8848]  (null): failure reading functionality
[  499.899777][ T8848] i2c i2c-1: failure reading functionality
[  499.922190][ T8848] i2c i2c-1: connected i2c-tiny-usb device
[  499.946810][ T8848] usb 5-1: USB disconnect, device number 44
[  500.831296][ T9786] batman_adv: batadv0: Adding interface: dummy0
[  500.837809][ T9786] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.866195][ T9786] batman_adv: batadv0: Interface activated: dummy0
[  500.968278][ T9787] batadv0: mtu less than device minimum
[  500.978170][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  500.992944][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.006831][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.036673][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.059273][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.082107][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.097902][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.109939][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  501.122302][ T9787] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  502.530289][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  502.538840][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  502.969269][ T9804] netlink: 68 bytes leftover after parsing attributes in process `syz.0.925'.
[  504.205223][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.924'.
[  504.667446][ T9813] hub 6-0:1.0: USB hub found
[  504.672811][ T9813] hub 6-0:1.0: 1 port detected
[  504.715377][ T9813] netlink: 76 bytes leftover after parsing attributes in process `syz.3.926'.
[  504.724394][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'.
[  505.567053][ T9819] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  506.635164][ T8848] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  506.843096][ T8848] usb 6-1: Using ep0 maxpacket: 16
[  506.863248][ T8848] usb 6-1: config 0 has an invalid interface number: 39 but max is 0
[  506.877162][ T8848] usb 6-1: config 0 has no interface number 0
[  506.916500][ T8848] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  506.934707][ T8848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.947692][ T8848] usb 6-1: Product: syz
[  506.951922][ T8848] usb 6-1: Manufacturer: syz
[  506.963585][ T8848] usb 6-1: SerialNumber: syz
[  507.008584][ T8848] usb 6-1: config 0 descriptor??
[  507.251050][ T8848] i2c-tiny-usb 6-1:0.39: version 70.6d found at bus 006 address 036
[  507.299000][   T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  507.462783][   T25] usb 5-1: Using ep0 maxpacket: 8
[  507.487287][   T25] usb 5-1: config index 0 descriptor too short (expected 75, got 45)
[  507.495786][   T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  507.508277][   T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  507.519690][   T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  507.530981][   T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  507.544940][   T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  507.554767][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.798267][   T25] usb 5-1: GET_CAPABILITIES returned 0
[  507.808876][   T25] usbtmc 5-1:16.0: can't read capabilities
[  507.915737][ T9845] ufs: You didn't specify the type of your ufs filesystem
[  507.915737][ T9845] 
[  507.915737][ T9845] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  507.915737][ T9845] 
[  507.915737][ T9845] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  507.947237][ T9845] ufs: ufstype=old is supported read-only
[  507.954503][ T9845] syz.3.936: attempt to access beyond end of device
[  507.954503][ T9845] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  508.560910][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.584100][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.630260][ T8848]  (null): failure reading functionality
[  508.637375][ T8848] i2c i2c-1: failure reading functionality
[  508.718593][ T9850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.932'.
[  509.285496][ T5896] usb 5-1: USB disconnect, device number 45
[  509.296453][ T8848] i2c i2c-1: connected i2c-tiny-usb device
[  509.304169][ T8848] usb 6-1: USB disconnect, device number 36
[  510.349682][ T9859] netlink: 68 bytes leftover after parsing attributes in process `syz.5.939'.
[  515.515980][ T9881] random: crng reseeded on system resumption
[  517.112829][ T9891] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  517.677501][ T9881] Unrecognized hibernate image header format!
[  517.683909][ T9881] PM: hibernation: Image mismatch: architecture specific data
[  519.095567][ T9908] netlink: 68 bytes leftover after parsing attributes in process `syz.0.948'.
[  520.000279][ T9910] netlink: 108 bytes leftover after parsing attributes in process `syz.4.949'.
[  520.038667][   T29] audit: type=1326 audit(1734025101.230:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9907 comm="syz.4.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x0
[  520.192736][   T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  520.644539][   T25] usb 6-1: Using ep0 maxpacket: 8
[  520.677605][   T25] usb 6-1: config index 0 descriptor too short (expected 75, got 45)
[  520.716584][ T9921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'.
[  520.809684][   T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  521.303647][   T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  521.313786][   T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  521.323786][   T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  521.337547][   T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  521.347139][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.100402][   T25] usb 6-1: usb_control_msg returned -71
[  522.106325][   T25] usbtmc 6-1:16.0: can't read capabilities
[  522.117630][   T25] usb 6-1: USB disconnect, device number 37
[  522.699815][ T9936] ufs: You didn't specify the type of your ufs filesystem
[  522.699815][ T9936] 
[  522.699815][ T9936] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  522.699815][ T9936] 
[  522.699815][ T9936] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  522.730664][ T9936] ufs: ufstype=old is supported read-only
[  522.736620][ T9936] syz.0.955: attempt to access beyond end of device
[  522.736620][ T9936] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  523.063166][ T9941] netlink: 60 bytes leftover after parsing attributes in process `syz.5.958'.
[  523.255909][ T9941] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  523.308170][   T57] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82
[  523.785400][ T9946] loop6: detected capacity change from 0 to 524287999
[  523.861604][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  523.872746][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  523.883738][   T57] loop: Write error at byte offset 1, length 4096.
[  523.890879][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  523.900392][    C1] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  524.580795][ T9965] netlink: 108 bytes leftover after parsing attributes in process `syz.3.962'.
[  524.722411][   T29] audit: type=1326 audit(1734025105.850:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.3.962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d3985d19 code=0x0
[  525.320507][   T29] audit: type=1400 audit(1734025106.310:1335): avc:  denied  { setopt } for  pid=9958 comm="syz.4.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  525.405953][   T29] audit: type=1400 audit(1734025106.320:1336): avc:  denied  { read } for  pid=9958 comm="syz.4.963" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  525.475050][   T29] audit: type=1400 audit(1734025106.330:1337): avc:  denied  { open } for  pid=9958 comm="syz.4.963" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  525.634831][   T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  525.794595][   T25] usb 4-1: Using ep0 maxpacket: 8
[  525.811621][   T25] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  525.833081][   T25] usb 4-1: config 179 has no interface number 0
[  525.876143][   T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  526.909349][ T9979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.967'.
[  527.134284][   T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  527.145635][   T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  527.157474][   T25] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  527.169406][   T25] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  527.182928][   T25] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  527.192382][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.249098][ T9970] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  527.511040][   T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input28
[  527.512753][ T5899] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  527.682924][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  527.708130][ T5899] usb 5-1: config index 0 descriptor too short (expected 75, got 45)
[  527.717895][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  527.740376][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  527.752531][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  527.771092][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.811624][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  527.848203][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.883049][  T827] usb 4-1: USB disconnect, device number 34
[  527.883062][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  527.897812][  T827] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  527.898623][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  528.078241][ T5899] usb 5-1: GET_CAPABILITIES returned 0
[  528.083879][ T5899] usbtmc 5-1:16.0: can't read capabilities
[  528.284351][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.293497][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.345949][ T8848] usb 5-1: USB disconnect, device number 46
[  528.442812][  T827] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  528.482919][   T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  528.642977][   T25] usb 6-1: Using ep0 maxpacket: 8
[  528.645594][  T827] usb 2-1: Using ep0 maxpacket: 8
[  528.653035][   T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  528.663021][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'.
[  528.668541][   T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  528.673411][  T827] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  528.682261][   T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  528.720623][  T827] usb 2-1: config 179 has no interface number 0
[  528.730963][  T827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  528.754339][   T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.831395][  T827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  528.865324][   T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  528.869306][  T827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  528.970897][  T827] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  528.991251][  T827] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  529.004908][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.042786][  T827] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  529.122818][  T827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.253516][ T9990] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  529.837849][   T25] usb 6-1: GET_CAPABILITIES returned 0
[  529.843444][   T25] usbtmc 6-1:16.0: can't read capabilities
[  529.903912][  T827] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29
[  530.462393][T10014] program syz.4.976 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  531.248346][  T827] usb 6-1: USB disconnect, device number 38
[  531.298579][T10018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.978'.
[  531.439464][T10018] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  531.624688][ T5868] usb 2-1: USB disconnect, device number 40
[  531.624689][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  531.624821][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  531.649108][ T5868] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  534.411992][T10058] loop6: detected capacity change from 0 to 524287999
[  534.609926][T10060] FAULT_INJECTION: forcing a failure.
