last executing test programs:

8m2.550357996s ago: executing program 1 (id=411):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0x10, 0x80000, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000400)={0x0, 0x7f, 0x7, 0x9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)
setsockopt(r0, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xf0, "4c3be9893871fbedef2139ef1d2d4b6fb7a039a3b2b88fd37bbf95c18624729ed3483a65cddec77f431350ffcadb556c126fd02914b70314955face6d5442e9f99870b46e10fc7c7a091fcaa2e22c3b72ffe9f10a737b63e5f08e3f768dea810d60eefb9d72a42ec7ccb7bd489179d33be50fcb707a01ee0fcff5260c96dc7cf84d7f54f7a72d855d15b494886dc4a932afd859a67c775d88cba97981ef99ffabee7eae3945d7f57e6c1972ee94d52a8138a5821d968ea790d1f1fc5e41cb55b6c2ffd98b59df6cd86cbe26f3ef3b4ebb8eeb7d330158d913489d22d539a8e8a2e8fc5ac80975ce362b6425ebc09ac61"}, &(0x7f0000000080)=0xf8)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery')

8m0.70501757s ago: executing program 1 (id=413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

7m59.936022787s ago: executing program 1 (id=415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x15c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x134, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

7m59.745598242s ago: executing program 1 (id=417):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1)

7m59.364322686s ago: executing program 1 (id=420):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
setpgid(r2, 0x0)
setpgid(0x0, r2)
readlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/64, 0x40)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x7, 0x1, {{0x1, '\x00'}, 0x9}}, 0xe)
setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r3, 0x1, 0x60bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x34}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x4000000, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

7m59.168389016s ago: executing program 1 (id=424):
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0)
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x2)
creat(&(0x7f0000000300)='./file0\x00', 0x58)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
ppoll(&(0x7f0000002240)=[{r5}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x8001)
ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f0000000440)={0x0, 0x8000, 0x3, '\x00', &(0x7f0000000400)=0x6})
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

7m43.922340973s ago: executing program 32 (id=424):
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r3, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0)
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x2)
creat(&(0x7f0000000300)='./file0\x00', 0x58)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
ppoll(&(0x7f0000002240)=[{r5}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x8001)
ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f0000000440)={0x0, 0x8000, 0x3, '\x00', &(0x7f0000000400)=0x6})
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

8.345483642s ago: executing program 0 (id=2148):
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x5, 0x203000)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523)
set_mempolicy(0x8002, 0x0, 0x6)
set_mempolicy(0x4000, 0x0, 0x2)
r1 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
setrlimit(0x0, &(0x7f0000000000)={0x1ff, 0xb})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0x4, 0xffff, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x6, 0x9, 0x2, 0xfffffffe, 0x7f, 0x6, 0x7, 0xffffffe2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x85, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0x9, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x5, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x6, 0x3, 0x5, 0x0, 0x8, 0x10000000, 0x7f, 0x0, 0x5, 0x5, 0xa, 0x6, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x8, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x80000000, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x9, 0xfffffffd, 0xff, 0x1007, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x4, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x4, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x655, 0xfffffdfe, 0x0, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x1000005, 0x0, 0x1ef, 0x5a5, 0x2, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x9, 0xba31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0x5, 0x7ffffffd, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x6, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

6.77878738s ago: executing program 2 (id=2153):
syz_open_dev$sg(0x0, 0x0, 0x40080)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008050b2218000000000001090224000100000000090400fefd0d330000092100000001220700090581030000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207001d003197dad8f00000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f00000053c0)=0x10001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000001d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0x8, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0xa)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000440)=""/37, 0x25}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x5, &(0x7f0000000880)=""/17, 0x11}, 0x3}, {{&(0x7f00000008c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @netrom, @rose, @default]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000a40)=""/137, 0x89}, {&(0x7f0000000b00)=""/16, 0x10}, {&(0x7f0000000b40)=""/104, 0x68}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/104, 0x68}], 0x6, &(0x7f0000001cc0)=""/22, 0x16}, 0xfffffcc5}], 0x2, 0x100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000002000010000000000000000000a80100000006ec91800010014000100fc01000000000000000000000000000008000f00ffffffff140002"], 0x54}}, 0x4004874)
set_mempolicy_home_node(&(0x7f000047f000/0x4000)=nil, 0x4000, 0x1, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)={0x0, 0x200000, 0x2, 0x0, 0x1000007})
ioctl$KDMKTONE(r8, 0x4b30, 0x8000000000000001)

5.833880016s ago: executing program 0 (id=2163):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x0, 0x9403, 0x0, 0x2e0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@empty, @local, [], [], 'ip6erspan0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="d95ca6bf8726951ee388cee0b4cebd93753d6f648eeaee2f36b22f7bb7591a6f7350a3dee1e77c7d43eab4d1649d591a2d39065d21e0a1b46315e391b2c57e009d363fad43bdcfb9154a8a4aa894fde282494f45c3741b1c5821e2e50e608fe1b5ace3d4da3c60bfdf94b25a4af29d0835bdbcae160026809ad3b711bc0def26e2a871c9043077847a035aaafe9978233f03d8b17d9d085dc91eca7857d802491773e08598835f439aa7a108703088e8dbbc07b0842b4f2e8cb9658a4b1264e42bc17edfbbfc46876544f252929b767044014ca521ed298c793c6aeb205327467bf066999dbc44f5803d55cd7c8463f9816d80707186f26fe95ae6dca5", 0xfd}], 0x4}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

4.888091992s ago: executing program 5 (id=2167):
r0 = socket$kcm(0x2d, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000f80)={0x1, {0x0, 0x4, 0x182, 0x800002}, {0x20010b, 0x0, 0x100000, 0xa}, {0x6, 0xfffffffc}})
r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x51)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000380))

4.846772123s ago: executing program 5 (id=2168):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000000b010200000000000000ccb841ee4d824f84000000000008000340000000010800024000000000"], 0x2c}}, 0x4000)
capset(0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)=ANY=[], 0x0)

4.216767221s ago: executing program 0 (id=2170):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r3 = socket(0x11, 0xa, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000080))

3.385320923s ago: executing program 2 (id=2173):
socket$packet(0x11, 0x2, 0x300)
eventfd2(0xff, 0x80001)
socket(0xa, 0x3, 0x3a)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200))

3.26795509s ago: executing program 0 (id=2175):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xe58ac855f3a312e9}, 0x20000000)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r4, 0x10e, 0xb, 0x0, &(0x7f00000000c0))
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r7}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x5dd, @mcast2, 0x7, 0x3}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000000000080003"], 0x88}}, 0x4008000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.20097859s ago: executing program 2 (id=2177):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4004)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f)
ftruncate(r3, 0x2007ffc)
sendfile(r2, r3, 0x0, 0x800000009)

3.109946622s ago: executing program 2 (id=2178):
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xfd)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)

3.074308408s ago: executing program 0 (id=2179):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r3 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
getsockname$packet(r3, 0x0, &(0x7f0000000080))

3.036728533s ago: executing program 2 (id=2180):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
creat(0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

2.990036746s ago: executing program 2 (id=2181):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000000b010200000000000000ccb841ee4d824f84000000000008000340000000010800024000000000"], 0x2c}}, 0x4000)
capset(0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x62, 0x0, 0x0)

2.322627751s ago: executing program 5 (id=2183):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x800, 0xfffffffd, 0x400}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000600)={'vxcan1\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x18, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b4, @void, @value}, 0x94) (async)
listen(0xffffffffffffffff, 0x5) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = socket(0x11, 0x3, 0x9)
getsockopt$bt_BT_SECURITY(r5, 0x107, 0x12, 0x0, 0xffffffffffffff6c) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, 0x0, 0x0) (async, rerun: 64)
connect$inet6(r6, 0x0, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x4172, 0x0, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async)
io_uring_enter(r0, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

2.111607187s ago: executing program 4 (id=2185):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x22806d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000034000)=""/102400, 0x19000)
mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2000004)
r3 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x5, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
socket$nl_route(0x10, 0x3, 0x0)

2.109375529s ago: executing program 5 (id=2186):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r3 = socket(0x11, 0xa, 0x0)
getsockname$packet(r3, 0x0, &(0x7f0000000080))

2.103711358s ago: executing program 0 (id=2187):
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x2, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x7f, 0x4, 0x7, 0x4, 0x3, 0x1, 0x3, 0xe0a], 0x4000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1)
semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000ebff0000010000809500"/24], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpgrp(0x0)
setpriority(0x0, r5, 0x9)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
semget$private(0x0, 0x5, 0x63c)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
unshare(0x64000600)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008001)
syz_open_dev$evdev(&(0x7f0000000000), 0xfe, 0x80000)

1.111482766s ago: executing program 3 (id=2188):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4004)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f)
ftruncate(r3, 0x2007ffc)
sendfile(r2, r3, 0x0, 0x800000009)

1.110404803s ago: executing program 5 (id=2189):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xe58ac855f3a312e9}, 0x20000000)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r4, 0x10e, 0xb, 0x0, &(0x7f00000000c0))
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r7}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendto$x25(0xffffffffffffffff, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x5dd, @mcast2, 0x7, 0x3}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000000000080003"], 0x88}}, 0x4008000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

642.390915ms ago: executing program 3 (id=2190):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvmmsg$unix(r0, &(0x7f0000003900), 0x0, 0x10002, 0x0)

562.469971ms ago: executing program 4 (id=2191):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) (fail_nth: 2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0)

506.989153ms ago: executing program 5 (id=2192):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c040000000b010200000000000000ccb841ee4d824f84000000000008000340000000010800024000000000"], 0x2c}}, 0x4000)
capset(0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)

371.954761ms ago: executing program 4 (id=2193):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xa, 0xffff}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x2000400c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', r2, 0x8, 0xf81f, 0x0, 0x6, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x2000000)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x74000000)
write$dsp(r6, &(0x7f0000002000)='`', 0x88020)

371.488356ms ago: executing program 3 (id=2194):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003"], 0x68}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f)

314.697532ms ago: executing program 3 (id=2195):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/148, 0x94)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000001c0)='syz', 0x0, r0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r2=>0x0)
capset(&(0x7f0000000240)={0x0, r2}, &(0x7f0000000280)={0x6e, 0x1d, 0x0, 0x1, 0x1, 0x6})
mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x190)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x1403, 0x100, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x20044000)
prlimit64(r2, 0x5c3eb7440c1dafb8, 0x0, &(0x7f0000000480))
r4 = syz_open_pts(0xffffffffffffffff, 0x103200)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000004c0)={0xe7, 0x8, 0x2, 0x5, 0xfeff, 0x8})
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000500)=0x7)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000540)={[{0x6, 0x6, 0x9, 0x67, 0xff, 0x0, 0x81, 0x9, 0x6, 0x5, 0x92, 0x5, 0xe9c}, {0x1, 0x6, 0x2, 0x1, 0x1, 0x2, 0x8b, 0x0, 0xdd, 0x0, 0x3, 0x7, 0x3ff}, {0x80000000, 0x85, 0x1, 0x5, 0x5, 0x6, 0x3, 0x4, 0x8, 0x4, 0x69, 0x0, 0x1}], 0x12})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-010d \x00'}, 0x20)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xe, &(0x7f00000006c0)=@raw=[@generic={0x67, 0xc, 0x8, 0x5a, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @map_fd={0x18, 0x8, 0x1, 0x0, r7}, @map_idx_val={0x18, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000740)='GPL\x00', 0x0, 0x78, &(0x7f0000000780)=""/120, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xd, 0x6, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[r8, r9, r1, r10], &(0x7f0000000ac0)=[{0x4, 0x3, 0xa, 0x4}], 0x10, 0xa74d, @void, @value}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000bc0)={{0x8}, {0x7, 0xe4}, 0x4, 0x7, 0x4})
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=0xffffffffffffffff, 0x4)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x17, 0x1e, &(0x7f0000000c40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x7, 0xe4, &(0x7f0000000d80)=""/228, 0x41000, 0x65, '\x00', 0x0, @cgroup_sysctl=0x12, r12, 0x8, &(0x7f0000000ec0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x3, 0xe, 0xfffffffa, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=[r10, r13, 0xffffffffffffffff, r10, r6, r6, r10], 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='itimer_expire\x00', r11, 0x0, 0x5}, 0x18)
r14 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r14, &(0x7f0000001140)={0x2, 0x4e22, @broadcast}, 0x10)