[  534.609926][T10060] name failslab, interval 1, probability 0, space 0, times 0
[  534.623585][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.5.986 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  534.634273][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  534.644336][T10060] Call Trace:
[  534.647622][T10060]  <TASK>
[  534.650557][T10060]  dump_stack_lvl+0x16c/0x1f0
[  534.655251][T10060]  should_fail_ex+0x497/0x5b0
[  534.659942][T10060]  ? fs_reclaim_acquire+0xae/0x150
[  534.665077][T10060]  should_failslab+0xc2/0x120
[  534.669769][T10060]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  534.675846][T10060]  ? __pfx_tcp_current_mss+0x10/0x10
[  534.681149][T10060]  ? __alloc_skb+0x2b1/0x380
[  534.685756][T10060]  ? irqentry_exit+0x3b/0x90
[  534.690361][T10060]  __alloc_skb+0x2b1/0x380
[  534.694791][T10060]  ? __pfx___alloc_skb+0x10/0x10
[  534.699766][T10060]  ? msg_zerocopy_realloc+0x285/0x890
[  534.705179][T10060]  tcp_stream_alloc_skb+0x34/0x570
[  534.710332][T10060]  tcp_sendmsg_locked+0xed5/0x3770
[  534.715465][T10060]  ? __pfx___lock_acquire+0x10/0x10
[  534.720676][T10060]  ? __pfx_avc_has_perm+0x10/0x10
[  534.725726][T10060]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  534.731287][T10060]  ? tcp_sendmsg+0x20/0x50
[  534.735716][T10060]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  534.741102][T10060]  ? mark_held_locks+0x9f/0xe0
[  534.745872][T10060]  ? __local_bh_enable_ip+0xa4/0x120
[  534.751181][T10060]  tcp_sendmsg+0x2e/0x50
[  534.755445][T10060]  ? __pfx_tcp_sendmsg+0x10/0x10
[  534.760398][T10060]  inet_sendmsg+0xb9/0x140
[  534.764842][T10060]  ____sys_sendmsg+0x98c/0xc90
[  534.769621][T10060]  ? copy_msghdr_from_user+0x10b/0x160
[  534.775094][T10060]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.780405][T10060]  ? hlock_class+0x4e/0x130
[  534.784925][T10060]  ? __lock_acquire+0x15a9/0x3c40
[  534.789969][T10060]  ___sys_sendmsg+0x135/0x1e0
[  534.794664][T10060]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.799903][T10060]  ? __pfx___lock_acquire+0x10/0x10
[  534.805177][T10060]  ? __pfx___might_resched+0x10/0x10
[  534.810488][T10060]  ? __might_fault+0xe3/0x190
[  534.815189][T10060]  __sys_sendmmsg+0x201/0x420
[  534.819886][T10060]  ? __pfx___sys_sendmmsg+0x10/0x10
[  534.825112][T10060]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  534.831116][T10060]  ? fput+0x67/0x440
[  534.835021][T10060]  ? ksys_write+0x1ba/0x250
[  534.839537][T10060]  ? __pfx_ksys_write+0x10/0x10
[  534.844409][T10060]  __x64_sys_sendmmsg+0x9c/0x100
[  534.849366][T10060]  ? lockdep_hardirqs_on+0x7c/0x110
[  534.854592][T10060]  do_syscall_64+0xcd/0x250
[  534.859112][T10060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.865018][T10060] RIP: 0033:0x7fdccbf85d19
[  534.869438][T10060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.889068][T10060] RSP: 002b:00007fdccce4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  534.897504][T10060] RAX: ffffffffffffffda RBX: 00007fdccc176160 RCX: 00007fdccbf85d19
[  534.905469][T10060] RDX: 0000000000000004 RSI: 0000000020000d40 RDI: 0000000000000005
[  534.913425][T10060] RBP: 00007fdccce4a090 R08: 0000000000000000 R09: 0000000000000000
[  534.921401][T10060] R10: 000000000f000000 R11: 0000000000000246 R12: 0000000000000001
[  534.929354][T10060] R13: 0000000000000000 R14: 00007fdccc176160 R15: 00007fffc4ed4ff8
[  534.937342][T10060]  </TASK>
[  534.965287][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  534.975087][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  534.984686][   T12] loop: Write error at byte offset 1, length 4096.
[  534.991247][    C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  535.000725][    C1] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  535.572498][T10070] ufs: You didn't specify the type of your ufs filesystem
[  535.572498][T10070] 
[  535.572498][T10070] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  535.572498][T10070] 
[  535.572498][T10070] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  535.603514][T10070] ufs: ufstype=old is supported read-only
[  535.610136][T10070] syz.1.989: attempt to access beyond end of device
[  535.610136][T10070] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  535.824554][T10073] hub 6-0:1.0: USB hub found
[  535.829544][T10073] hub 6-0:1.0: 1 port detected
[  535.848420][T10073] netlink: 76 bytes leftover after parsing attributes in process `syz.3.990'.
[  535.857493][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'.
[  536.713605][  T827] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  536.885018][T10081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.993'.
[  536.943609][  T827] usb 2-1: Using ep0 maxpacket: 8
[  536.955029][T10081] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  537.010876][  T827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  537.317104][  T827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  537.355772][  T827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  537.420831][  T827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  538.253501][T10093] netlink: 68 bytes leftover after parsing attributes in process `syz.5.996'.
[  538.488816][  T827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  538.523725][  T827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.216330][  T827] usb 2-1: GET_CAPABILITIES returned 0
[  539.221905][  T827] usbtmc 2-1:16.0: can't read capabilities
[  539.228345][T10099] dlm: non-version read from control device 0
[  539.232842][  T827] usb 2-1: USB disconnect, device number 41
[  539.378780][ T8848] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  539.642992][ T8848] usb 6-1: Using ep0 maxpacket: 32
[  539.673293][T10106] syz.3.1000: attempt to access beyond end of device
[  539.673293][T10106] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  539.686375][T10106] (syz.3.1000,10106,1):ocfs2_get_sector:1769 ERROR: status = -5
[  539.694145][T10106] (syz.3.1000,10106,1):ocfs2_sb_probe:749 ERROR: status = -5
[  539.701592][T10106] (syz.3.1000,10106,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  539.710414][T10106] (syz.3.1000,10106,1):ocfs2_fill_super:1178 ERROR: status = -5
[  539.728549][T10107] xt_TPROXY: Can be used only with -p tcp or -p udp
[  539.749875][ T8848] usb 6-1: config 2 has an invalid interface number: 166 but max is 0
[  539.772958][ T8848] usb 6-1: config 2 has no interface number 0
[  539.825754][ T8848] usb 6-1: New USB device found, idVendor=0733, idProduct=2211, bcdDevice=c1.fe
[  539.922146][ T8848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.064927][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  540.242755][    T9] usb 1-1: Using ep0 maxpacket: 16
[  540.249555][    T9] usb 1-1: config 0 has an invalid interface number: 39 but max is 0
[  540.257924][    T9] usb 1-1: config 0 has no interface number 0
[  540.274212][    T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  540.289671][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.309649][    T9] usb 1-1: Product: syz
[  540.319769][    T9] usb 1-1: Manufacturer: syz
[  540.332488][    T9] usb 1-1: SerialNumber: syz
[  540.363719][    T9] usb 1-1: config 0 descriptor??
[  540.371278][    T9] i2c-tiny-usb 1-1:0.39: version 70.6d found at bus 001 address 039
[  540.422897][  T827] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  540.864964][ T8848] usb 6-1: string descriptor 0 read error: -71
[  540.878586][ T8848] gspca_main: sunplus-2.14.0 probing 0733:2211
[  540.983131][  T827] usb 2-1: Using ep0 maxpacket: 16
[  540.996452][  T827] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  541.006345][  T827] usb 2-1: config 0 has no interface number 0
[  541.106209][T10115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1003'.
[  541.115385][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'.
[  541.179351][    T9]  (null): failure reading functionality
[  541.218820][    T9] i2c i2c-1: connected i2c-tiny-usb device
[  541.228166][  T827] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  541.306220][  T827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.322367][ T8848] gspca_sunplus: reg_r err -71
[  541.327430][ T8848] sunplus 6-1:2.166: probe with driver sunplus failed with error -71
[  541.332790][  T827] usb 2-1: Product: syz
[  541.338227][ T8848] usb 6-1: USB disconnect, device number 39
[  541.345917][  T827] usb 2-1: Manufacturer: syz
[  541.350580][  T827] usb 2-1: SerialNumber: syz
[  541.361368][  T827] usb 2-1: config 0 descriptor??
[  541.368029][  T827] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 042
[  541.429684][    T9] usb 1-1: USB disconnect, device number 39
[  541.592822][ T5868] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  541.765716][ T5868] usb 5-1: Using ep0 maxpacket: 8
[  541.772712][ T5868] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  541.781872][  T827]  (null): failure reading functionality
[  541.782145][ T5868] usb 5-1: config 179 has no interface number 0
[  541.791394][  T827] i2c i2c-1: connected i2c-tiny-usb device
[  541.798896][ T5868] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  541.811242][ T5868] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  541.826509][ T5868] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  541.837861][ T5868] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  541.849587][ T5868] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  541.863147][ T8848] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  541.871216][ T5868] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  541.881012][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.895196][T10118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  542.022734][ T8848] usb 4-1: Using ep0 maxpacket: 16
[  542.030001][ T8848] usb 4-1: config 0 has an invalid interface number: 39 but max is 0
[  542.038325][ T8848] usb 4-1: config 0 has no interface number 0
[  542.066381][ T8848] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  542.081366][ T5868] usb 2-1: USB disconnect, device number 42
[  542.091137][ T8848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.110564][ T8848] usb 4-1: Product: syz
[  542.115484][ T8848] usb 4-1: Manufacturer: syz
[  542.120629][ T8848] usb 4-1: SerialNumber: syz
[  542.221842][ T8848] usb 4-1: config 0 descriptor??
[  542.318197][ T8848] i2c-tiny-usb 4-1:0.39: version 70.6d found at bus 004 address 035
[  542.328960][   T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input30
[  542.437086][T10127] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  542.751183][    T8] usb 5-1: USB disconnect, device number 47
[  542.751199][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  542.765817][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  542.774254][    T8] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  543.599746][ T8848]  (null): failure reading functionality
[  543.606613][ T8848] i2c i2c-1: failure reading functionality
[  543.614758][ T8848] i2c i2c-1: connected i2c-tiny-usb device
[  543.622039][ T8848] usb 4-1: USB disconnect, device number 35
[  543.726087][T10140] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1008'.
[  543.806194][   T29] audit: type=1326 audit(1734025125.000:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.0.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9385d19 code=0x0
[  544.392479][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1010'.
[  544.449186][T10147] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  546.026527][T10163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1012'.
[  546.852428][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1014'.
[  548.156703][T10175] hub 6-0:1.0: USB hub found
[  548.161755][T10175] hub 6-0:1.0: 1 port detected
[  548.171284][T10178] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  548.199692][T10175] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1015'.
[  548.208764][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'.
[  548.901281][T10185] loop6: detected capacity change from 0 to 524287999
[  549.024779][T10186] hub 6-0:1.0: USB hub found
[  549.030226][T10186] hub 6-0:1.0: 1 port detected
[  549.161428][T10186] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1018'.
[  549.170526][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1018'.
[  549.431254][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  549.444983][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  549.471879][  T201] loop: Write error at byte offset 1, length 4096.
[  549.543158][T10173] net_ratelimit: 10 callbacks suppressed
[  549.543180][T10173] openvswitch: netlink: Message has 1271 unknown bytes.
[  549.573397][    C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  549.582946][    C0] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  549.672803][T10173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.039673][T10192] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1022'.
[  552.508289][   T29] audit: type=1400 audit(1734025133.700:1339): avc:  denied  { write } for  pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  552.602851][   T29] audit: type=1400 audit(1734025133.700:1340): avc:  denied  { remove_name } for  pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  552.682911][   T29] audit: type=1400 audit(1734025133.700:1341): avc:  denied  { add_name } for  pid=5174 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  553.253134][T10202] netlink: 'syz.4.1025': attribute type 75 has an invalid length.
[  554.060423][T10215] syz.3.1024: attempt to access beyond end of device
[  554.060423][T10215] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  554.073490][T10215] (syz.3.1024,10215,1):ocfs2_get_sector:1769 ERROR: status = -5
[  554.081152][T10215] (syz.3.1024,10215,1):ocfs2_sb_probe:749 ERROR: status = -5
[  554.088603][T10215] (syz.3.1024,10215,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  554.097341][T10215] (syz.3.1024,10215,1):ocfs2_fill_super:1178 ERROR: status = -5
[  554.118667][T10216] xt_TPROXY: Can be used only with -p tcp or -p udp
[  554.391110][T10217] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1026'.
[  555.425388][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  555.489435][T10228] hub 6-0:1.0: USB hub found
[  555.495326][T10228] hub 6-0:1.0: 1 port detected
[  555.544596][T10227] syz.5.1030: attempt to access beyond end of device
[  555.544596][T10227] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  555.557754][T10227] (syz.5.1030,10227,0):ocfs2_get_sector:1769 ERROR: status = -5
[  555.565527][T10227] (syz.5.1030,10227,0):ocfs2_sb_probe:749 ERROR: status = -5
[  555.573013][T10227] (syz.5.1030,10227,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  555.581795][T10227] (syz.5.1030,10227,0):ocfs2_fill_super:1178 ERROR: status = -5
[  555.593628][T10229] xt_TPROXY: Can be used only with -p tcp or -p udp
[  555.673817][T10228] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1029'.
[  555.682974][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'.
[  555.713890][    T9] usb 1-1: Using ep0 maxpacket: 32
[  555.758477][    T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  555.776905][   T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  555.779525][    T9] usb 1-1: config 0 has no interface number 0
[  555.869914][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  555.885727][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.920210][    T9] usb 1-1: Product: syz
[  555.924790][    T9] usb 1-1: Manufacturer: syz
[  555.929889][    T9] usb 1-1: SerialNumber: syz
[  555.936967][    T9] usb 1-1: config 0 descriptor??
[  555.944621][    T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  555.982722][   T25] usb 5-1: Using ep0 maxpacket: 16
[  555.989481][   T25] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  556.002308][   T25] usb 5-1: config 0 has no interface number 0
[  556.012324][   T25] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  556.027426][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.035947][   T25] usb 5-1: Product: syz
[  556.040144][   T25] usb 5-1: Manufacturer: syz
[  556.051766][   T25] usb 5-1: SerialNumber: syz
[  556.085871][   T25] usb 5-1: config 0 descriptor??
[  556.124323][   T25] i2c-tiny-usb 5-1:0.39: version 70.6d found at bus 005 address 048
[  556.421205][T10209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.438115][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  556.453035][T10209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.527515][T10235] program syz.3.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  557.195828][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  558.115884][   T25] i2c i2c-1: failure reading functionality
[  558.123177][   T25] i2c i2c-1: connected i2c-tiny-usb device
[  558.132764][   T25] usb 5-1: USB disconnect, device number 48
[  558.387778][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'.
[  559.148588][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  559.181391][   T25] usb 1-1: USB disconnect, device number 40
[  559.192228][   T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  559.206609][   T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  559.218067][   T25] quatech2 1-1:0.51: device disconnected
[  559.992771][T10262] program syz.0.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  560.223336][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1038'.
[  560.467346][T10257] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1037'.
[  560.528338][T10264] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  561.720040][T10274] ufs: You didn't specify the type of your ufs filesystem
[  561.720040][T10274] 
[  561.720040][T10274] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  561.720040][T10274] 
[  561.720040][T10274] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  561.750965][T10274] ufs: ufstype=old is supported read-only
[  561.757254][T10274] syz.0.1041: attempt to access beyond end of device
[  561.757254][T10274] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  563.168817][T10283] syz.4.1043: attempt to access beyond end of device
[  563.168817][T10283] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  563.173089][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.181712][T10283] (syz.4.1043,10283,0):ocfs2_get_sector:1769 ERROR: status = -5
[  563.188101][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.195722][T10283] (syz.4.1043,10283,0):ocfs2_sb_probe:749 ERROR: status = -5
[  563.264581][T10283] (syz.4.1043,10283,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  563.269794][T10286] xt_TPROXY: Can be used only with -p tcp or -p udp
[  563.273445][T10283] (syz.4.1043,10283,1):ocfs2_fill_super:1178 ERROR: status = -5
[  564.901287][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'.
[  565.098853][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'.
[  565.684459][T10317] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1049'.
[  566.463357][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1051'.
[  567.342759][  T827] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  567.476706][   T46] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  567.502927][  T827] usb 1-1: Using ep0 maxpacket: 8
[  567.509751][  T827] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  567.523051][  T827] usb 1-1: config 179 has no interface number 0
[  567.541404][  T827] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  567.582414][  T827] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  567.609145][  T827] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  567.726400][   T46] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  567.745764][  T827] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  567.752335][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.765498][  T827] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  567.820680][T10342] program syz.4.1053 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.857607][   T46] usb 6-1: config 0 descriptor??
[  568.322720][  T827] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  568.364089][  T827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.410717][T10333] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  569.510724][    T9] usb 6-1: USB disconnect, device number 40
[  569.694512][  T827] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input31
[  570.159371][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  570.167729][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  570.176451][ T5899] usb 1-1: USB disconnect, device number 41
[  570.848136][ T5899] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  571.711228][T10366] program syz.0.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  572.401512][T10368] hub 6-0:1.0: USB hub found
[  572.412816][T10368] hub 6-0:1.0: 1 port detected
[  572.481376][T10368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1061'.
[  572.490581][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'.
[  573.777477][T10378] openvswitch: netlink: Message has 1271 unknown bytes.
[  574.106983][T10378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.873410][T10390] syz.5.1067: attempt to access beyond end of device
[  574.873410][T10390] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  574.886328][T10390] (syz.5.1067,10390,0):ocfs2_get_sector:1769 ERROR: status = -5
[  574.894898][T10390] (syz.5.1067,10390,0):ocfs2_sb_probe:749 ERROR: status = -5
[  574.902300][T10390] (syz.5.1067,10390,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  574.911078][T10390] (syz.5.1067,10390,0):ocfs2_fill_super:1178 ERROR: status = -5
[  574.930642][T10391] xt_TPROXY: Can be used only with -p tcp or -p udp
[  575.178658][T10392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1069'.
[  575.782855][   T29] audit: type=1400 audit(1734025156.980:1342): avc:  denied  { create } for  pid=10395 comm="syz.5.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  576.079782][ T5899] usb 6-1: new low-speed USB device number 41 using dummy_hcd
[  576.232843][ T5899] usb 6-1: device descriptor read/64, error -71
[  576.472848][ T5899] usb 6-1: new low-speed USB device number 42 using dummy_hcd
[  576.655666][ T5899] usb 6-1: device descriptor read/64, error -71
[  576.780770][ T5899] usb usb6-port1: attempt power cycle
[  577.137862][ T5899] usb 6-1: new low-speed USB device number 43 using dummy_hcd
[  577.170732][ T5899] usb 6-1: device descriptor read/8, error -71
[  577.967723][ T5899] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[  577.993657][ T5899] usb 6-1: device descriptor read/8, error -71
[  578.113021][ T5899] usb usb6-port1: unable to enumerate USB device
[  578.805563][   T29] audit: type=1400 audit(1734025159.990:1343): avc:  denied  { create } for  pid=10413 comm="syz.4.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  578.810593][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1076'.
[  578.860657][T10418] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  579.067242][   T29] audit: type=1400 audit(1734025160.260:1344): avc:  denied  { sys_admin } for  pid=10413 comm="syz.4.1077" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  579.813408][   T29] audit: type=1400 audit(1734025161.010:1345): avc:  denied  { listen } for  pid=10415 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  580.307230][T10435] syz.5.1081: attempt to access beyond end of device
[  580.307230][T10435] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  580.320567][T10435] (syz.5.1081,10435,0):ocfs2_get_sector:1769 ERROR: status = -5
[  580.328886][T10435] (syz.5.1081,10435,0):ocfs2_sb_probe:749 ERROR: status = -5
[  580.336384][T10435] (syz.5.1081,10435,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  580.345208][T10435] (syz.5.1081,10435,0):ocfs2_fill_super:1178 ERROR: status = -5
[  580.362083][T10436] xt_TPROXY: Can be used only with -p tcp or -p udp
[  580.444143][T10438] program syz.0.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  583.184464][   T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  583.448606][   T25] usb 5-1: Using ep0 maxpacket: 16
[  583.466418][   T25] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  583.474835][   T25] usb 5-1: config 0 has no interface number 0
[  583.493609][   T25] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  583.503022][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.511043][   T25] usb 5-1: Product: syz
[  583.515895][   T25] usb 5-1: Manufacturer: syz
[  583.520524][   T25] usb 5-1: SerialNumber: syz
[  583.673855][   T25] usb 5-1: config 0 descriptor??