294.181828ms ago: executing program 4 (id=2196):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90)
setregid(0xffffffffffffffff, 0x0) (fail_nth: 2)

195.995939ms ago: executing program 3 (id=2197):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ftruncate(r3, 0x796c)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x90)
setregid(0xffffffffffffffff, 0x0)

183.972508ms ago: executing program 4 (id=2198):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)

71.909505ms ago: executing program 4 (id=2199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x30000)

0s ago: executing program 3 (id=2200):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)

kernel console output (not intermixed with test programs):

scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  495.750043][T11524] overlay: ./file0 is not a directory
[  495.760429][   T30] audit: type=1400 audit(1745500500.110:775): avc:  denied  { write } for  pid=11522 comm="syz.4.1552" name="file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  495.851653][T11527] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  495.874401][T11527] FAULT_INJECTION: forcing a failure.
[  495.874401][T11527] name failslab, interval 1, probability 0, space 0, times 0
[  495.887116][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.0.1551 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  495.887140][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  495.887150][T11527] Call Trace:
[  495.887157][T11527]  <TASK>
[  495.887164][T11527]  dump_stack_lvl+0x16c/0x1f0
[  495.887195][T11527]  should_fail_ex+0x512/0x640
[  495.887214][T11527]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  495.887234][T11527]  should_failslab+0xc2/0x120
[  495.887254][T11527]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  495.887272][T11527]  ? __alloc_skb+0x2b2/0x380
[  495.887297][T11527]  __alloc_skb+0x2b2/0x380
[  495.887316][T11527]  ? __pfx___alloc_skb+0x10/0x10
[  495.887346][T11527]  netlink_alloc_large_skb+0x69/0x130
[  495.887371][T11527]  netlink_sendmsg+0x6a1/0xdd0
[  495.887399][T11527]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.887433][T11527]  sock_write_iter+0x4fc/0x5b0
[  495.887460][T11527]  ? __pfx_sock_write_iter+0x10/0x10
[  495.887483][T11527]  ? rcu_is_watching+0x12/0xc0
[  495.887517][T11527]  ? do_iter_readv_writev+0x83/0x950
[  495.887544][T11527]  do_iter_readv_writev+0x654/0x950
[  495.887570][T11527]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  495.887593][T11527]  ? selinux_file_permission+0x11f/0x580
[  495.887622][T11527]  ? bpf_lsm_file_permission+0x9/0x10
[  495.887645][T11527]  ? security_file_permission+0x71/0x210
[  495.887670][T11527]  ? rw_verify_area+0xcf/0x680
[  495.887695][T11527]  vfs_writev+0x353/0xdc0
[  495.887726][T11527]  ? __pfx_vfs_writev+0x10/0x10
[  495.887752][T11527]  ? trace_sched_exit_tp+0xde/0x130
[  495.887778][T11527]  ? __schedule+0x1186/0x5de0
[  495.887816][T11527]  ? __fget_files+0x20e/0x3c0
[  495.887830][T11527]  ? __fget_files+0x1b0/0x3c0
[  495.887853][T11527]  ? do_writev+0x295/0x330
[  495.887874][T11527]  do_writev+0x295/0x330
[  495.887897][T11527]  ? __pfx_do_writev+0x10/0x10
[  495.887929][T11527]  do_syscall_64+0xcd/0x260
[  495.887955][T11527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.887971][T11527] RIP: 0033:0x7f218478e969
[  495.887984][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.887999][T11527] RSP: 002b:00007f21825d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  495.888016][T11527] RAX: ffffffffffffffda RBX: 00007f21849b6160 RCX: 00007f218478e969
[  495.888027][T11527] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000009
[  495.888037][T11527] RBP: 00007f21825d5090 R08: 0000000000000000 R09: 0000000000000000
[  495.888046][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.888056][T11527] R13: 0000000000000000 R14: 00007f21849b6160 R15: 00007ffd07f489c8
[  495.888080][T11527]  </TASK>
[  496.152023][   T30] audit: type=1400 audit(1745500500.110:776): avc:  denied  { open } for  pid=11522 comm="syz.4.1552" path="/301/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  496.174913][   T30] audit: type=1400 audit(1745500500.360:777): avc:  denied  { ioctl } for  pid=11522 comm="syz.4.1552" path="/301/file0" dev="tmpfs" ino=1633 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  497.599412][   T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  498.471188][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.799244][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  498.808475][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.823659][   T24] usb 6-1: config 0 descriptor??
[  498.832605][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  499.273469][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  499.287994][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  499.309631][T11569] loop8: detected capacity change from 0 to 1
[  499.351239][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  499.365497][T11569] Dev loop8: unable to read RDB block 1
[  499.371531][T11569]  loop8: unable to read partition table
[  499.377319][T11569] loop8: partition table beyond EOD, truncated
[  499.384005][T11569] loop_reread_partitions: partition scan of loop8 (ţ被xü^>Ńŕ– ) failed (rc=-5)
[  499.395493][T11569] futex_wake_op: syz.4.1563 tries to shift op by -33; fix this program
[  499.406678][T11569] netdevsim netdevsim4: Direct firmware load for .
[  499.406678][T11569]  failed with error -2
[  499.417247][T11569] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  499.417247][T11569] 
[  499.509728][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  499.516704][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  499.524984][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  499.536151][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  499.553218][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  499.977069][T11566] orangefs_mount: mount request failed with -4
[  500.003618][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  500.276023][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  500.329569][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  500.346593][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  500.356242][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  500.365419][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  500.381116][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  500.622298][   T24] pwc: Registered as video103.
[  500.640984][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36
[  500.655346][T11586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1567'.
[  500.677099][   T24] usb 6-1: USB disconnect, device number 17
[  500.912199][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'.
[  501.150506][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  502.205308][T11620] loop8: detected capacity change from 0 to 1
[  502.215529][T11620] Dev loop8: unable to read RDB block 1
[  502.221233][T11620]  loop8: unable to read partition table
[  502.228527][T11620] loop8: partition table beyond EOD, truncated
[  502.234990][T11620] loop_reread_partitions: partition scan of loop8 (ţ被xü^>Ńŕ– ) failed (rc=-5)
[  502.371724][T11622] futex_wake_op: syz.3.1573 tries to shift op by -33; fix this program
[  502.436118][T11625] netdevsim netdevsim3: Direct firmware load for .
[  502.436118][T11625]  failed with error -2
[  502.446851][T11625] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  502.446851][T11625] 
[  502.511146][T11614] orangefs_mount: mount request failed with -4
[  502.847616][T11633] netlink: 'syz.5.1583': attribute type 21 has an invalid length.
[  502.857004][T11633] IPv6: NLM_F_CREATE should be specified when creating new route
[  502.879817][T11633] IPv6: Can't replace route, no match found
[  502.901327][T11639] sctp: [Deprecated]: syz.5.1583 (pid 11639) Use of int in maxseg socket option.
[  502.901327][T11639] Use struct sctp_assoc_value instead
[  503.343683][T11648] kAFS: No cell specified
[  504.189535][ T5879] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  504.429523][ T5879] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  504.442461][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.454188][ T5879] usb 1-1: config 0 descriptor??
[  504.679443][ T5872] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  505.289480][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  505.368344][ T5872] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  505.388735][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.408660][ T5872] usb 4-1: config 0 descriptor??
[  506.549905][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1603'.
[  506.689087][ T5879] usb 1-1: USB disconnect, device number 31
[  506.792017][T11702] xt_nat: multiple ranges no longer supported
[  506.876403][T11702] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  506.882939][T11702] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  506.890840][T11702] vhci_hcd vhci_hcd.0: Device attached
[  507.167282][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'.
[  507.337233][ T5874] usb 42-1: SetAddress Request (2) to port 0
[  507.370938][T11704] vhci_hcd: connection closed
[  507.379874][   T36] vhci_hcd: stop threads
[  507.379971][ T5874] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  507.405282][   T36] vhci_hcd: release socket
[  507.509417][ T5872] usbhid 4-1:0.0: can't add hid device: -71
[  507.623402][   T36] vhci_hcd: disconnect device
[  507.623437][ T5872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  507.649442][ T5874] usb 42-1: enqueue for inactive port 0
[  508.007240][ T5872] usb 4-1: USB disconnect, device number 34
[  508.053794][T11714] syz.4.1607: attempt to access beyond end of device
[  508.053794][T11714] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0
[  508.113463][T11714] gfs2: error -5 reading superblock
[  508.290259][ T5874] usb usb42-port1: attempt power cycle
[  508.724185][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  509.259706][ T5874] usb usb42-port1: unable to enumerate USB device
[  509.339437][   T10] usb 4-1: Using ep0 maxpacket: 8
[  509.346406][   T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  509.363023][   T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  509.386298][   T10] usb 4-1: config 0 has no interface number 0
[  509.396952][   T10] usb 4-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  509.425568][   T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  509.436531][   T10] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  509.454511][   T10] usb 4-1: Product: syz
[  509.462629][   T10] usb 4-1: Manufacturer: syz
[  509.472724][   T10] usb 4-1: config 0 descriptor??
[  509.831947][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1623'.
[  509.843008][T11753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1623'.
[  509.947495][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  510.099986][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  510.146802][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.203041][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.229710][ T5879] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  510.254968][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.313294][T11735] orangefs_mount: mount request failed with -4
[  510.401876][ T5879] usb 3-1: config 0 descriptor??
[  510.861933][ T5879] kone 0003:1E7D:2CED.0019: item fetching failed at offset 3/5
[  510.889635][ T5879] kone 0003:1E7D:2CED.0019: parse failed
[  510.898324][ T5879] kone 0003:1E7D:2CED.0019: probe with driver kone failed with error -22
[  511.143728][T11773] veth0_vlan: entered allmulticast mode
[  511.152215][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.160911][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.171210][   T10] usb 4-1: USB disconnect, device number 35
[  512.215983][T11782] FAULT_INJECTION: forcing a failure.
[  512.215983][T11782] name failslab, interval 1, probability 0, space 0, times 0
[  512.228918][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.3.1631 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  512.228933][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  512.228943][T11782] Call Trace:
[  512.228949][T11782]  <TASK>
[  512.228956][T11782]  dump_stack_lvl+0x16c/0x1f0
[  512.228983][T11782]  should_fail_ex+0x512/0x640
[  512.229004][T11782]  should_failslab+0xc2/0x120
[  512.229018][T11782]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  512.229031][T11782]  ? __inet_hash_connect+0x7cb/0x1e30
[  512.229045][T11782]  __inet_hash_connect+0x7cb/0x1e30
[  512.229060][T11782]  ? __pfx___inet_check_established+0x10/0x10
[  512.229076][T11782]  ? __pfx___inet_hash_connect+0x10/0x10
[  512.229090][T11782]  ? inet_hash_connect+0x125/0x260
[  512.229103][T11782]  dccp_v4_connect+0xbdc/0x1530
[  512.229119][T11782]  __inet_stream_connect+0x3c5/0x1020
[  512.229139][T11782]  ? __pfx___inet_stream_connect+0x10/0x10
[  512.229155][T11782]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  512.229169][T11782]  ? __pfx_inet_stream_connect+0x10/0x10
[  512.229185][T11782]  ? __local_bh_enable_ip+0xa4/0x120
[  512.229200][T11782]  ? __pfx_inet_stream_connect+0x10/0x10
[  512.229215][T11782]  inet_stream_connect+0x57/0xa0