[  583.687194][   T25] i2c-tiny-usb 5-1:0.39: version 70.6d found at bus 005 address 049
[  584.815611][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1096'.
[  585.342112][   T25] i2c i2c-1: failure reading functionality
[  585.349530][   T25] i2c i2c-1: connected i2c-tiny-usb device
[  585.357867][   T25] usb 5-1: USB disconnect, device number 49
[  585.593215][T10497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1100'.
[  585.664323][T10497] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  585.903665][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1099'.
[  590.562776][T10539] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1110'.
[  591.095954][   T46] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  591.972939][   T46] usb 1-1: Using ep0 maxpacket: 8
[  591.988319][   T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  591.997550][   T46] usb 1-1: config 179 has no interface number 0
[  592.019980][T10548] ufs: You didn't specify the type of your ufs filesystem
[  592.019980][T10548] 
[  592.019980][T10548] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  592.019980][T10548] 
[  592.019980][T10548] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  592.051035][    C1] vkms_vblank_simulate: vblank timer overrun
[  592.057223][T10548] ufs: ufstype=old is supported read-only
[  592.063722][T10548] syz.3.1112: attempt to access beyond end of device
[  592.063722][T10548] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  592.420989][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  592.445593][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  592.457001][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  592.468439][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  592.480059][   T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  592.493462][   T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  592.502984][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.514695][T10531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  592.763252][ T5874] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  593.443572][ T5899] usb 1-1: USB disconnect, device number 42
[  593.443655][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  593.461699][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  593.521961][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1115'.
[  593.559946][T10560] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  593.612828][ T5874] usb 5-1: Using ep0 maxpacket: 8
[  593.625806][ T5874] usb 5-1: config index 0 descriptor too short (expected 75, got 45)
[  593.644592][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  593.692556][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  593.760992][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  593.787694][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.820762][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  593.880513][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.189221][ T5874] usb 5-1: GET_CAPABILITIES returned 0
[  594.209780][ T5874] usbtmc 5-1:16.0: can't read capabilities
[  594.565781][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.580303][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.636387][ T5899] usb 5-1: USB disconnect, device number 50
[  594.822879][ T5874] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  595.005065][T10587] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1122'.
[  595.102886][ T5874] usb 6-1: Using ep0 maxpacket: 8
[  595.122136][ T5874] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  595.174876][   T29] audit: type=1326 audit(1734025176.280:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10584 comm="syz.0.1122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9385d19 code=0x0
[  595.232259][ T5874] usb 6-1: config 179 has no interface number 0
[  595.287534][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  595.405738][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  595.417228][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  595.428738][ T5874] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  595.440314][ T5874] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  595.454900][ T5874] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  595.464313][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.478332][T10581] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  596.298751][ T5874] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input33
[  596.591147][T10598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1123'.
[  596.751647][T10601] ufs: You didn't specify the type of your ufs filesystem
[  596.751647][T10601] 
[  596.751647][T10601] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  596.751647][T10601] 
[  596.751647][T10601] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  596.782324][    C1] vkms_vblank_simulate: vblank timer overrun
[  596.788505][T10601] ufs: ufstype=old is supported read-only
[  596.794430][T10601] syz.0.1125: attempt to access beyond end of device
[  596.794430][T10601] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0
[  599.171496][   T46] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  599.178502][ T5874] usb 6-1: USB disconnect, device number 45
[  599.179097][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  599.179136][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  599.532683][   T46] usb 1-1: Using ep0 maxpacket: 8
[  599.550427][   T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  599.563812][   T46] usb 1-1: config 179 has no interface number 0
[  599.571821][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  599.588449][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  599.597149][ T5874] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  599.600451][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  599.624809][   T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  599.653087][T10619] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1131'.
[  599.662707][   T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  599.700040][   T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  599.701853][T10619] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  599.757386][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.804905][T10605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  599.917006][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1132'.
[  600.462783][   T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input34
[  600.888506][ T5874] usb 1-1: USB disconnect, device number 43
[  600.888552][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  600.903227][ T5874] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  600.912673][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  601.215351][T10643] ufs: You didn't specify the type of your ufs filesystem
[  601.215351][T10643] 
[  601.215351][T10643] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  601.215351][T10643] 
[  601.215351][T10643] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  601.246124][    C1] vkms_vblank_simulate: vblank timer overrun
[  601.252627][T10643] ufs: ufstype=old is supported read-only
[  601.258510][T10643] syz.3.1134: attempt to access beyond end of device
[  601.258510][T10643] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  601.712697][T10632] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  603.052814][T10530] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  603.770528][T10530] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  603.779826][T10530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.912385][T10530] usb 1-1: config 0 descriptor??
[  604.013853][T10670] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1140'.
[  604.107178][   T29] audit: type=1326 audit(1734025185.290:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10665 comm="syz.1.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f185d19 code=0x0
[  605.100167][ T5868] usb 1-1: USB disconnect, device number 44
[  606.179257][T10530] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  606.396102][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1145'.
[  606.417735][T10530] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  606.427353][T10530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.443810][T10530] usb 2-1: config 0 descriptor??
[  606.460761][T10688] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  606.777350][ T5896] usb 2-1: USB disconnect, device number 43
[  606.850929][T10698] program syz.5.1147 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  606.870933][ T5868] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  607.082997][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  607.097586][ T5868] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  607.432960][ T5868] usb 1-1: config 179 has no interface number 0
[  607.439888][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  607.451084][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  607.462847][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  607.474552][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  607.486539][ T5868] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  607.499946][ T5868] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  607.509701][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.528478][T10694] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  607.690828][T10530] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  609.120966][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35
[  609.247704][ T5868] usb 1-1: USB disconnect, device number 45
[  609.253874][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  609.253931][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  609.288567][ T5868] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  609.402807][T10530] usb 4-1: Using ep0 maxpacket: 16
[  609.516965][T10718] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1152'.
[  609.525995][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1152'.
[  609.621945][T10720] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1153'.
[  610.289917][   T29] audit: type=1326 audit(1734025190.890:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10713 comm="syz.1.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f185d19 code=0x0
[  610.577815][T10530] usb 4-1: device descriptor read/all, error -71
[  611.082823][ T5874] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  611.764636][ T5874] usb 6-1: Using ep0 maxpacket: 8
[  611.771534][ T5874] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  611.924573][ T5874] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  611.935120][ T5874] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  611.945219][ T5874] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  611.961185][ T5874] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  611.972643][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.474380][ T5874] usb 6-1: GET_CAPABILITIES returned 0
[  612.479902][ T5874] usbtmc 6-1:16.0: can't read capabilities
[  612.695246][T10757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1160'.
[  612.704334][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'.
[  613.008007][ T5874] usb 6-1: USB disconnect, device number 46
[  614.329888][T10773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1163'.
[  615.112874][ T5874] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  615.222469][T10778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1164'.
[  616.898171][T10785] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1165'.
[  616.958614][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'.
[  617.348294][ T5874] usb 4-1: device descriptor read/all, error -71
[  619.325123][ T5899] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  620.781230][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  620.791823][ T5899] usb 6-1: config 0 has an invalid interface number: 59 but max is 0
[  620.800122][ T5899] usb 6-1: config 0 has no interface number 0
[  620.807393][ T5899] usb 6-1: config 0 interface 59 has no altsetting 0
[  620.816262][ T5899] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=c6.d4
[  620.825475][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.833893][ T5899] usb 6-1: Product: syz
[  620.838082][ T5899] usb 6-1: Manufacturer: syz
[  620.842920][ T5899] usb 6-1: SerialNumber: syz
[  620.849987][ T5899] usb 6-1: config 0 descriptor??
[  620.877154][ T5899] imon 6-1:0.59: unable to register, err -19
[  622.147275][   T46] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  622.155027][ T8848] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  622.301560][T10836] usb 6-1: USB disconnect, device number 47
[  622.322696][T10836] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1179'.
[  622.331689][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'.
[  622.393501][   T46] usb 4-1: Using ep0 maxpacket: 8
[  622.398783][ T8848] usb 1-1: Using ep0 maxpacket: 16
[  622.408264][ T8848] usb 1-1: config 0 has an invalid interface number: 39 but max is 0
[  622.417965][   T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  622.428583][   T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  622.438944][ T8848] usb 1-1: config 0 has no interface number 0
[  622.528660][   T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  622.538755][   T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  622.552148][   T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  622.561657][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.612146][ T8848] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  622.622070][ T8848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.635880][ T8848] usb 1-1: Product: syz
[  622.640124][ T8848] usb 1-1: Manufacturer: syz
[  622.652284][ T8848] usb 1-1: SerialNumber: syz
[  622.686948][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'.
[  622.692214][ T8848] usb 1-1: config 0 descriptor??
[  622.751474][ T8848] i2c-tiny-usb 1-1:0.39: version 70.6d found at bus 001 address 046
[  622.822236][   T46] usb 4-1: GET_CAPABILITIES returned 0
[  622.828141][   T46] usbtmc 4-1:16.0: can't read capabilities
[  623.149793][   T46] usb 4-1: USB disconnect, device number 40
[  624.384746][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.391427][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  624.408127][ T8848]  (null): failure reading functionality
[  624.474207][ T8848] i2c i2c-1: failure reading functionality
[  624.521153][ T8848] i2c i2c-1: connected i2c-tiny-usb device
[  624.575202][ T8848] usb 1-1: USB disconnect, device number 46
[  625.561649][T10878] netlink: 'syz.4.1190': attribute type 75 has an invalid length.
[  626.475243][T10886] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1192'.
[  626.484487][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  629.591551][T10909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'.
[  629.943518][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1201'.
[  629.997741][T10915] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  632.031817][T10931] hub 6-0:1.0: USB hub found
[  632.036849][T10931] hub 6-0:1.0: 1 port detected
[  632.269790][T10931] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1204'.
[  632.279282][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'.
[  633.659449][T10947] netlink: 'syz.0.1207': attribute type 75 has an invalid length.
[  635.106969][   T29] audit: type=1400 audit(1734025216.300:1349): avc:  denied  { create } for  pid=10960 comm="syz.5.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  635.184358][T10964] tmpfs: Bad value for 'mpol'
[  635.202301][T10965] program syz.0.1213 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  635.845565][T10964] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  637.643365][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  638.352928][   T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  639.412461][T10988] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1220'.
[  639.421615][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'.
[  639.735368][T10990] netlink: 'syz.5.1221': attribute type 75 has an invalid length.
[  640.564365][   T46] usb 2-1: Using ep0 maxpacket: 16
[  640.570884][   T46] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  640.592143][   T29] audit: type=1400 audit(1734025221.780:1350): avc:  denied  { write } for  pid=10994 comm="syz.4.1223" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  640.615548][   T46] usb 2-1: config 0 has no interface number 0
[  640.632289][   T46] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  640.641584][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.650031][   T46] usb 2-1: Product: syz
[  640.654536][   T46] usb 2-1: Manufacturer: syz
[  640.660186][   T46] usb 2-1: SerialNumber: syz
[  640.666974][   T46] usb 2-1: config 0 descriptor??
[  640.675335][   T46] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 044
[  640.912788][ T8848] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  640.976391][T11005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1225'.
[  641.077646][ T8848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.088653][ T8848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.098837][ T8848] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  641.108116][ T8848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.118340][ T8848] usb 5-1: config 0 descriptor??
[  641.356593][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.376530][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.424102][ T8848] usbhid 5-1:0.0: can't add hid device: -71
[  641.430161][ T8848] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  641.445205][   T46]  (null): failure reading functionality
[  641.457179][ T8848] usb 5-1: USB disconnect, device number 51
[  641.465687][   T46] i2c i2c-1: failure reading functionality
[  641.490664][   T46] i2c i2c-1: connected i2c-tiny-usb device
[  641.509537][   T46] usb 2-1: USB disconnect, device number 44
[  642.102820][   T29] audit: type=1400 audit(1734025223.290:1351): avc:  denied  { write } for  pid=11012 comm="syz.3.1228" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  642.159092][   T29] audit: type=1400 audit(1734025223.290:1352): avc:  denied  { open } for  pid=11012 comm="syz.3.1228" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  642.183662][    C0] vkms_vblank_simulate: vblank timer overrun
[  642.709572][T11028] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1231'.
[  643.189743][   T29] audit: type=1326 audit(1734025223.980:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11020 comm="syz.0.1231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a9385d19 code=0x0
[  644.047682][T11046] netlink: 'syz.1.1233': attribute type 75 has an invalid length.
[  645.056170][ T8848] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  645.080076][T11062] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  645.089240][   T29] audit: type=1400 audit(1734025226.280:1354): avc:  denied  { write } for  pid=11060 comm="syz.5.1239" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  645.564359][  T827] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  645.596088][ T8848] usb 2-1: Using ep0 maxpacket: 8
[  645.602625][ T8848] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  645.611119][ T8848] usb 2-1: config 179 has no interface number 0
[  645.617579][ T8848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  645.630976][ T8848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  645.647953][ T8848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  646.333871][ T8848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  646.345842][ T8848] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  646.359613][ T8848] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  646.368933][ T8848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.388692][T11056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  646.536887][  T827] usb 4-1: Using ep0 maxpacket: 16
[  646.544644][  T827] usb 4-1: config 0 has an invalid interface number: 39 but max is 0
[  646.633889][T11074] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1243'.
[  646.823349][   T29] audit: type=1326 audit(1734025227.805:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.4.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x0
[  647.028036][  T827] usb 4-1: config 0 has no interface number 0
[  647.137716][  T827] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  647.158744][  T827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.190338][  T827] usb 4-1: Product: syz
[  647.360480][  T827] usb 4-1: Manufacturer: syz
[  647.365127][  T827] usb 4-1: SerialNumber: syz
[  647.371775][  T827] usb 4-1: config 0 descriptor??
[  647.395477][  T827] i2c-tiny-usb 4-1:0.39: version 70.6d found at bus 004 address 041
[  648.304205][ T5874] usb 2-1: USB disconnect, device number 45
[  648.310745][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  648.319988][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  648.903615][T11095] netlink: 'syz.4.1248': attribute type 75 has an invalid length.
[  650.678664][  T827]  (null): failure reading functionality
[  650.686648][  T827] i2c i2c-1: failure reading functionality
[  650.693758][  T827] i2c i2c-1: connected i2c-tiny-usb device
[  651.291301][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'.
[  651.310237][T11106] FAULT_INJECTION: forcing a failure.
[  651.310237][T11106] name failslab, interval 1, probability 0, space 0, times 0
[  651.326313][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.1.1251 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  651.337111][T11106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  651.347157][T11106] Call Trace:
[  651.350424][T11106]  <TASK>
[  651.353339][T11106]  dump_stack_lvl+0x16c/0x1f0
[  651.358009][T11106]  should_fail_ex+0x497/0x5b0
[  651.362681][T11106]  ? fs_reclaim_acquire+0xae/0x150
[  651.367787][T11106]  should_failslab+0xc2/0x120
[  651.372452][T11106]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  651.378244][T11106]  ? __alloc_skb+0x2b1/0x380
[  651.382830][T11106]  __alloc_skb+0x2b1/0x380
[  651.387238][T11106]  ? __pfx___alloc_skb+0x10/0x10
[  651.392172][T11106]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  651.398146][T11106]  netlink_alloc_large_skb+0x69/0x130
[  651.403506][T11106]  netlink_sendmsg+0x689/0xd70
[  651.408265][T11106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  651.413546][T11106]  ____sys_sendmsg+0xaaf/0xc90
[  651.418294][T11106]  ? copy_msghdr_from_user+0x10b/0x160
[  651.423753][T11106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  651.429029][T11106]  ___sys_sendmsg+0x135/0x1e0
[  651.433698][T11106]  ? __pfx____sys_sendmsg+0x10/0x10
[  651.438889][T11106]  ? __pfx_lock_release+0x10/0x10
[  651.443914][T11106]  ? trace_lock_acquire+0x14e/0x1f0
[  651.449147][T11106]  ? __fget_files+0x206/0x3a0
[  651.453825][T11106]  __sys_sendmsg+0x16e/0x220
[  651.458415][T11106]  ? __pfx___sys_sendmsg+0x10/0x10
[  651.463537][T11106]  do_syscall_64+0xcd/0x250
[  651.468061][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.473945][T11106] RIP: 0033:0x7f8c0f185d19
[  651.478347][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  651.497949][T11106] RSP: 002b:00007f8c0fffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  651.506352][T11106] RAX: ffffffffffffffda RBX: 00007f8c0f375fa0 RCX: 00007f8c0f185d19
[  651.514400][T11106] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[  651.522361][T11106] RBP: 00007f8c0fffe090 R08: 0000000000000000 R09: 0000000000000000
[  651.530320][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  651.538275][T11106] R13: 0000000000000000 R14: 00007f8c0f375fa0 R15: 00007ffdbfd0e268
[  651.546244][T11106]  </TASK>
[  651.603973][ T8848] usb 4-1: USB disconnect, device number 41
[  651.934535][T11115] hub 6-0:1.0: USB hub found
[  651.939912][T11115] hub 6-0:1.0: 1 port detected
[  651.962340][T11115] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1254'.
[  651.971460][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'.
[  653.544604][T11131] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1257'.
[  654.458587][   T29] audit: type=1326 audit(1734025234.465:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.3.1257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d3985d19 code=0x0
[  655.278805][T11142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1260'.
[  657.259668][  T827] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  657.453064][  T827] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  657.462115][  T827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.672185][  T827] usb 6-1: config 0 descriptor??
[  659.135863][T11165] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  659.722531][   T46] usb 6-1: USB disconnect, device number 49
[  659.814984][ T8848] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  660.164735][T11177] hub 6-0:1.0: USB hub found
[  660.170216][T11177] hub 6-0:1.0: 1 port detected
[  660.197227][T11177] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1272'.
[  660.206438][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'.
[  660.963380][ T8848] usb 4-1: device descriptor read/64, error -71
[  661.547481][T11178] hub 6-0:1.0: USB hub found
[  661.556514][T11178] hub 6-0:1.0: 1 port detected
[  661.582930][T11178] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1271'.
[  661.591989][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'.
[  662.050202][T11185] binder: 11184:11185 ioctl c0306201 20000380 returned -14
[  662.194233][   T29] audit: type=1400 audit(1734025242.145:1357): avc:  denied  { ioctl } for  pid=11184 comm="syz.5.1275" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  662.314669][T11189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1274'.
[  662.765523][ T8848] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  663.073401][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'.