[  512.229232][T11782]  __sys_connect_file+0x13e/0x1a0
[  512.229245][T11782]  __sys_connect+0x14d/0x170
[  512.229255][T11782]  ? __pfx___sys_connect+0x10/0x10
[  512.229270][T11782]  ? __pfx_ksys_write+0x10/0x10
[  512.229279][T11782]  ? rcu_is_watching+0x12/0xc0
[  512.229294][T11782]  __x64_sys_connect+0x72/0xb0
[  512.229309][T11782]  ? lockdep_hardirqs_on+0x7c/0x110
[  512.229323][T11782]  do_syscall_64+0xcd/0x260
[  512.229342][T11782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.229359][T11782] RIP: 0033:0x7f906298e969
[  512.229372][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.229387][T11782] RSP: 002b:00007f9063774038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  512.229402][T11782] RAX: ffffffffffffffda RBX: 00007f9062bb5fa0 RCX: 00007f906298e969
[  512.229412][T11782] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004
[  512.229421][T11782] RBP: 00007f9063774090 R08: 0000000000000000 R09: 0000000000000000
[  512.229430][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.229439][T11782] R13: 0000000000000000 R14: 00007f9062bb5fa0 R15: 00007ffc04977cf8
[  512.229460][T11782]  </TASK>
[  512.466043][    C0] vkms_vblank_simulate: vblank timer overrun
[  512.667251][ T5879] usb 3-1: USB disconnect, device number 24
[  512.676373][   T30] audit: type=1400 audit(1745500517.010:778): avc:  denied  { ioctl } for  pid=11783 comm="syz.5.1632" path="socket:[29920]" dev="sockfs" ino=29920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  513.354617][   T30] audit: type=1400 audit(1745500517.720:779): avc:  denied  { kexec_image_load } for  pid=11789 comm="syz.5.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  513.989644][ T5829] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  514.180974][ T5829] usb 4-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  514.229415][ T5829] usb 4-1: config 1 interface 0 has no altsetting 0
[  514.251314][ T5829] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.40
[  514.271809][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.296201][T11807] dccp_invalid_packet: P.Data Offset(10) too large
[  514.405808][ T5829] usb 4-1: Product: �ೠ㿛翿擝漒
[  514.411650][ T5829] usb 4-1: Manufacturer: 킕⨜�珋�䩜⺤�൞Ḍﶳ�ο캨亢鮚Ꞷ㉆簢迴�갸魫㟳懡˯繶ᡭࡌ
[  514.424647][ T5829] usb 4-1: SerialNumber: �
[  515.170504][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  515.318215][ T5829] usbhid 4-1:1.0: can't add hid device: -71
[  515.325061][ T5829] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  515.383830][ T5829] usb 4-1: USB disconnect, device number 36
[  515.384092][   T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  515.426402][   T30] audit: type=1400 audit(1745500519.780:780): avc:  denied  { accept } for  pid=11819 comm="syz.2.1646" lport=60363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  515.502342][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.511446][   T10] usb 6-1: Product: syz
[  515.515911][   T10] usb 6-1: Manufacturer: syz
[  515.521546][   T10] usb 6-1: SerialNumber: syz
[  515.540830][   T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  515.550988][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  515.645900][   T30] audit: type=1400 audit(1745500520.010:781): avc:  denied  { firmware_load } for  pid=5872 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  515.677997][ T5872] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  515.720826][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0
[  515.727959][ T5874] usb 5-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00
[  515.743400][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.757110][ T5874] usb 5-1: config 0 descriptor??
[  515.986987][ T5874] usbhid 5-1:0.0: can't add hid device: -71
[  516.021214][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  516.061193][ T5874] usb 5-1: USB disconnect, device number 22
[  516.331162][T11834] overlayfs: failed to resolve './file0': -2
[  516.491171][T11836] evm: overlay not supported
[  516.498628][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1651'.
[  516.720245][   T30] audit: type=1326 audit(1745500521.080:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11809 comm="syz.5.1644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea74d8e969 code=0x0
[  516.778101][T11846] fuse: Unknown parameter ''
[  516.962612][ T5879] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  516.980146][ T5872] usb 6-1: Service connection timeout for: 256
[  517.582729][ T5872] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  517.657512][ T5872] ath9k_htc: Failed to initialize the device
[  517.733210][ T5879] usb 1-1: config 0 has an invalid interface number: 95 but max is 0
[  517.736464][ T5872] usb 6-1: ath9k_htc: USB layer deinitialized
[  517.744298][ T5879] usb 1-1: config 0 has no interface number 0
[  517.758680][ T5879] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  517.863823][ T5879] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  517.943977][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.008451][ T5879] usb 1-1: Product: syz
[  518.015949][ T5879] usb 1-1: Manufacturer: syz
[  518.031797][ T5879] usb 1-1: SerialNumber: syz
[  518.045136][ T5879] usb 1-1: config 0 descriptor??
[  519.153979][   T30] audit: type=1400 audit(1745500523.090:783): avc:  denied  { mount } for  pid=11856 comm="syz.4.1657" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  519.196852][T11842] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  519.206515][ T5874] usb 6-1: USB disconnect, device number 18
[  519.289733][   T30] audit: type=1400 audit(1745500523.420:784): avc:  denied  { unmount } for  pid=11856 comm="syz.4.1657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  519.314574][   T30] audit: type=1400 audit(1745500523.450:785): avc:  denied  { bind } for  pid=11856 comm="syz.4.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  519.609213][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  519.618314][ T5879] usb 1-1: MIDIStreaming interface descriptor not found
[  519.765856][ T5879] usb 1-1: USB disconnect, device number 32
[  520.078550][T11876] syz.4.1662: attempt to access beyond end of device
[  520.078550][T11876] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0
[  520.091841][T11876] gfs2: error -5 reading superblock
[  521.855181][T11895] FAULT_INJECTION: forcing a failure.
[  521.855181][T11895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.905091][T11895] CPU: 1 UID: 0 PID: 11895 Comm: syz.4.1668 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  521.905115][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  521.905126][T11895] Call Trace:
[  521.905132][T11895]  <TASK>
[  521.905138][T11895]  dump_stack_lvl+0x16c/0x1f0
[  521.905166][T11895]  should_fail_ex+0x512/0x640
[  521.905187][T11895]  _copy_from_iter+0x2a4/0x15b0
[  521.905210][T11895]  ? __alloc_skb+0x200/0x380
[  521.905231][T11895]  ? __pfx__copy_from_iter+0x10/0x10
[  521.905253][T11895]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  521.905284][T11895]  netlink_sendmsg+0x829/0xdd0
[  521.905310][T11895]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.905342][T11895]  ____sys_sendmsg+0xa95/0xc70
[  521.905368][T11895]  ? copy_msghdr_from_user+0x10a/0x160
[  521.905388][T11895]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.905423][T11895]  ___sys_sendmsg+0x134/0x1d0
[  521.905448][T11895]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.905494][T11895]  __sys_sendmsg+0x16d/0x220
[  521.905514][T11895]  ? __pfx___sys_sendmsg+0x10/0x10
[  521.905541][T11895]  ? rcu_is_watching+0x12/0xc0
[  521.905568][T11895]  do_syscall_64+0xcd/0x260
[  521.905594][T11895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.905611][T11895] RIP: 0033:0x7f5da1d8e969
[  521.905625][T11895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.905641][T11895] RSP: 002b:00007f5da2b8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.905657][T11895] RAX: ffffffffffffffda RBX: 00007f5da1fb5fa0 RCX: 00007f5da1d8e969
[  521.905668][T11895] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  521.905679][T11895] RBP: 00007f5da2b8d090 R08: 0000000000000000 R09: 0000000000000000
[  521.905689][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.905699][T11895] R13: 0000000000000000 R14: 00007f5da1fb5fa0 R15: 00007ffde3823128
[  521.905722][T11895]  </TASK>
[  522.301816][T11899] fuse: Unknown parameter ''
[  523.282899][T11908] block nbd4: NBD_DISCONNECT
[  523.736229][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'.
[  523.745322][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1673'.
[  524.087017][   T30] audit: type=1400 audit(1745500528.120:786): avc:  denied  { execute } for  pid=11911 comm="syz.4.1673" path=2F6D656D66643A3984DFA37B2E58537C4607A94EB825202864656C6574656429 dev="hugetlbfs" ino=30190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  524.130624][T11920] random: crng reseeded on system resumption
[  524.296067][T11923] kAFS: No cell specified
[  524.514200][T11898] netlink: 'syz.0.1670': attribute type 4 has an invalid length.
[  525.042266][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  526.067109][T11940] FAULT_INJECTION: forcing a failure.
[  526.067109][T11940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.080641][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.2.1681 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  526.080664][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  526.080674][T11940] Call Trace:
[  526.080680][T11940]  <TASK>
[  526.080687][T11940]  dump_stack_lvl+0x16c/0x1f0
[  526.080715][T11940]  should_fail_ex+0x512/0x640
[  526.080736][T11940]  _copy_from_iter+0x2a4/0x15b0
[  526.080758][T11940]  ? __alloc_skb+0x200/0x380
[  526.080779][T11940]  ? __pfx__copy_from_iter+0x10/0x10
[  526.080800][T11940]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  526.080831][T11940]  netlink_sendmsg+0x829/0xdd0
[  526.080858][T11940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.080890][T11940]  ____sys_sendmsg+0xa95/0xc70
[  526.080916][T11940]  ? copy_msghdr_from_user+0x10a/0x160
[  526.080936][T11940]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.080973][T11940]  ___sys_sendmsg+0x134/0x1d0
[  526.080998][T11940]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.081048][T11940]  __sys_sendmsg+0x16d/0x220
[  526.081069][T11940]  ? __pfx___sys_sendmsg+0x10/0x10
[  526.081096][T11940]  ? rcu_is_watching+0x12/0xc0
[  526.081124][T11940]  do_syscall_64+0xcd/0x260
[  526.081155][T11940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.081173][T11940] RIP: 0033:0x7fab34d8e969
[  526.081187][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  526.081203][T11940] RSP: 002b:00007fab35c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.081219][T11940] RAX: ffffffffffffffda RBX: 00007fab34fb6080 RCX: 00007fab34d8e969
[  526.081230][T11940] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  526.081239][T11940] RBP: 00007fab35c74090 R08: 0000000000000000 R09: 0000000000000000
[  526.081249][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.081258][T11940] R13: 0000000000000000 R14: 00007fab34fb6080 R15: 00007ffd13912538
[  526.081281][T11940]  </TASK>
[  526.282279][    C0] vkms_vblank_simulate: vblank timer overrun
[  526.343582][   T30] audit: type=1400 audit(1745500530.710:787): avc:  denied  { create } for  pid=11941 comm="syz.3.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  526.471599][T11942] syz.3.1684 (11942): drop_caches: 2
[  526.526902][   T30] audit: type=1400 audit(1745500530.830:788): avc:  denied  { ioctl } for  pid=11945 comm="syz.0.1683" path="/dev/usbmon7" dev="devtmpfs" ino=741 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  526.552104][    C0] vkms_vblank_simulate: vblank timer overrun
[  526.565497][   T30] audit: type=1400 audit(1745500530.850:789): avc:  denied  { write } for  pid=11941 comm="syz.3.1684" path="socket:[31008]" dev="sockfs" ino=31008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  526.676561][   T30] audit: type=1400 audit(1745500531.040:790): avc:  denied  { append } for  pid=11945 comm="syz.0.1683" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  526.699446][    C0] vkms_vblank_simulate: vblank timer overrun
[  526.911189][T11962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11962 comm=syz.2.1686
[  527.832650][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'.
[  527.875441][T11967] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  527.905806][   T30] audit: type=1400 audit(1745500532.270:791): avc:  denied  { accept } for  pid=11966 comm="syz.4.1691" lport=53348 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  527.917393][T11971] fuse: Unknown parameter ''
[  528.072105][   T30] audit: type=1400 audit(1745500532.270:792): avc:  denied  { getopt } for  pid=11966 comm="syz.4.1691" lport=53348 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  529.160674][   T30] audit: type=1400 audit(1745500533.530:793): avc:  denied  { bind } for  pid=11983 comm="syz.4.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  529.363581][   T30] audit: type=1400 audit(1745500533.530:794): avc:  denied  { name_bind } for  pid=11983 comm="syz.4.1696" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  529.384191][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.816284][T11992] afs: Unknown parameter 'dy'