[  663.098214][T11197] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  664.119831][T11206] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  665.303448][T11218] hub 6-0:1.0: USB hub found
[  665.308824][T11218] hub 6-0:1.0: 1 port detected
[  665.330060][T11218] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1283'.
[  665.339205][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'.
[  665.907165][T11222] program syz.5.1277 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  666.057943][   T46] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  666.315223][   T46] usb 2-1: Using ep0 maxpacket: 16
[  666.355268][   T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  666.378402][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  666.455832][   T46] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  666.471124][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.511231][   T46] usb 2-1: Product: syz
[  666.516663][   T46] usb 2-1: Manufacturer: syz
[  666.537417][   T46] usb 2-1: SerialNumber: syz
[  666.572112][   T46] usb 2-1: config 0 descriptor??
[  666.589196][   T46] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  666.611324][   T46] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  666.636714][ T5899] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  666.869833][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  666.932653][ T5899] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  667.052839][ T5899] usb 4-1: config 179 has no interface number 0
[  667.059339][ T5899] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  667.071239][ T5899] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  667.082886][ T5899] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  667.094332][ T5899] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  667.547738][ T5899] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  668.112233][ T5899] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  668.121401][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.132631][T11230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  669.174417][   T46] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  669.180900][   T46] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  669.254492][   T46] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  669.261494][   T46] em28xx 2-1:0.0: No AC97 audio processor
[  669.281965][   T46] usb 2-1: USB disconnect, device number 46
[  669.288700][   T46] em28xx 2-1:0.0: Disconnecting em28xx
[  669.295354][   T46] em28xx 2-1:0.0: Freeing device
[  669.616434][T10530] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input36
[  670.463337][T11260] hub 6-0:1.0: USB hub found
[  670.468747][T11260] hub 6-0:1.0: 1 port detected
[  670.505329][ T5896] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  671.670896][T11260] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1298'.
[  671.680218][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'.
[  672.403364][T11268] FAULT_INJECTION: forcing a failure.
[  672.403364][T11268] name failslab, interval 1, probability 0, space 0, times 0
[  672.407625][ T5899] usb 4-1: USB disconnect, device number 44
[  672.407674][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  672.429484][T11268] CPU: 1 UID: 0 PID: 11268 Comm: syz.4.1301 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  672.430178][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  672.440849][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  672.440869][T11268] Call Trace:
[  672.459208][T11268]  <TASK>
[  672.459224][T11268]  dump_stack_lvl+0x16c/0x1f0
[  672.459252][T11268]  should_fail_ex+0x497/0x5b0
[  672.459276][T11268]  ? fs_reclaim_acquire+0xae/0x150
[  672.459304][T11268]  should_failslab+0xc2/0x120
[  672.459325][T11268]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  672.459347][T11268]  ? __up_read+0x1fb/0x760
[  672.459369][T11268]  ? __alloc_skb+0x2b1/0x380
[  672.459398][T11268]  __alloc_skb+0x2b1/0x380
[  672.459430][T11268]  ? __pfx___alloc_skb+0x10/0x10
[  672.459466][T11268]  netlink_ack+0x15f/0xb80
[  672.459490][T11268]  ? __pfx___lock_acquire+0x10/0x10
[  672.459512][T11268]  ? hlock_class+0x4e/0x130
[  672.459537][T11268]  ? __lock_acquire+0xcc5/0x3c40
[  672.459563][T11268]  rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450
[  672.459594][T11268]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  672.479534][ T5899] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  672.480209][T11268]  ? netlink_deliver_tap+0x1ae/0xd30
[  672.556597][T11268]  netlink_unicast+0x53c/0x7f0
[  672.561396][T11268]  ? __pfx_netlink_unicast+0x10/0x10
[  672.566720][T11268]  netlink_sendmsg+0x8b8/0xd70
[  672.571515][T11268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  672.576834][T11268]  ____sys_sendmsg+0xaaf/0xc90
[  672.581614][T11268]  ? copy_msghdr_from_user+0x10b/0x160
[  672.587099][T11268]  ? __pfx_____sys_sendmsg+0x10/0x10
[  672.592411][T11268]  ___sys_sendmsg+0x135/0x1e0
[  672.597117][T11268]  ? __pfx____sys_sendmsg+0x10/0x10
[  672.602341][T11268]  ? __pfx_lock_release+0x10/0x10
[  672.607374][T11268]  ? trace_lock_acquire+0x14e/0x1f0
[  672.612597][T11268]  ? __fget_files+0x206/0x3a0
[  672.617288][T11268]  __sys_sendmsg+0x16e/0x220
[  672.621899][T11268]  ? __pfx___sys_sendmsg+0x10/0x10
[  672.627060][T11268]  do_syscall_64+0xcd/0x250
[  672.631588][T11268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.637501][T11268] RIP: 0033:0x7fde7d785d19
[  672.642012][T11268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.661633][T11268] RSP: 002b:00007fde7e5b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  672.670071][T11268] RAX: ffffffffffffffda RBX: 00007fde7d975fa0 RCX: 00007fde7d785d19
[  672.678067][T11268] RDX: 0000000024000080 RSI: 0000000020000380 RDI: 0000000000000003
[  672.686057][T11268] RBP: 00007fde7e5b1090 R08: 0000000000000000 R09: 0000000000000000
[  672.694046][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.702042][T11268] R13: 0000000000000000 R14: 00007fde7d975fa0 R15: 00007ffd2f464d38
[  672.710050][T11268]  </TASK>
[  672.714943][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  672.794716][ T5896] usb 1-1: unable to read config index 0 descriptor/start: -71
[  672.802337][ T5896] usb 1-1: can't read configurations, error -71
[  672.840587][   T29] audit: type=1400 audit(1734025252.238:1358): avc:  denied  { read } for  pid=11279 comm="syz.0.1305" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  672.864298][   T29] audit: type=1400 audit(1734025252.238:1359): avc:  denied  { open } for  pid=11279 comm="syz.0.1305" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  673.021110][   T46] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  673.222050][   T29] audit: type=1400 audit(1734025252.472:1360): avc:  denied  { bind } for  pid=11284 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  673.797703][T11293] program syz.3.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  673.832677][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.843822][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.853652][   T46] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  673.865310][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.884581][   T46] usb 2-1: config 0 descriptor??
[  674.226795][T11308] hub 6-0:1.0: USB hub found
[  674.232235][T11308] hub 6-0:1.0: 1 port detected
[  674.257674][T11308] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1310'.
[  674.267220][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'.
[  674.508318][   T46] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  674.636362][   T46] usb 2-1: USB disconnect, device number 47
[  675.125106][T11312] nbd: illegal input index -1996488704
[  676.155819][T10530] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  676.204138][   T25] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  676.388312][   T25] usb 1-1: Using ep0 maxpacket: 16
[  676.396966][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  676.436837][   T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  676.522641][   T25] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00
[  676.576188][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.630172][T10530] usb 6-1: Using ep0 maxpacket: 16
[  676.630545][   T25] usb 1-1: config 0 descriptor??
[  677.058608][T10530] usb 6-1: config 0 has an invalid interface number: 39 but max is 0
[  677.066747][T10530] usb 6-1: config 0 has no interface number 0
[  677.081257][T10530] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  677.090356][T10530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.101382][T10530] usb 6-1: Product: syz
[  677.106351][T10530] usb 6-1: Manufacturer: syz
[  677.117457][T10530] usb 6-1: SerialNumber: syz
[  677.133280][T10530] usb 6-1: config 0 descriptor??
[  677.146035][T10530] i2c-tiny-usb 6-1:0.39: version 70.6d found at bus 006 address 050
[  677.435956][T11335] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  677.586636][   T29] audit: type=1400 audit(1734025256.681:1361): avc:  denied  { connect } for  pid=11319 comm="syz.0.1317" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  677.609099][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  677.615819][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  677.638489][   T25] usb 1-1: USB disconnect, device number 49
[  678.429777][T10530]  (null): failure reading functionality
[  678.437218][T10530] i2c i2c-1: failure reading functionality
[  678.451867][T11334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1321'.
[  678.475731][T11340] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0
[  678.490046][T10530] i2c i2c-1: connected i2c-tiny-usb device
[  678.501189][T11342] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 1
[  678.522457][T11344] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 2
[  678.522856][T11345] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 3
[  678.561570][T10530] usb 6-1: USB disconnect, device number 50
[  679.027535][T11359] hub 6-0:1.0: USB hub found
[  679.032923][T11359] hub 6-0:1.0: 1 port detected
[  679.075166][T11359] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1327'.
[  679.084760][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'.
[  680.590005][T11368] program syz.3.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  680.678271][T11370] syz.1.1329: attempt to access beyond end of device
[  680.678271][T11370] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  680.691401][T11370] (syz.1.1329,11370,0):ocfs2_get_sector:1769 ERROR: status = -5
[  680.699244][T11370] (syz.1.1329,11370,0):ocfs2_sb_probe:749 ERROR: status = -5
[  680.706767][T11370] (syz.1.1329,11370,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  680.715701][T11370] (syz.1.1329,11370,0):ocfs2_fill_super:1178 ERROR: status = -5
[  680.737360][T11371] xt_TPROXY: Can be used only with -p tcp or -p udp
[  681.246456][T11376] hub 6-0:1.0: USB hub found
[  681.251835][T11376] hub 6-0:1.0: 1 port detected
[  681.334986][T11376] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1332'.
[  681.360202][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1332'.
[  682.083175][   T46] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  683.600744][   T29] audit: type=1400 audit(1734025262.303:1362): avc:  denied  { create } for  pid=11387 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  684.253526][   T29] audit: type=1400 audit(1734025262.321:1363): avc:  denied  { write } for  pid=11387 comm="syz.3.1337" path="socket:[27415]" dev="sockfs" ino=27415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  684.714500][T11404] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1339'.
[  685.103727][   T29] audit: type=1326 audit(1734025263.696:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.273992][   T46] usb 5-1: device not accepting address 52, error -71
[  685.354728][   T29] audit: type=1326 audit(1734025263.771:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.484307][   T29] audit: type=1326 audit(1734025263.874:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.568050][   T29] audit: type=1326 audit(1734025263.874:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.593519][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  685.770236][   T29] audit: type=1326 audit(1734025263.921:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.867817][   T29] audit: type=1326 audit(1734025263.921:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.907083][   T29] audit: type=1326 audit(1734025263.921:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  685.990939][T11420] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1343'.
[  686.486092][   T29] audit: type=1326 audit(1734025263.921:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fde7d785d19 code=0x7ffc0000
[  686.509652][    C0] vkms_vblank_simulate: vblank timer overrun
[  687.127077][T11429] syz.5.1346: attempt to access beyond end of device
[  687.127077][T11429] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  687.140251][T11429] (syz.5.1346,11429,0):ocfs2_get_sector:1769 ERROR: status = -5
[  687.148126][T11429] (syz.5.1346,11429,0):ocfs2_sb_probe:749 ERROR: status = -5
[  687.155814][T11429] (syz.5.1346,11429,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  687.164666][T11429] (syz.5.1346,11429,0):ocfs2_fill_super:1178 ERROR: status = -5
[  687.185933][T11430] xt_TPROXY: Can be used only with -p tcp or -p udp
[  688.493062][T11440] 9p: Unknown Cache mode or invalid value mm
[  688.632104][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  688.639097][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  688.707791][T11452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'.
[  689.056323][   T46] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  690.173790][T11460] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  690.582323][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.593878][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  690.605060][   T46] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  690.614137][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.637308][   T46] usb 5-1: config 0 descriptor??
[  690.653335][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  690.653352][   T29] audit: type=1400 audit(1734025268.907:1393): avc:  denied  { write } for  pid=11469 comm="syz.3.1358" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  690.663050][T11470] netlink: 'syz.3.1358': attribute type 2 has an invalid length.
[  690.721251][   T29] audit: type=1400 audit(1734025268.916:1394): avc:  denied  { read } for  pid=11469 comm="syz.3.1358" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  690.752534][   T29] audit: type=1400 audit(1734025268.991:1395): avc:  denied  { write } for  pid=11471 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  690.962729][ T5896] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  691.012382][   T29] audit: type=1400 audit(1734025269.243:1396): avc:  denied  { setopt } for  pid=11477 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  691.125453][T11481] syz.5.1360: attempt to access beyond end of device
[  691.125453][T11481] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  691.138959][T11481] (syz.5.1360,11481,0):ocfs2_get_sector:1769 ERROR: status = -5
[  691.146727][T11481] (syz.5.1360,11481,0):ocfs2_sb_probe:749 ERROR: status = -5
[  691.154362][T11481] (syz.5.1360,11481,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  691.163177][T11481] (syz.5.1360,11481,0):ocfs2_fill_super:1178 ERROR: status = -5
[  691.173169][T10530] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  691.189122][T11482] xt_TPROXY: Can be used only with -p tcp or -p udp
[  691.426905][T10530] usb 2-1: Using ep0 maxpacket: 8
[  691.442594][T10530] usb 2-1: config index 0 descriptor too short (expected 75, got 45)
[  691.491868][   T46] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  691.505901][   T46] usb 5-1: USB disconnect, device number 54
[  691.519445][T10530] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  691.531333][T10530] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  691.533637][ T5896] usb 1-1: Using ep0 maxpacket: 8
[  691.542648][T10530] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  691.557208][ T5896] usb 1-1: config index 0 descriptor too short (expected 75, got 45)
[  691.559379][T10530] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  691.566712][ T5896] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  691.592282][T10530] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  691.602953][T10530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.614661][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  691.628610][ T5896] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  691.640110][ T5896] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  691.655244][T11484] 9p: Unknown Cache mode or invalid value mm
[  691.661442][ T5896] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  691.671700][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.973078][T11491] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1364'.
[  692.086238][ T5896] usb 1-1: GET_CAPABILITIES returned 0
[  692.135722][ T5896] usbtmc 1-1:16.0: can't read capabilities
[  692.189273][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.338444][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.347611][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.406454][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.838065][T10530] usb 2-1: GET_CAPABILITIES returned 0
[  692.843597][T10530] usbtmc 2-1:16.0: can't read capabilities
[  693.605420][T10530] usb 2-1: USB disconnect, device number 48
[  693.954765][ T5874] usb 1-1: USB disconnect, device number 50
[  694.128085][T11512] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  694.859172][T11521] 9p: Unknown Cache mode or invalid value mm
[  696.387184][ T5896] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  696.967677][T11542] ufs: You didn't specify the type of your ufs filesystem
[  696.967677][T11542] 
[  696.967677][T11542] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  696.967677][T11542] 
[  696.967677][T11542] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  696.998694][T11542] ufs: ufstype=old is supported read-only
[  697.004629][T11542] syz.3.1377: attempt to access beyond end of device
[  697.004629][T11542] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  698.330262][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.342670][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.397110][ T5896] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  698.406194][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.494782][T11550] hub 6-0:1.0: USB hub found
[  698.500349][T11550] hub 6-0:1.0: 1 port detected
[  698.524902][T11550] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1379'.
[  698.534119][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'.
[  698.941435][ T5896] usb 2-1: config 0 descriptor??
[  699.003507][ T5896] usb 2-1: can't set config #0, error -71
[  699.010628][ T5896] usb 2-1: USB disconnect, device number 49
[  700.097540][ T5868] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  700.631761][T11571] syz.1.1383: attempt to access beyond end of device
[  700.631761][T11571] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  700.645366][T11571] (syz.1.1383,11571,0):ocfs2_get_sector:1769 ERROR: status = -5
[  700.653076][T11571] (syz.1.1383,11571,0):ocfs2_sb_probe:749 ERROR: status = -5
[  700.660463][T11571] (syz.1.1383,11571,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  700.669223][T11571] (syz.1.1383,11571,0):ocfs2_fill_super:1178 ERROR: status = -5
[  700.692703][T11572] xt_TPROXY: Can be used only with -p tcp or -p udp
[  700.924727][T11573] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  701.051269][ T5868] usb 4-1: Using ep0 maxpacket: 8
[  701.233735][ T5868] usb 4-1: config index 0 descriptor too short (expected 75, got 45)
[  701.250266][ T5868] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  701.316866][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  701.360115][ T5868] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  701.401135][ T5868] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  701.436821][ T5868] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  701.477620][T11577] 9p: Unknown Cache mode or invalid value mm
[  701.494343][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.729697][ T5868] usb 4-1: GET_CAPABILITIES returned 0
[  701.745392][ T5868] usbtmc 4-1:16.0: can't read capabilities
[  701.783783][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1390'.
[  702.660762][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.832514][T11597] netlink: 'syz.0.1392': attribute type 75 has an invalid length.
[  702.900177][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.660284][ T5874] usb 4-1: USB disconnect, device number 45
[  703.808133][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1395'.
[  704.714196][T11624] program syz.0.1400 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  704.787325][T11623] netlink: 'syz.1.1397': attribute type 75 has an invalid length.
[  705.803142][T11627] 9p: Unknown Cache mode or invalid value mm
[  706.071220][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1404'.
[  706.093048][T11638] FAULT_INJECTION: forcing a failure.
[  706.093048][T11638] name failslab, interval 1, probability 0, space 0, times 0
[  706.093107][T11638] CPU: 1 UID: 0 PID: 11638 Comm: syz.5.1405 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  706.093131][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  706.093142][T11638] Call Trace:
[  706.093149][T11638]  <TASK>
[  706.093157][T11638]  dump_stack_lvl+0x16c/0x1f0
[  706.093187][T11638]  should_fail_ex+0x497/0x5b0
[  706.093214][T11638]  ? fs_reclaim_acquire+0xae/0x150
[  706.093246][T11638]  should_failslab+0xc2/0x120
[  706.093271][T11638]  __kmalloc_noprof+0xcb/0x510
[  706.093298][T11638]  ? kasan_save_track+0x14/0x30
[  706.093326][T11638]  fuse_direct_io+0x5b3/0x2580
[  706.093373][T11638]  ? __pfx_fuse_direct_io+0x10/0x10
[  706.093397][T11638]  ? lockdep_init_map_type+0x16d/0x7d0
[  706.093428][T11638]  fuse_direct_IO+0x620/0xf20
[  706.093458][T11638]  ? __pfx_aio_complete_rw+0x10/0x10
[  706.093490][T11638]  ? __pfx_fuse_direct_IO+0x10/0x10
[  706.093511][T11638]  ? fuse_direct_write_iter+0x42c/0x830
[  706.093536][T11638]  ? generic_write_check_limits+0x1f1/0x290
[  706.093582][T11638]  fuse_direct_write_iter+0x4c8/0x830
[  706.093610][T11638]  ? __pfx_fuse_direct_write_iter+0x10/0x10
[  706.093644][T11638]  ? find_held_lock+0x2d/0x110
[  706.093675][T11638]  ? aio_write+0x6c5/0x8c0
[  706.093707][T11638]  ? __pfx_lock_release+0x10/0x10
[  706.093729][T11638]  ? trace_lock_acquire+0x14e/0x1f0
[  706.093762][T11638]  fuse_file_write_iter+0x66e/0x8c0
[  706.093789][T11638]  aio_write+0x3b2/0x8c0
[  706.093817][T11638]  ? __pfx_aio_write+0x10/0x10
[  706.093850][T11638]  ? find_held_lock+0x2d/0x110
[  706.093892][T11638]  ? lock_acquire+0x2f/0xb0
[  706.093913][T11638]  ? __might_fault+0xe3/0x190
[  706.093945][T11638]  ? io_submit_one+0x1248/0x1da0
[  706.093972][T11638]  io_submit_one+0x1248/0x1da0
[  706.094011][T11638]  ? __pfx_io_submit_one+0x10/0x10
[  706.094042][T11638]  ? __might_fault+0x13b/0x190
[  706.094074][T11638]  ? lock_acquire+0x2f/0xb0
[  706.094095][T11638]  ? __might_fault+0xe3/0x190
[  706.094126][T11638]  ? __x64_sys_io_submit+0x1b2/0x340
[  706.094154][T11638]  __x64_sys_io_submit+0x1b2/0x340
[  706.094182][T11638]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  706.094222][T11638]  do_syscall_64+0xcd/0x250
[  706.094247][T11638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.094270][T11638] RIP: 0033:0x7fdccbf85d19
[  706.094285][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.094304][T11638] RSP: 002b:00007fdccce8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  706.094325][T11638] RAX: ffffffffffffffda RBX: 00007fdccc175fa0 RCX: 00007fdccbf85d19
[  706.094339][T11638] RDX: 0000000020000780 RSI: 0000000000000002 RDI: 00007fdccce42000
[  706.094352][T11638] RBP: 00007fdccce8c090 R08: 0000000000000000 R09: 0000000000000000
[  706.094366][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.094379][T11638] R13: 0000000000000000 R14: 00007fdccc175fa0 R15: 00007fffc4ed4ff8
[  706.094408][T11638]  </TASK>
[  706.142817][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1406'.