[  529.959575][   T30] audit: type=1400 audit(1745500533.530:795): avc:  denied  { node_bind } for  pid=11983 comm="syz.4.1696" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  530.327597][   T30] audit: type=1400 audit(1745500533.560:796): avc:  denied  { connect } for  pid=11983 comm="syz.4.1696" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  530.348037][    C0] vkms_vblank_simulate: vblank timer overrun
[  531.880552][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  531.880567][   T30] audit: type=1326 audit(1745500535.980:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.5.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea74d8e969 code=0x7fc00000
[  532.029793][T12032] fuse: Unknown parameter ''
[  534.102963][T12054] 9pnet_virtio: no channels available for device syz
[  534.113715][T12054] FAULT_INJECTION: forcing a failure.
[  534.113715][T12054] name failslab, interval 1, probability 0, space 0, times 0
[  534.126484][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.5.1716 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  534.126507][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  534.126517][T12054] Call Trace:
[  534.126523][T12054]  <TASK>
[  534.126529][T12054]  dump_stack_lvl+0x16c/0x1f0
[  534.126556][T12054]  should_fail_ex+0x512/0x640
[  534.126574][T12054]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  534.126594][T12054]  should_failslab+0xc2/0x120
[  534.126614][T12054]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  534.126632][T12054]  ? getname_kernel+0x52/0x370
[  534.126655][T12054]  getname_kernel+0x52/0x370
[  534.126675][T12054]  kern_path+0x1d/0x50
[  534.126691][T12054]  bpf_uprobe_multi_link_attach+0x395/0x1070
[  534.126713][T12054]  ? find_held_lock+0x2b/0x80
[  534.126735][T12054]  ? __fget_files+0x204/0x3c0
[  534.126754][T12054]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  534.126773][T12054]  ? __fget_files+0x20e/0x3c0
[  534.126798][T12054]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  534.126821][T12054]  __sys_bpf+0x3fb6/0x4d80
[  534.126845][T12054]  ? __pfx___sys_bpf+0x10/0x10
[  534.126868][T12054]  ? ksys_write+0x190/0x240
[  534.126887][T12054]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  534.126922][T12054]  ? fput+0x70/0xf0
[  534.126941][T12054]  ? ksys_write+0x1b9/0x240
[  534.126953][T12054]  ? __pfx_ksys_write+0x10/0x10
[  534.126965][T12054]  ? rcu_is_watching+0x12/0xc0
[  534.126986][T12054]  __x64_sys_bpf+0x78/0xc0
[  534.127006][T12054]  ? lockdep_hardirqs_on+0x7c/0x110
[  534.127027][T12054]  do_syscall_64+0xcd/0x260
[  534.127049][T12054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.127066][T12054] RIP: 0033:0x7fea74d8e969
[  534.127080][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.127096][T12054] RSP: 002b:00007fea75c88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  534.127112][T12054] RAX: ffffffffffffffda RBX: 00007fea74fb5fa0 RCX: 00007fea74d8e969
[  534.127123][T12054] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  534.127133][T12054] RBP: 00007fea75c88090 R08: 0000000000000000 R09: 0000000000000000
[  534.127142][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  534.127152][T12054] R13: 0000000000000000 R14: 00007fea74fb5fa0 R15: 00007ffc7bcea808
[  534.127173][T12054]  </TASK>
[  534.359768][    C0] vkms_vblank_simulate: vblank timer overrun
[  534.419517][ T5872] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  534.604239][ T5872] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  534.613350][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.619377][ T5829] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  534.631260][ T5872] usb 5-1: config 0 descriptor??
[  534.638426][ T5872] gspca_main: cpia1-2.14.0 probing 0813:0001
[  534.659542][ T5874] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  534.779396][ T5829] usb 4-1: Using ep0 maxpacket: 8
[  534.788810][ T5829] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  534.798228][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.811492][ T5874] usb 6-1: Using ep0 maxpacket: 16
[  534.812152][ T5829] usb 4-1: config 0 descriptor??
[  534.818333][ T5874] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  534.837048][ T5874] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  534.847159][ T5874] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  534.863733][ T5874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  534.872970][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.883671][ T5874] usb 6-1: Product: syz
[  534.887839][ T5874] usb 6-1: Manufacturer: syz
[  534.892461][ T5874] usb 6-1: SerialNumber: syz
[  535.038303][ T5829] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  535.062454][ T5872] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  535.387913][   T30] audit: type=1326 audit(1745500539.750:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.2.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab34d8e969 code=0x7fc00000
[  535.426259][T12069] FAULT_INJECTION: forcing a failure.
[  535.426259][T12069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.486951][T12069] CPU: 1 UID: 0 PID: 12069 Comm: syz.0.1719 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  535.486980][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  535.486990][T12069] Call Trace:
[  535.486996][T12069]  <TASK>
[  535.487003][T12069]  dump_stack_lvl+0x16c/0x1f0
[  535.487031][T12069]  should_fail_ex+0x512/0x640
[  535.487056][T12069]  _copy_from_iter+0x2a4/0x15b0
[  535.487080][T12069]  ? __alloc_skb+0x200/0x380
[  535.487101][T12069]  ? __pfx__copy_from_iter+0x10/0x10
[  535.487130][T12069]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  535.487161][T12069]  netlink_sendmsg+0x829/0xdd0
[  535.487188][T12069]  ? __pfx_netlink_sendmsg+0x10/0x10
[  535.487220][T12069]  ____sys_sendmsg+0xa95/0xc70
[  535.487247][T12069]  ? copy_msghdr_from_user+0x10a/0x160
[  535.487268][T12069]  ? __pfx_____sys_sendmsg+0x10/0x10
[  535.487304][T12069]  ___sys_sendmsg+0x134/0x1d0
[  535.487326][T12069]  ? __pfx____sys_sendmsg+0x10/0x10
[  535.487376][T12069]  __sys_sendmsg+0x16d/0x220
[  535.487398][T12069]  ? __pfx___sys_sendmsg+0x10/0x10
[  535.487434][T12069]  do_syscall_64+0xcd/0x260
[  535.487459][T12069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.487477][T12069] RIP: 0033:0x7f218478e969
[  535.487491][T12069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.487507][T12069] RSP: 002b:00007f21825f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.487524][T12069] RAX: ffffffffffffffda RBX: 00007f21849b6080 RCX: 00007f218478e969
[  535.487535][T12069] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  535.487545][T12069] RBP: 00007f21825f6090 R08: 0000000000000000 R09: 0000000000000000
[  535.487555][T12069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.487565][T12069] R13: 0000000000000000 R14: 00007f21849b6080 R15: 00007ffd07f489c8
[  535.487586][T12069]  </TASK>
[  535.709702][ T5872] gspca_cpia1: usb_control_msg 02, error -71
[  535.720973][ T5872] gspca_cpia1: usb_control_msg 05, error -71
[  535.726980][ T5872] cpia1 5-1:0.0: unexpected systemstate: 00
[  535.916984][ T5829] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  535.930675][ T5829] asix 4-1:0.0: probe with driver asix failed with error -71
[  535.947889][ T5829] usb 4-1: USB disconnect, device number 37
[  536.103559][ T5872] usb 5-1: USB disconnect, device number 23
[  536.110653][ T5874] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  536.326302][   T30] audit: type=1400 audit(1745500540.690:800): avc:  denied  { watch_sb } for  pid=12079 comm="syz.0.1722" path="/363/file0" dev="tmpfs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  536.695739][T12088] SELinux: syz.4.1723 (12088) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  537.479446][ T5991] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  537.576951][ T5874] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82
[  537.850809][ T5991] usb 4-1: Using ep0 maxpacket: 16
[  537.929650][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.954868][ T5874] usb 6-1: USB disconnect, device number 19
[  537.977297][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.995940][T12109] block nbd5: NBD_DISCONNECT
[  538.017928][ T5991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  538.128219][ T5991] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  538.139598][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.156767][ T5991] usb 4-1: config 0 descriptor??
[  539.643686][T12097] random: crng reseeded on system resumption
[  540.348819][T12142] SELinux: syz.2.1739 (12142) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  541.188815][ T5991] usbhid 4-1:0.0: can't add hid device: -71
[  541.204653][ T5991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  541.251370][ T5991] usb 4-1: USB disconnect, device number 38
[  542.778651][T12164] fuse: Unknown parameter ''
[  544.341511][T12174] FAULT_INJECTION: forcing a failure.
[  544.341511][T12174] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.397512][T12174] CPU: 0 UID: 0 PID: 12174 Comm: syz.4.1751 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  544.397538][T12174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  544.397549][T12174] Call Trace:
[  544.397554][T12174]  <TASK>
[  544.397561][T12174]  dump_stack_lvl+0x16c/0x1f0
[  544.397589][T12174]  should_fail_ex+0x512/0x640
[  544.397610][T12174]  _copy_from_user+0x2e/0xd0
[  544.397631][T12174]  copy_mount_options+0x76/0x190
[  544.397655][T12174]  __x64_sys_mount+0x1ac/0x310
[  544.397675][T12174]  ? __pfx___x64_sys_mount+0x10/0x10
[  544.397692][T12174]  ? rcu_is_watching+0x12/0xc0
[  544.397719][T12174]  do_syscall_64+0xcd/0x260
[  544.397745][T12174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.397762][T12174] RIP: 0033:0x7f5da1d8e969
[  544.397776][T12174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  544.397792][T12174] RSP: 002b:00007f5da2b8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  544.397809][T12174] RAX: ffffffffffffffda RBX: 00007f5da1fb5fa0 RCX: 00007f5da1d8e969
[  544.397820][T12174] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  544.397830][T12174] RBP: 00007f5da2b8d090 R08: 0000200000000a00 R09: 0000000000000000
[  544.397841][T12174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.397850][T12174] R13: 0000000000000000 R14: 00007f5da1fb5fa0 R15: 00007ffde3823128
[  544.397872][T12174]  </TASK>
[  544.457628][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'.
[  544.874877][T12177] SELinux:  Context /usr/sbin/cupsd is not valid (left unmapped).
[  544.880472][   T30] audit: type=1400 audit(1745500549.240:801): avc:  denied  { relabelfrom } for  pid=12176 comm="syz.0.1748" name="" dev="pipefs" ino=31450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  544.914991][   T30] audit: type=1400 audit(1745500549.280:802): avc:  denied  { relabelto } for  pid=12176 comm="syz.0.1748" name="" dev="pipefs" ino=31450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/usr/sbin/cupsd"
[  544.963230][T12174] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  544.979666][T12174] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  545.319433][ T5829] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  545.487832][T12203] kAFS: No cell specified
[  545.499520][ T5829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.507483][T12206] fuse: Unknown parameter ''
[  545.539017][ T5829] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  545.663314][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.688883][ T5829] usb 6-1: config 0 descriptor??
[  545.711130][ T5829] pwc: Askey VC010 type 2 USB webcam detected.
[  547.175854][ T5829] pwc: recv_control_msg error -71 req 02 val 2700
[  547.195673][ T5829] pwc: recv_control_msg error -71 req 02 val 2c00
[  547.206946][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'.
[  547.209407][ T5829] pwc: recv_control_msg error -71 req 04 val 1000
[  547.242208][ T5829] pwc: recv_control_msg error -71 req 04 val 1300
[  547.249752][ T5829] pwc: recv_control_msg error -71 req 04 val 1400
[  547.275721][   T30] audit: type=1400 audit(1745500551.640:803): avc:  denied  { write } for  pid=12231 comm="syz.3.1763" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  547.298807][ T5829] pwc: recv_control_msg error -71 req 02 val 2000
[  547.299163][ T5829] pwc: recv_control_msg error -71 req 02 val 2100
[  547.318218][ T5829] pwc: recv_control_msg error -71 req 04 val 1500
[  547.348937][ T5829] pwc: recv_control_msg error -71 req 02 val 2500
[  547.358999][ T5829] pwc: recv_control_msg error -71 req 02 val 2400
[  547.379240][ T5829] pwc: recv_control_msg error -71 req 02 val 2600
[  547.389518][ T5829] pwc: recv_control_msg error -71 req 02 val 2900
[  547.390117][T12230] netlink: 'syz.4.1760': attribute type 10 has an invalid length.
[  547.397146][ T5829] pwc: recv_control_msg error -71 req 02 val 2800
[  547.419487][ T5829] pwc: recv_control_msg error -71 req 04 val 1100
[  547.426877][ T5829] pwc: recv_control_msg error -71 req 04 val 1200
[  547.435579][ T5829] pwc: Registered as video103.
[  547.441719][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37
[  547.457390][ T5829] usb 6-1: USB disconnect, device number 20