[  706.345066][T11638] ------------[ cut here ]------------
[  706.345079][T11638] kernel BUG at lib/iov_iter.c:626!
[  706.901373][T11638] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  706.908536][T11638] CPU: 1 UID: 0 PID: 11638 Comm: syz.5.1405 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[  706.919298][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  706.929352][T11638] RIP: 0010:iov_iter_revert+0x533/0x5a0
[  706.934910][T11638] Code: 89 e6 48 c7 c7 80 9a d0 8e e8 89 e3 31 00 e9 b1 fd ff ff e8 8f 08 5f fd eb 95 e8 b8 08 5f fd e9 46 fb ff ff e8 3e 4e fc fc 90 <0f> 0b 48 8b 3c 24 e8 a2 08 5f fd e9 97 fb ff ff 48 8b 7c 24 08 e8
[  706.954523][T11638] RSP: 0018:ffffc9000461f528 EFLAGS: 00010293
[  706.960601][T11638] RAX: 0000000000000000 RBX: 0000000000001000 RCX: ffffffff849db130
[  706.968568][T11638] RDX: ffff88807dd74880 RSI: ffffffff849db542 RDI: 0000000000000001
[  706.976545][T11638] RBP: ffffc9000461fb20 R08: 0000000000000001 R09: 0000000000000000
[  706.984514][T11638] R10: 0000000000000000 R11: ffffffff81fc8c14 R12: 0000000000000000
[  706.992488][T11638] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807dd22a00
[  707.000464][T11638] FS:  00007fdccce8c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  707.009385][T11638] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  707.015971][T11638] CR2: 000000110c409d2c CR3: 000000007e170000 CR4: 00000000003526f0
[  707.023935][T11638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  707.031899][T11638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  707.039859][T11638] Call Trace:
[  707.043122][T11638]  <TASK>
[  707.046037][T11638]  ? die+0x31/0x80
[  707.049748][T11638]  ? do_trap+0x232/0x430
[  707.053988][T11638]  ? iov_iter_revert+0x533/0x5a0
[  707.058930][T11638]  ? iov_iter_revert+0x533/0x5a0
[  707.063873][T11638]  ? do_error_trap+0xf4/0x230
[  707.068553][T11638]  ? iov_iter_revert+0x533/0x5a0
[  707.073502][T11638]  ? handle_invalid_op+0x34/0x40
[  707.078449][T11638]  ? iov_iter_revert+0x533/0x5a0
[  707.083392][T11638]  ? exc_invalid_op+0x2e/0x50
[  707.088068][T11638]  ? asm_exc_invalid_op+0x1a/0x20
[  707.093088][T11638]  ? kasan_save_track+0x14/0x30
[  707.097933][T11638]  ? iov_iter_revert+0x120/0x5a0
[  707.102875][T11638]  ? iov_iter_revert+0x532/0x5a0
[  707.107834][T11638]  ? iov_iter_revert+0x533/0x5a0
[  707.112777][T11638]  ? iov_iter_revert+0x532/0x5a0
[  707.117722][T11638]  fuse_direct_io+0xf0e/0x2580
[  707.122493][T11638]  ? __pfx_fuse_direct_io+0x10/0x10
[  707.127686][T11638]  ? lockdep_init_map_type+0x16d/0x7d0
[  707.133139][T11638]  fuse_direct_IO+0x620/0xf20
[  707.137812][T11638]  ? __pfx_aio_complete_rw+0x10/0x10
[  707.143095][T11638]  ? __pfx_fuse_direct_IO+0x10/0x10
[  707.148325][T11638]  ? fuse_direct_write_iter+0x42c/0x830
[  707.153876][T11638]  ? generic_write_check_limits+0x1f1/0x290
[  707.159776][T11638]  fuse_direct_write_iter+0x4c8/0x830
[  707.165140][T11638]  ? __pfx_fuse_direct_write_iter+0x10/0x10
[  707.171023][T11638]  ? find_held_lock+0x2d/0x110
[  707.175788][T11638]  ? aio_write+0x6c5/0x8c0
[  707.180197][T11638]  ? __pfx_lock_release+0x10/0x10
[  707.185210][T11638]  ? trace_lock_acquire+0x14e/0x1f0
[  707.190408][T11638]  fuse_file_write_iter+0x66e/0x8c0
[  707.195611][T11638]  aio_write+0x3b2/0x8c0
[  707.199854][T11638]  ? __pfx_aio_write+0x10/0x10
[  707.204617][T11638]  ? find_held_lock+0x2d/0x110
[  707.209384][T11638]  ? lock_acquire+0x2f/0xb0
[  707.213885][T11638]  ? __might_fault+0xe3/0x190
[  707.218566][T11638]  ? io_submit_one+0x1248/0x1da0
[  707.223506][T11638]  io_submit_one+0x1248/0x1da0
[  707.228271][T11638]  ? __pfx_io_submit_one+0x10/0x10
[  707.233380][T11638]  ? __might_fault+0x13b/0x190
[  707.238173][T11638]  ? lock_acquire+0x2f/0xb0
[  707.242673][T11638]  ? __might_fault+0xe3/0x190
[  707.247363][T11638]  ? __x64_sys_io_submit+0x1b2/0x340
[  707.252653][T11638]  __x64_sys_io_submit+0x1b2/0x340
[  707.257768][T11638]  ? __pfx___x64_sys_io_submit+0x10/0x10
[  707.263412][T11638]  do_syscall_64+0xcd/0x250
[  707.268001][T11638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.273897][T11638] RIP: 0033:0x7fdccbf85d19
[  707.278303][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  707.297909][T11638] RSP: 002b:00007fdccce8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  707.306320][T11638] RAX: ffffffffffffffda RBX: 00007fdccc175fa0 RCX: 00007fdccbf85d19
[  707.314287][T11638] RDX: 0000000020000780 RSI: 0000000000000002 RDI: 00007fdccce42000
[  707.322251][T11638] RBP: 00007fdccce8c090 R08: 0000000000000000 R09: 0000000000000000
[  707.330214][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.338175][T11638] R13: 0000000000000000 R14: 00007fdccc175fa0 R15: 00007fffc4ed4ff8
[  707.346319][T11638]  </TASK>
[  707.349323][T11638] Modules linked in:
[  707.353968][T11638] ---[ end trace 0000000000000000 ]---
[  707.360366][T11638] RIP: 0010:iov_iter_revert+0x533/0x5a0
[  707.365981][T11638] Code: 89 e6 48 c7 c7 80 9a d0 8e e8 89 e3 31 00 e9 b1 fd ff ff e8 8f 08 5f fd eb 95 e8 b8 08 5f fd e9 46 fb ff ff e8 3e 4e fc fc 90 <0f> 0b 48 8b 3c 24 e8 a2 08 5f fd e9 97 fb ff ff 48 8b 7c 24 08 e8
[  707.449348][T11638] RSP: 0018:ffffc9000461f528 EFLAGS: 00010293
[  707.460147][T11638] RAX: 0000000000000000 RBX: 0000000000001000 RCX: ffffffff849db130
[  707.468309][T11638] RDX: ffff88807dd74880 RSI: ffffffff849db542 RDI: 0000000000000001
[  707.476373][T11638] RBP: ffffc9000461fb20 R08: 0000000000000001 R09: 0000000000000000
[  707.484394][T11638] R10: 0000000000000000 R11: ffffffff81fc8c14 R12: 0000000000000000
[  707.492446][T11638] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88807dd22a00
[  707.532521][T11638] FS:  00007fdccce8c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  707.542094][T11638] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  707.549219][T11638] CR2: 0000001b2f40cff8 CR3: 000000007e170000 CR4: 00000000003526f0
[  707.557202][T11638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  707.565420][T11638] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  707.573545][T11638] Kernel panic - not syncing: Fatal exception
[  707.579850][T11638] Kernel Offset: disabled
[  707.584152][T11638] Rebooting in 86400 seconds..