[  547.549664][T12238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  551.618004][T12286] orangefs_mount: mount request failed with -4
[  551.831018][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'.
[  552.829376][   T47] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  553.299069][T12318] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1786'.
[  553.319447][   T47] usb 6-1: Using ep0 maxpacket: 8
[  553.325880][   T47] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  553.341837][   T47] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  553.350406][   T47] usb 6-1: config 0 has no interface number 0
[  553.356603][   T47] usb 6-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  553.368918][   T47] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  553.378317][   T47] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  553.386517][   T47] usb 6-1: Product: syz
[  553.394411][   T30] audit: type=1400 audit(1745500557.760:804): avc:  denied  { bind } for  pid=12317 comm="syz.3.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  553.400922][   T47] usb 6-1: Manufacturer: syz
[  553.431802][   T47] usb 6-1: config 0 descriptor??
[  553.769541][ T5874] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  553.925593][T12329] SELinux: syz.0.1790 (12329) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  553.940675][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  553.950514][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  554.038942][T12330] SELinux: syz.4.1789 (12330) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  554.376410][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  554.386108][ T5874] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  554.398899][ T5874] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  554.411321][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.419341][ T5874] usb 4-1: Product: syz
[  554.423488][ T5874] usb 4-1: Manufacturer: syz
[  554.428053][ T5874] usb 4-1: SerialNumber: syz
[  554.435216][ T5874] usb 4-1: config 0 descriptor??
[  554.443393][ T5874] ums-isd200 4-1:0.0: USB Mass Storage device detected
[  554.491575][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'.
[  554.739690][T12321] netlink: 'syz.3.1786': attribute type 10 has an invalid length.
[  554.845263][T12321] hsr_slave_0: left promiscuous mode
[  554.868189][T12321] hsr_slave_1: left promiscuous mode
[  555.379418][ T5826] Bluetooth: hci4: command 0x0406 tx timeout
[  555.949718][   T47] usb 6-1: USB disconnect, device number 21
[  556.004723][T12349] block nbd5: NBD_DISCONNECT
[  556.780756][T12362] SELinux: syz.4.1796 (12362) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  557.259906][ T5874] scsi host1: usb-storage 4-1:0.0
[  557.298718][ T5874] usb 4-1: USB disconnect, device number 39
[  557.402885][ T5829] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  557.748811][ T5991] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  557.929367][ T5991] usb 3-1: Invalid ep0 maxpacket: 32
[  557.949616][ T5829] usb 5-1: Using ep0 maxpacket: 8
[  558.057563][ T5829] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  558.143491][ T5991] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  558.184093][ T5829] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  558.199763][ T5829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  558.220938][ T5829] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  558.231233][ T5829] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  558.244593][ T5829] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  558.253724][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.369395][ T5991] usb 3-1: Invalid ep0 maxpacket: 32
[  558.384151][ T5991] usb usb3-port1: attempt power cycle
[  558.576099][ T5829] usb 5-1: GET_CAPABILITIES returned 0
[  558.591844][ T5829] usbtmc 5-1:16.0: can't read capabilities
[  558.614487][T12389] overlay: Unknown parameter 'fowner<00000000000000000000'
[  558.817809][ T5829] usb 5-1: USB disconnect, device number 24
[  559.010489][ T5991] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[  559.073133][ T5991] usb 3-1: Invalid ep0 maxpacket: 32
[  559.269682][ T5991] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  559.499011][ T5991] usb 3-1: device descriptor read/8, error -71
[  559.626090][ T5991] usb usb3-port1: unable to enumerate USB device
[  561.624232][T12426] syz.2.1814: attempt to access beyond end of device
[  561.624232][T12426] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[  561.637439][T12426] gfs2: error -5 reading superblock
[  562.169791][T12424] fuse: Unknown parameter ''
[  562.457408][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  563.379660][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  563.541164][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short
[  563.548953][ T5873] usb 5-1: too many configurations: 25, using maximum allowed: 8
[  563.557003][ T5872] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  563.684019][ T5873] usb 5-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb
[  563.694705][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.703208][ T5873] usb 5-1: Product: syz
[  563.707587][ T5873] usb 5-1: Manufacturer: syz
[  563.712326][ T5873] usb 5-1: SerialNumber: syz
[  563.719361][ T5872] usb 6-1: Using ep0 maxpacket: 16
[  563.822013][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.117059][ T5829] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  564.144278][ T5873] usb 5-1: config 0 descriptor??
[  564.154736][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.178268][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  564.191454][ T5872] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  564.200570][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.230140][ T5872] usb 6-1: config 0 descriptor??
[  564.279385][ T5829] usb 3-1: Using ep0 maxpacket: 16
[  564.286114][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.297073][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.307892][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  564.321022][ T5829] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  564.330134][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.347399][ T5829] usb 3-1: config 0 descriptor??
[  564.464947][T12440] IPv6: syztnl0: Disabled Multicast RS
[  564.504039][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.514375][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.583411][T12457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.686323][ T5872] microsoft 0003:045E:07DA.001A: unknown main item tag 0x6
[  564.696926][ T5872] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  564.715269][ T5872] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001A/input/input38
[  564.735015][ T5872] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  564.750173][ T5874] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  564.895066][ T5159] usb 6-1: USB disconnect, device number 22
[  564.911031][ T5829] microsoft 0003:045E:07DA.001B: unknown main item tag 0x6
[  564.918276][ T5829] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0
[  564.930699][ T5829] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001B/input/input39
[  565.391665][ T5829] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  565.399384][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  565.410982][ T5874] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  565.413094][ T5829] usb 3-1: USB disconnect, device number 29
[  565.420191][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.435377][ T5874] usb 4-1: config 0 descriptor??
[  566.201904][ T5874] a4tech 0003:09DA:001A.001C: unknown main item tag 0x0
[  566.357201][ T5874] a4tech 0003:09DA:001A.001C: unknown main item tag 0x0
[  566.367468][ T5874] a4tech 0003:09DA:001A.001C: unknown main item tag 0x0
[  566.462688][ T5874] a4tech 0003:09DA:001A.001C: unknown main item tag 0x0
[  566.486207][ T5873] usb 5-1: USB disconnect, device number 25
[  566.540619][ T5874] a4tech 0003:09DA:001A.001C: unknown main item tag 0x0
[  566.918027][ T5874] a4tech 0003:09DA:001A.001C: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.3-1/input0
[  567.613797][ T5873] usb 4-1: USB disconnect, device number 40
[  568.368580][   T30] audit: type=1400 audit(1745500572.720:805): avc:  denied  { lock } for  pid=12499 comm="syz.2.1836" path="socket:[32310]" dev="sockfs" ino=32310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  569.091191][   T30] audit: type=1326 audit(1745500573.450:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12488 comm="syz.0.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218478e969 code=0x7fc00000
[  569.119669][   T30] audit: type=1400 audit(1745500573.490:807): avc:  denied  { bind } for  pid=12485 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  569.361596][T12516] ERROR: device name not specified.
[  569.426389][T12518] overlayfs: missing 'lowerdir'
[  571.169524][ T5874] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  571.339495][ T5874] usb 3-1: Using ep0 maxpacket: 8
[  571.449428][T12539] syz.5.1848: attempt to access beyond end of device
[  571.449428][T12539] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0
[  571.462641][T12539] gfs2: error -5 reading superblock
[  571.840329][ T5874] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  571.851398][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.861501][ T5874] usb 3-1: config 0 descriptor??
[  571.885704][T12541] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  572.149385][ T5159] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  572.655275][ T5874] a4tech 0003:09DA:001A.001D: unknown main item tag 0x0
[  572.698016][ T5874] a4tech 0003:09DA:001A.001D: unknown main item tag 0x0
[  572.705355][ T5874] a4tech 0003:09DA:001A.001D: unknown main item tag 0x0
[  572.712591][ T5874] a4tech 0003:09DA:001A.001D: unknown main item tag 0x0
[  572.719736][ T5874] a4tech 0003:09DA:001A.001D: unknown main item tag 0x0
[  572.729640][ T5874] a4tech 0003:09DA:001A.001D: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.2-1/input0
[  572.751230][   T47] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  572.841565][ T5159] usb 5-1: Using ep0 maxpacket: 16
[  572.849428][ T5159] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  572.878889][   T30] audit: type=1326 audit(1745500577.240:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12546 comm="syz.3.1851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  572.893287][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.910650][ T5159] usb 5-1: Product: syz
[  572.914986][ T5159] usb 5-1: Manufacturer: syz
[  572.919699][ T5159] usb 5-1: SerialNumber: syz
[  572.938939][   T47] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  572.957099][   T47] usb 6-1: config 0 has no interface number 0
[  572.990753][ T5874] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  572.994621][   T47] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  573.057690][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.090195][   T47] usb 6-1: Product: syz
[  573.094485][   T47] usb 6-1: Manufacturer: syz
[  573.099165][   T47] usb 6-1: SerialNumber: syz
[  573.184251][   T47] usb 6-1: config 0 descriptor??
[  573.210318][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  573.390358][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  573.403301][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  573.414609][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  573.431038][ T5874] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  573.455741][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.605153][ T5159] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  573.622321][ T5159] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71
[  573.633549][ T5159] usb 5-1: USB disconnect, device number 26
[  573.978637][ T5874] usb 1-1: config 0 descriptor??
[  574.093621][   T47] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  574.111126][ T5873] usb 3-1: USB disconnect, device number 30
[  574.141872][   T47] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  574.178061][   T47] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  574.215044][   T47] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  574.255129][   T47] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  574.558762][ T5874] microsoft 0003:045E:07DA.001E: unknown main item tag 0x6
[  574.600455][ T5874] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0
[  574.680806][ T5874] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input40
[  574.702558][ T5874] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  574.758373][ T5874] usb 1-1: USB disconnect, device number 33
[  575.418722][   T24] usb 6-1: USB disconnect, device number 23
[  575.430757][   T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  575.466977][   T24] keyspan 6-1:0.133: device disconnected
[  575.511110][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'.
[  576.206245][   T30] audit: type=1400 audit(1745500580.570:809): avc:  denied  { ioctl } for  pid=12589 comm="syz.5.1862" path="socket:[32551]" dev="sockfs" ino=32551 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  576.347192][T12601] kAFS: No cell specified
[  576.701575][ T5874] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  576.987368][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  577.031244][ T5874] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  577.056738][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.065593][ T5874] usb 6-1: Product: syz
[  577.207911][T12619] futex_wake_op: syz.0.1869 tries to shift op by -33; fix this program
[  577.221369][T12619] netdevsim netdevsim0: Direct firmware load for .
[  577.221369][T12619]  failed with error -2
[  577.231941][T12619] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  577.231941][T12619] 
[  577.308022][ T5874] usb 6-1: Manufacturer: syz
[  577.315396][ T5874] usb 6-1: SerialNumber: syz
[  577.343742][ T5874] usb 6-1: config 0 descriptor??
[  577.653362][ T5874] usb 6-1: USB disconnect, device number 24
[  578.296976][ T5874] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  578.689855][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  578.697040][ T5874] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  578.707574][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.812490][ T5874] usb 4-1: config 0 descriptor??
[  578.922412][T12653] syz.5.1878: attempt to access beyond end of device
[  578.922412][T12653] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0
[  578.935655][T12653] gfs2: error -5 reading superblock
[  579.475107][   T30] audit: type=1400 audit(1745500583.840:810): avc:  denied  { getopt } for  pid=12648 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  579.914661][ T5874] a4tech 0003:09DA:001A.001F: unknown main item tag 0x0
[  579.921685][ T5874] a4tech 0003:09DA:001A.001F: unknown main item tag 0x0
[  579.928672][ T5874] a4tech 0003:09DA:001A.001F: unknown main item tag 0x0
[  579.935675][ T5874] a4tech 0003:09DA:001A.001F: unknown main item tag 0x0
[  579.943365][ T5874] a4tech 0003:09DA:001A.001F: unknown main item tag 0x0
[  579.952216][ T5874] a4tech 0003:09DA:001A.001F: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.3-1/input0
[  581.098272][T12667] block nbd2: NBD_DISCONNECT
[  581.506398][ T5159] usb 4-1: USB disconnect, device number 41
[  582.445775][   T30] audit: type=1326 audit(1745500586.700:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1d8e969 code=0x7ffc0000
[  582.570273][   T30] audit: type=1326 audit(1745500586.700:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1d8e969 code=0x7ffc0000
[  582.673584][   T30] audit: type=1326 audit(1745500587.030:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  582.716633][   T30] audit: type=1326 audit(1745500587.030:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  582.740343][   T30] audit: type=1326 audit(1745500587.030:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  582.764277][   T30] audit: type=1326 audit(1745500587.030:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  582.792993][   T30] audit: type=1326 audit(1745500587.030:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  582.822211][   T30] audit: type=1326 audit(1745500587.030:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  583.567711][   T30] audit: type=1326 audit(1745500587.030:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  583.868467][   T30] audit: type=1326 audit(1745500587.030:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.3.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  584.616042][T12726] afs: Unknown parameter 'dy'
[  585.636134][T12741] overlayfs: failed to clone upperpath
[  585.988820][T12741] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  586.128896][T12752] fuse: Unknown parameter ''
[  586.389417][   T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  586.802812][ T5873] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  587.009351][ T5873] usb 1-1: Using ep0 maxpacket: 8
[  587.059420][   T24] usb 6-1: Using ep0 maxpacket: 8
[  587.076669][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  587.088211][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  587.088281][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.098093][   T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  587.098165][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.105852][   T24] usb 6-1: config 0 descriptor??
[  587.238547][ T5873] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  587.278955][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  587.288437][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.316332][ T5873] usb 1-1: Product: syz
[  587.352083][ T5873] usb 1-1: Manufacturer: syz
[  587.366961][ T5873] usb 1-1: SerialNumber: syz
[  587.376641][ T5873] usb 1-1: config 0 descriptor??
[  587.632823][   T24] hid-picolcd 0003:04D8:F002.0020: reserved main item tag 0xe
[  588.104796][   T24] hid-picolcd 0003:04D8:F002.0020: No report with id 0xf4 found
[  588.113431][   T24] hid-picolcd 0003:04D8:F002.0020: No report with id 0xf3 found
[  588.147467][   T24] usb 6-1: USB disconnect, device number 25
[  588.417000][T12782] overlayfs: failed to clone upperpath
[  591.055592][   T47] usb 1-1: USB disconnect, device number 34
[  591.106645][T12796] fuse: Unknown parameter ''
[  594.259919][T12837] FAULT_INJECTION: forcing a failure.
[  594.259919][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  594.289492][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.5.1934 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  594.289520][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  594.289530][T12837] Call Trace:
[  594.289537][T12837]  <TASK>
[  594.289544][T12837]  dump_stack_lvl+0x16c/0x1f0
[  594.289572][T12837]  should_fail_ex+0x512/0x640
[  594.289593][T12837]  _copy_to_user+0x32/0xd0
[  594.289615][T12837]  drm_ioctl+0x5eb/0xc30
[  594.289643][T12837]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  594.289663][T12837]  ? __pfx_drm_ioctl+0x10/0x10
[  594.289695][T12837]  ? selinux_file_ioctl+0x180/0x270
[  594.289720][T12837]  ? selinux_file_ioctl+0xb4/0x270
[  594.289745][T12837]  ? __pfx_drm_ioctl+0x10/0x10
[  594.289768][T12837]  __x64_sys_ioctl+0x190/0x200
[  594.289793][T12837]  do_syscall_64+0xcd/0x260
[  594.289818][T12837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.289836][T12837] RIP: 0033:0x7fea74d8e969
[  594.289850][T12837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.289866][T12837] RSP: 002b:00007fea75c88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  594.289883][T12837] RAX: ffffffffffffffda RBX: 00007fea74fb5fa0 RCX: 00007fea74d8e969
[  594.289894][T12837] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000008
[  594.289904][T12837] RBP: 00007fea75c88090 R08: 0000000000000000 R09: 0000000000000000
[  594.289914][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.289924][T12837] R13: 0000000000000000 R14: 00007fea74fb5fa0 R15: 00007ffc7bcea808
[  594.289946][T12837]  </TASK>
[  594.482624][   T30] kauditd_printk_skb: 46 callbacks suppressed
[  594.482639][   T30] audit: type=1400 audit(1745500598.830:867): avc:  denied  { map } for  pid=12828 comm="syz.2.1933" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  594.518533][T12840] loop6: detected capacity change from 0 to 63
[  594.691971][   T30] audit: type=1400 audit(1745500598.830:868): avc:  denied  { execute } for  pid=12828 comm="syz.2.1933" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  595.022868][T12849] SELinux: syz.0.1935 (12849) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  596.548848][   T30] audit: type=1400 audit(1745500600.910:869): avc:  denied  { ioctl } for  pid=12862 comm="syz.2.1941" path="socket:[34120]" dev="sockfs" ino=34120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  596.573798][    C0] vkms_vblank_simulate: vblank timer overrun
[  598.467486][T12883] overlayfs: conflicting options: userxattr,verity=require
[  600.813739][T12916] SELinux: syz.2.1956 (12916) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  602.015247][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  602.035964][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'.
[  602.090919][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'.
[  602.113764][T12929] IPv6: NLM_F_REPLACE set, but no existing node found!
[  602.130129][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'.
[  602.678317][T12788] Set syz1 is full, maxelem 65536 reached
[  602.789393][ T5874] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  602.854160][T12944] FAULT_INJECTION: forcing a failure.
[  602.854160][T12944] name failslab, interval 1, probability 0, space 0, times 0
[  602.868223][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.3.1968 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  602.868247][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  602.868257][T12944] Call Trace:
[  602.868263][T12944]  <TASK>
[  602.868270][T12944]  dump_stack_lvl+0x16c/0x1f0
[  602.868296][T12944]  should_fail_ex+0x512/0x640
[  602.868317][T12944]  ? bio_kmalloc+0x41/0x70
[  602.868335][T12944]  should_failslab+0xc2/0x120
[  602.868354][T12944]  __kmalloc_noprof+0xd2/0x510
[  602.868371][T12944]  ? trace_kmalloc+0x2b/0xd0
[  602.868389][T12944]  ? __kmalloc_noprof+0x242/0x510
[  602.868408][T12944]  bio_kmalloc+0x41/0x70
[  602.868427][T12944]  blk_rq_map_user_iov+0x43c/0x13b0
[  602.868460][T12944]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  602.868488][T12944]  ? __pfx___might_resched+0x10/0x10
[  602.868512][T12944]  ? rcu_is_watching+0x12/0xc0
[  602.868532][T12944]  ? find_held_lock+0x2b/0x80
[  602.868554][T12944]  ? sg_common_write.constprop.0+0xbf9/0x1c90
[  602.868573][T12944]  ? import_ubuf+0x1b6/0x220
[  602.868594][T12944]  blk_rq_map_user_io+0x1ff/0x230
[  602.868620][T12944]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  602.868645][T12944]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  602.868679][T12944]  sg_common_write.constprop.0+0xd43/0x1c90
[  602.868707][T12944]  ? __pfx_sg_common_write.constprop.0+0x10/0x10
[  602.868736][T12944]  sg_write+0x813/0xe10
[  602.868755][T12944]  ? __pfx_sg_write+0x10/0x10
[  602.868772][T12944]  ? __pfx__kstrtoull+0x10/0x10
[  602.868820][T12944]  ? bpf_lsm_file_permission+0x9/0x10
[  602.868843][T12944]  ? security_file_permission+0x71/0x210
[  602.868868][T12944]  ? rw_verify_area+0xcf/0x680
[  602.868892][T12944]  ? __pfx_sg_write+0x10/0x10
[  602.868908][T12944]  vfs_writev+0x6c4/0xdc0
[  602.868938][T12944]  ? __pfx_vfs_writev+0x10/0x10
[  602.868978][T12944]  ? __fget_files+0x20e/0x3c0
[  602.868993][T12944]  ? __fget_files+0x1b0/0x3c0
[  602.869013][T12944]  ? do_writev+0x132/0x330
[  602.869035][T12944]  do_writev+0x132/0x330
[  602.869058][T12944]  ? __pfx_do_writev+0x10/0x10
[  602.869080][T12944]  ? rcu_is_watching+0x12/0xc0
[  602.869106][T12944]  do_syscall_64+0xcd/0x260
[  602.869131][T12944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.869148][T12944] RIP: 0033:0x7f906298e969
[  602.869162][T12944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  602.869177][T12944] RSP: 002b:00007f9063774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  602.869194][T12944] RAX: ffffffffffffffda RBX: 00007f9062bb5fa0 RCX: 00007f906298e969
[  602.869205][T12944] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003
[  602.869220][T12944] RBP: 00007f9063774090 R08: 0000000000000000 R09: 0000000000000000
[  602.869230][T12944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.869240][T12944] R13: 0000000000000000 R14: 00007f9062bb5fa0 R15: 00007ffc04977cf8
[  602.869262][T12944]  </TASK>
[  603.212978][   T47] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  603.225237][   T47] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  603.240578][ T5874] usb 6-1: Using ep0 maxpacket: 8
[  603.247264][ T5874] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  603.255554][ T5874] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  603.263804][ T5874] usb 6-1: config 0 has no interface number 0
[  603.269935][ T5874] usb 6-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  603.282024][ T5874] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  603.291173][ T5874] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  603.299227][ T5874] usb 6-1: Product: syz
[  603.303434][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  603.311033][ T5874] usb 6-1: Manufacturer: syz
[  603.317152][ T5874] usb 6-1: config 0 descriptor??
[  603.378564][   T30] audit: type=1400 audit(1745500607.740:870): avc:  denied  { name_bind } for  pid=12947 comm="syz.4.1970" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  603.489486][   T10] usb 1-1: Using ep0 maxpacket: 8
[  603.495979][   T10] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  603.507427][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.517860][   T10] usb 1-1: config 0 descriptor??
[  603.524006][ T5829] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  603.679348][ T5829] usb 4-1: Using ep0 maxpacket: 32
[  603.694364][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  603.703911][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.712063][ T5829] usb 4-1: Product: syz
[  603.716788][ T5829] usb 4-1: Manufacturer: syz
[  603.721640][ T5829] usb 4-1: SerialNumber: syz
[  603.788253][ T5829] usb 4-1: config 0 descriptor??
[  604.109081][ T5829] gspca_main: sunplus-2.14.0 probing 046d:0960
[  604.465893][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'.
[  604.478678][   T10] a4tech 0003:09DA:001A.0022: unknown main item tag 0x0
[  604.551360][   T10] a4tech 0003:09DA:001A.0022: unknown main item tag 0x0
[  604.574742][ T5829] gspca_sunplus: reg_w_riv err -71
[  604.585683][   T10] a4tech 0003:09DA:001A.0022: unknown main item tag 0x0
[  604.589627][ T5829] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  604.609956][   T10] a4tech 0003:09DA:001A.0022: unknown main item tag 0x0
[  604.612276][ T5829] usb 4-1: USB disconnect, device number 42
[  604.628348][   T10] a4tech 0003:09DA:001A.0022: unknown main item tag 0x0
[  604.672572][   T10] a4tech 0003:09DA:001A.0022: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0
[  604.856853][T12969] veth0_vlan: left promiscuous mode
[  604.865999][T12969] veth0_vlan: entered promiscuous mode
[  606.071427][   T10] usb 6-1: USB disconnect, device number 26
[  606.145597][   T47] usb 1-1: USB disconnect, device number 35
[  607.362168][T12999] syz.3.1983: attempt to access beyond end of device
[  607.362168][T12999] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[  607.375574][T12999] gfs2: error -5 reading superblock
[  607.679295][    C0] hrtimer: interrupt took 42434 ns
[  608.865999][   T30] audit: type=1400 audit(1745500613.230:871): avc:  denied  { read } for  pid=13022 comm="syz.3.1990" path="socket:[34372]" dev="sockfs" ino=34372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  608.916295][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'.
[  609.031112][   T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  609.169095][T13034] FAULT_INJECTION: forcing a failure.
[  609.169095][T13034] name failslab, interval 1, probability 0, space 0, times 0
[  609.182700][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.2.1995 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  609.182724][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  609.182734][T13034] Call Trace:
[  609.182741][T13034]  <TASK>
[  609.182747][T13034]  dump_stack_lvl+0x16c/0x1f0
[  609.182775][T13034]  should_fail_ex+0x512/0x640
[  609.182797][T13034]  should_failslab+0xc2/0x120
[  609.182818][T13034]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  609.182837][T13034]  ? dst_alloc+0x99/0x1a0
[  609.182859][T13034]  dst_alloc+0x99/0x1a0
[  609.182878][T13034]  rt_dst_alloc+0x35/0x3a0
[  609.182903][T13034]  ip_route_output_key_hash_rcu+0x87a/0x28f0
[  609.182929][T13034]  ip_route_output_key_hash+0x137/0x2e0
[  609.182947][T13034]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  609.182964][T13034]  ? __lock_acquire+0xaa4/0x1ba0
[  609.182992][T13034]  tcp_v4_connect+0x7e2/0x1ba0
[  609.183027][T13034]  ? __pfx_tcp_v4_connect+0x10/0x10
[  609.183050][T13034]  ? mptcp_token_new_connect+0x1e9/0x600
[  609.183075][T13034]  mptcp_connect+0x579/0xfe0
[  609.183098][T13034]  __inet_stream_connect+0x3c5/0x1020
[  609.183129][T13034]  ? __pfx___inet_stream_connect+0x10/0x10
[  609.183165][T13034]  tcp_sendmsg_fastopen+0x3ed/0x750
[  609.183187][T13034]  mptcp_sendmsg+0x1432/0x1e00
[  609.183203][T13034]  ? sock_has_perm+0x259/0x2f0
[  609.183215][T13034]  ? __pfx_sock_has_perm+0x10/0x10
[  609.183233][T13034]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  609.183252][T13034]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  609.183269][T13034]  ? __pfx_mptcp_sendmsg+0x10/0x10
[  609.183283][T13034]  inet_sendmsg+0x119/0x140
[  609.183293][T13034]  ____sys_sendmsg+0x973/0xc70
[  609.183309][T13034]  ? copy_msghdr_from_user+0x10a/0x160
[  609.183322][T13034]  ? __pfx_____sys_sendmsg+0x10/0x10
[  609.183340][T13034]  ? __pfx__kstrtoull+0x10/0x10
[  609.183358][T13034]  ___sys_sendmsg+0x134/0x1d0
[  609.183372][T13034]  ? __pfx____sys_sendmsg+0x10/0x10
[  609.183392][T13034]  ? find_held_lock+0x2b/0x80
[  609.183414][T13034]  __sys_sendmmsg+0x200/0x420
[  609.183428][T13034]  ? __pfx___sys_sendmmsg+0x10/0x10
[  609.183446][T13034]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  609.183468][T13034]  ? fput+0x70/0xf0
[  609.183482][T13034]  ? ksys_write+0x1b9/0x240
[  609.183491][T13034]  ? __pfx_ksys_write+0x10/0x10
[  609.183499][T13034]  ? rcu_is_watching+0x12/0xc0
[  609.183515][T13034]  __x64_sys_sendmmsg+0x9c/0x100
[  609.183528][T13034]  ? lockdep_hardirqs_on+0x7c/0x110
[  609.183542][T13034]  do_syscall_64+0xcd/0x260
[  609.183557][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.183568][T13034] RIP: 0033:0x7fab34d8e969
[  609.183578][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.183588][T13034] RSP: 002b:00007fab35c74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  609.183598][T13034] RAX: ffffffffffffffda RBX: 00007fab34fb6080 RCX: 00007fab34d8e969
[  609.183605][T13034] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000004
[  609.183611][T13034] RBP: 00007fab35c74090 R08: 0000000000000000 R09: 0000000000000000
[  609.183617][T13034] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001
[  609.183623][T13034] R13: 0000000000000000 R14: 00007fab34fb6080 R15: 00007ffd13912538
[  609.183636][T13034]  </TASK>
[  609.189406][   T24] usb 1-1: Using ep0 maxpacket: 16
[  609.733342][T13036] i2c i2c-0: Invalid block write size 33
[  609.746623][   T30] audit: type=1400 audit(1745500614.110:872): avc:  denied  { setopt } for  pid=13035 comm="syz.2.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  609.768726][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.784355][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.794291][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  609.827929][   T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  609.885811][   T30] audit: type=1400 audit(1745500614.250:873): avc:  denied  { bind } for  pid=13039 comm="syz.5.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  609.974536][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.985605][   T24] usb 1-1: config 0 descriptor??
[  610.119313][T13049] syz.3.1997: attempt to access beyond end of device
[  610.119313][T13049] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[  610.132628][T13049] gfs2: error -5 reading superblock
[  610.784457][   T24] shield 0003:0955:7214.0023: unknown main item tag 0x0
[  610.807521][   T24] shield 0003:0955:7214.0023: unknown main item tag 0x0
[  610.844206][   T24] shield 0003:0955:7214.0023: unknown main item tag 0x0
[  610.860007][T13021] random: crng reseeded on system resumption
[  610.876143][   T24] shield 0003:0955:7214.0023: unknown main item tag 0x0
[  610.905580][   T24] shield 0003:0955:7214.0023: unknown main item tag 0x0
[  611.014464][   T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input41
[  611.075614][   T24] shield 0003:0955:7214.0023: Registered Thunderstrike controller
[  611.149051][   T24] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0
[  611.151918][T13063] fuse: Unknown parameter ''
[  611.276915][T13064] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  611.350744][ T5829] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  611.375808][   T24] usb 1-1: USB disconnect, device number 36
[  611.382310][ T5829] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  611.693624][ T5829] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  611.762472][ T5829] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  611.836390][   T30] audit: type=1326 audit(1745500616.200:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  611.866493][   T30] audit: type=1326 audit(1745500616.200:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  611.900525][   T30] audit: type=1326 audit(1745500616.200:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  611.987245][   T30] audit: type=1326 audit(1745500616.200:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  612.248393][   T30] audit: type=1326 audit(1745500616.200:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  612.276304][   T30] audit: type=1326 audit(1745500616.200:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  612.307395][   T30] audit: type=1326 audit(1745500616.200:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13056 comm="syz.3.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e969 code=0x7fc00000
[  614.571849][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  614.571864][   T30] audit: type=1800 audit(1745500618.920:941): pid=13107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2016" name="nullb0" dev="tmpfs" ino=2247 res=0 errno=0
[  614.867025][ T5829] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  615.729359][ T5829] usb 3-1: Using ep0 maxpacket: 16
[  615.757141][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.769347][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.779169][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  615.792190][ T5829] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  615.801949][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.812106][ T5829] usb 3-1: config 0 descriptor??
[  615.859043][T13120] netlink: 'syz.0.2015': attribute type 10 has an invalid length.
[  616.506076][T13104] random: crng reseeded on system resumption
[  616.634531][ T5829] shield 0003:0955:7214.0024: unknown main item tag 0x0
[  616.641524][ T5829] shield 0003:0955:7214.0024: unknown main item tag 0x0
[  616.650907][ T5829] shield 0003:0955:7214.0024: unknown main item tag 0x0
[  616.678348][ T5829] shield 0003:0955:7214.0024: unknown main item tag 0x0
[  616.728090][ T5829] shield 0003:0955:7214.0024: unknown main item tag 0x0
[  616.998943][ T5829] input: HID 0955:7214 Haptics as /devices/virtual/input/input42
[  617.058181][T13136] fuse: Unknown parameter '˙˙0xffffffffffffffff˙00000000000000000000'
[  617.192441][ T5829] shield 0003:0955:7214.0024: Registered Thunderstrike controller
[  617.206483][ T5829] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  617.234643][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.246446][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.726337][ T5829] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  617.726391][ T5874] usb 3-1: USB disconnect, device number 31
[  617.743469][ T5829] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  617.852045][ T5829] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  617.871758][ T5829] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  618.928911][T13149] overlayfs: missing 'lowerdir'
[  621.298566][T13188] overlayfs: missing 'lowerdir'
[  621.379132][T13191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13191 comm=syz.5.2042
[  621.399877][T13191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=13191 comm=syz.5.2042
[  621.441161][ T5873] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  621.552048][   T30] audit: type=1400 audit(1745500625.920:942): avc:  denied  { bind } for  pid=13190 comm="syz.5.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  621.599460][ T5873] usb 4-1: Using ep0 maxpacket: 8
[  621.615878][ T5873] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  621.624396][ T5873] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  621.643032][ T5873] usb 4-1: config 0 has no interface number 0
[  621.658873][ T5873] usb 4-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  621.671412][ T5873] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  621.680605][ T5873] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  621.688670][ T5873] usb 4-1: Product: syz
[  621.692975][ T5873] usb 4-1: Manufacturer: syz
[  621.711162][ T5873] usb 4-1: config 0 descriptor??
[  622.304786][   T30] audit: type=1326 audit(1745500626.670:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13196 comm="syz.2.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab34d8e969 code=0x7fc00000
[  622.328157][    C0] vkms_vblank_simulate: vblank timer overrun
[  622.539621][ T5829] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  622.565041][T13219] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  622.571659][T13219] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  622.757491][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  622.780185][T13219] vhci_hcd vhci_hcd.0: Device attached
[  622.789439][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  622.811712][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  622.851849][ T5829] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  622.862110][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.884647][ T5829] usb 1-1: Product: syz
[  622.891245][ T5829] usb 1-1: Manufacturer: syz
[  622.910528][ T5829] usb 1-1: SerialNumber: syz
[  622.918010][ T5829] usb 1-1: config 0 descriptor??
[  623.142532][T13231] usb usb8: usbfs: process 13231 (syz.2.2053) did not claim interface 2 before use
[  623.287291][   T30] audit: type=1400 audit(1745500627.650:944): avc:  denied  { append } for  pid=13215 comm="syz.0.2051" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  623.319405][ T5874] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  623.330312][T13233] overlayfs: missing 'lowerdir'
[  623.402121][ T5873] usb 44-1: SetAddress Request (2) to port 0
[  623.408742][ T5873] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  623.459411][ T5874] usb 6-1: device descriptor read/64, error -71
[  623.739717][ T5874] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  623.879495][ T5874] usb 6-1: device descriptor read/64, error -71
[  623.908650][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  623.980201][T13245] usb usb8: usbfs: process 13245 (syz.2.2058) did not claim interface 2 before use
[  624.120034][ T5874] usb usb6-port1: attempt power cycle
[  624.789355][ T5874] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  624.964966][ T5874] usb 6-1: device descriptor read/8, error -71
[  624.975887][ T5991] usb 4-1: USB disconnect, device number 43
[  625.961101][T13223] usbip_core: unknown command
[  625.965879][T13223] vhci_hcd: unknown pdu 0
[  625.979914][T13223] usbip_core: unknown command
[  626.032066][ T3571] vhci_hcd: stop threads
[  626.314550][ T3571] vhci_hcd: release socket
[  626.329244][ T3571] vhci_hcd: disconnect device
[  626.438294][ T5874] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  626.479848][ T5874] usb 6-1: device descriptor read/8, error -71
[  626.561779][T13268] SELinux: syz.2.2064 (13268) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  626.929795][ T5874] usb usb6-port1: unable to enumerate USB device
[  627.027487][T13265] xt_hashlimit: size too large, truncated to 1048576
[  627.100373][T13269] xt_hashlimit: size too large, truncated to 1048576
[  627.417917][   T30] audit: type=1400 audit(1745500631.780:945): avc:  denied  { listen } for  pid=13274 comm="syz.2.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  627.576307][T13278] FAULT_INJECTION: forcing a failure.
[  627.576307][T13278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.589642][T13278] CPU: 1 UID: 0 PID: 13278 Comm: syz.5.2067 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  627.589665][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  627.589675][T13278] Call Trace:
[  627.589681][T13278]  <TASK>
[  627.589687][T13278]  dump_stack_lvl+0x16c/0x1f0
[  627.589718][T13278]  should_fail_ex+0x512/0x640
[  627.589741][T13278]  _copy_from_iter+0x2a4/0x15b0
[  627.589763][T13278]  ? alloc_pages_mpol+0x25a/0x550
[  627.589782][T13278]  ? __pfx__copy_from_iter+0x10/0x10
[  627.589800][T13278]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  627.589824][T13278]  copy_page_from_iter+0xa5/0x120
[  627.589838][T13278]  tun_build_skb.constprop.0+0x292/0x1480
[  627.589857][T13278]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  627.589880][T13278]  ? __pfx__kstrtoull+0x10/0x10
[  627.589897][T13278]  tun_get_user+0x165f/0x3b10
[  627.589916][T13278]  ? __pfx_tun_get_user+0x10/0x10
[  627.589930][T13278]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  627.589946][T13278]  ? find_held_lock+0x2b/0x80
[  627.589960][T13278]  ? tun_get+0x191/0x370
[  627.589981][T13278]  tun_chr_write_iter+0xdc/0x210
[  627.589996][T13278]  vfs_write+0x5ba/0x1180
[  627.590013][T13278]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  627.590028][T13278]  ? __pfx_vfs_write+0x10/0x10
[  627.590043][T13278]  ? find_held_lock+0x2b/0x80
[  627.590064][T13278]  ksys_write+0x12a/0x240
[  627.590073][T13278]  ? __pfx_ksys_write+0x10/0x10
[  627.590081][T13278]  ? rcu_is_watching+0x12/0xc0
[  627.590097][T13278]  do_syscall_64+0xcd/0x260
[  627.590113][T13278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.590124][T13278] RIP: 0033:0x7fea74d8d41f
[  627.590133][T13278] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  627.590143][T13278] RSP: 002b:00007fea75c88000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  627.590154][T13278] RAX: ffffffffffffffda RBX: 00007fea74fb5fa0 RCX: 00007fea74d8d41f
[  627.590161][T13278] RDX: 0000000000000036 RSI: 00002000000001c0 RDI: 00000000000000c8
[  627.590167][T13278] RBP: 00007fea75c88090 R08: 0000000000000000 R09: 0000000000000000
[  627.590173][T13278] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[  627.590179][T13278] R13: 0000000000000000 R14: 00007fea74fb5fa0 R15: 00007ffc7bcea808
[  627.590192][T13278]  </TASK>
[  628.340633][ T5991] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  628.501996][ T5873] usb 44-1: device descriptor read/8, error -110
[  628.511109][T13292] FAULT_INJECTION: forcing a failure.
[  628.511109][T13292] name failslab, interval 1, probability 0, space 0, times 0
[  628.526170][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.3.2072 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  628.526200][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  628.526210][T13292] Call Trace:
[  628.526216][T13292]  <TASK>
[  628.526223][T13292]  dump_stack_lvl+0x16c/0x1f0
[  628.526254][T13292]  should_fail_ex+0x512/0x640
[  628.526271][T13292]  ? fs_reclaim_acquire+0xae/0x150
[  628.526288][T13292]  ? tomoyo_encode2+0x100/0x3e0
[  628.526302][T13292]  should_failslab+0xc2/0x120
[  628.526315][T13292]  __kmalloc_noprof+0xd2/0x510
[  628.526325][T13292]  ? d_absolute_path+0x136/0x1a0
[  628.526347][T13292]  tomoyo_encode2+0x100/0x3e0
[  628.526374][T13292]  tomoyo_encode+0x29/0x50
[  628.526395][T13292]  tomoyo_realpath_from_path+0x18f/0x6e0
[  628.526424][T13292]  tomoyo_path_number_perm+0x245/0x580
[  628.526441][T13292]  ? tomoyo_path_number_perm+0x237/0x580
[  628.526455][T13292]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  628.526469][T13292]  ? find_held_lock+0x2b/0x80
[  628.526495][T13292]  ? find_held_lock+0x2b/0x80
[  628.526511][T13292]  ? hook_file_ioctl_common+0x145/0x410
[  628.526534][T13292]  ? __fget_files+0x20e/0x3c0
[  628.526554][T13292]  security_file_ioctl+0x9b/0x240
[  628.526577][T13292]  __x64_sys_ioctl+0xb7/0x200
[  628.526600][T13292]  do_syscall_64+0xcd/0x260
[  628.526618][T13292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.526629][T13292] RIP: 0033:0x7f906298e969
[  628.526638][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  628.526648][T13292] RSP: 002b:00007f9063774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  628.526658][T13292] RAX: ffffffffffffffda RBX: 00007f9062bb5fa0 RCX: 00007f906298e969
[  628.526665][T13292] RDX: 0000200000000d40 RSI: 00000000c0386105 RDI: 0000000000000003
[  628.526673][T13292] RBP: 00007f9063774090 R08: 0000000000000000 R09: 0000000000000000
[  628.526682][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.526691][T13292] R13: 0000000000000000 R14: 00007f9062bb5fa0 R15: 00007ffc04977cf8
[  628.526714][T13292]  </TASK>
[  628.526863][T13292] ERROR: Out of memory at tomoyo_realpath_from_path.
[  628.779467][ T5991] usb 6-1: Using ep0 maxpacket: 8
[  628.785982][ T5991] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  628.795249][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.815512][ T5991] usb 6-1: config 0 descriptor??
[  628.879640][ T5879] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  629.039467][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  629.042450][ T5873] usb usb44-port1: attempt power cycle
[  629.046197][ T5879] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  629.058406][ T5879] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  629.058496][ T5991] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  630.047602][T13301] SELinux: syz.3.2076 (13301) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  630.071561][ T5879] usb 3-1: config 0 has no interface number 0
[  630.078566][ T5879] usb 3-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  630.094828][ T5879] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  630.342975][ T5873] usb usb44-port1: unable to enumerate USB device
[  630.527698][ T5879] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  630.536706][ T5879] usb 3-1: Product: syz
[  630.541611][ T5879] usb 3-1: Manufacturer: syz
[  630.585543][ T5879] usb 3-1: config 0 descriptor??
[  630.625580][ T5879] IPVS: starting estimator thread 0...
[  630.741030][T13310] IPVS: using max 51 ests per chain, 122400 per kthread
[  630.812123][T13316] Cannot find del_set index 1 as target
[  630.980694][T13319] FAULT_INJECTION: forcing a failure.
[  630.980694][T13319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  630.997991][T13319] CPU: 1 UID: 0 PID: 13319 Comm: syz.3.2080 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  630.998015][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  630.998025][T13319] Call Trace:
[  630.998031][T13319]  <TASK>
[  630.998038][T13319]  dump_stack_lvl+0x16c/0x1f0
[  630.998069][T13319]  should_fail_ex+0x512/0x640
[  630.998091][T13319]  _copy_to_user+0x32/0xd0
[  630.998112][T13319]  simple_read_from_buffer+0xcb/0x170
[  630.998139][T13319]  proc_fail_nth_read+0x197/0x270
[  630.998165][T13319]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  630.998193][T13319]  ? rw_verify_area+0xcf/0x680
[  630.998215][T13319]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  630.998241][T13319]  vfs_read+0x1de/0xc70
[  630.998268][T13319]  ? __pfx___mutex_lock+0x10/0x10
[  630.998290][T13319]  ? __pfx_vfs_read+0x10/0x10
[  630.998321][T13319]  ? __fget_files+0x20e/0x3c0
[  630.998344][T13319]  ksys_read+0x12a/0x240
[  630.998357][T13319]  ? __pfx_ksys_read+0x10/0x10
[  630.998379][T13319]  ? xfd_validate_state+0x5d/0x180
[  630.998405][T13319]  do_syscall_64+0xcd/0x260
[  630.998430][T13319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.998446][T13319] RIP: 0033:0x7f906298d37c
[  630.998461][T13319] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  630.998476][T13319] RSP: 002b:00007f9063753030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  630.998492][T13319] RAX: ffffffffffffffda RBX: 00007f9062bb6080 RCX: 00007f906298d37c
[  630.998503][T13319] RDX: 000000000000000f RSI: 00007f90637530a0 RDI: 0000000000000004
[  630.998513][T13319] RBP: 00007f9063753090 R08: 0000000000000000 R09: 0000000000000000
[  630.998522][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  630.998532][T13319] R13: 0000000000000001 R14: 00007f9062bb6080 R15: 00007ffc04977cf8
[  630.998554][T13319]  </TASK>
[  631.759150][ T5879] psmouse serio2: Failed to reset mouse on : -5
[  631.823482][T13325] overlayfs: failed to clone upperpath
[  631.975820][T13327] 9pnet_fd: Insufficient options for proto=fd
[  632.437029][T13345] FAULT_INJECTION: forcing a failure.
[  632.437029][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  632.454446][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.0.2087 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  632.454469][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  632.454476][T13345] Call Trace:
[  632.454480][T13345]  <TASK>
[  632.454485][T13345]  dump_stack_lvl+0x16c/0x1f0
[  632.454509][T13345]  should_fail_ex+0x512/0x640
[  632.454535][T13345]  _copy_to_user+0x32/0xd0
[  632.454556][T13345]  simple_read_from_buffer+0xcb/0x170
[  632.454582][T13345]  proc_fail_nth_read+0x197/0x270
[  632.454605][T13345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  632.454622][T13345]  ? rw_verify_area+0xcf/0x680
[  632.454637][T13345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  632.454653][T13345]  vfs_read+0x1de/0xc70
[  632.454676][T13345]  ? __pfx___mutex_lock+0x10/0x10
[  632.454699][T13345]  ? __pfx_vfs_read+0x10/0x10
[  632.454730][T13345]  ? __fget_files+0x20e/0x3c0
[  632.454753][T13345]  ksys_read+0x12a/0x240
[  632.454766][T13345]  ? __pfx_ksys_read+0x10/0x10
[  632.454796][T13345]  do_syscall_64+0xcd/0x260
[  632.454815][T13345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  632.454826][T13345] RIP: 0033:0x7f218478d37c
[  632.454835][T13345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  632.454847][T13345] RSP: 002b:00007f218552d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  632.454863][T13345] RAX: ffffffffffffffda RBX: 00007f21849b5fa0 RCX: 00007f218478d37c
[  632.454874][T13345] RDX: 000000000000000f RSI: 00007f218552d0a0 RDI: 0000000000000005
[  632.454885][T13345] RBP: 00007f218552d090 R08: 0000000000000000 R09: 0000000000000000
[  632.454894][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  632.454903][T13345] R13: 0000000000000000 R14: 00007f21849b5fa0 R15: 00007ffd07f489c8
[  632.454925][T13345]  </TASK>
[  632.865917][ T5991] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  632.876076][ T5991] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  632.887159][ T5991] asix 6-1:0.0: probe with driver asix failed with error -71
[  632.897433][ T5991] usb 6-1: USB disconnect, device number 31
[  632.925106][ T5159] usb 3-1: USB disconnect, device number 32
[  633.446325][T13354] fuse: Unknown parameter ''
[  633.459501][ T5829] iguanair 1-1:0.0: failed to get version
[  633.546375][ T5829] iguanair 1-1:0.0: probe with driver iguanair failed with error -110
[  633.557566][ T5829] usb 1-1: USB disconnect, device number 37
[  634.425235][T13367] syz.2.2092: attempt to access beyond end of device
[  634.425235][T13367] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0
[  634.438437][T13367] gfs2: error -5 reading superblock
[  634.580135][ T5829] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  634.670642][T13366] overlayfs: failed to clone upperpath
[  634.839434][ T5829] usb 1-1: Using ep0 maxpacket: 8
[  634.854968][ T5829] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  634.866446][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.877915][ T5829] usb 1-1: config 0 descriptor??
[  635.589558][ T5879] misc userio: Buffer overflowed, userio client isn't keeping up
[  636.266600][ T5829] a4tech 0003:09DA:001A.0025: unknown main item tag 0x0
[  636.280346][ T5829] a4tech 0003:09DA:001A.0025: unknown main item tag 0x0
[  636.287995][ T5829] a4tech 0003:09DA:001A.0025: unknown main item tag 0x0
[  636.295252][ T5829] a4tech 0003:09DA:001A.0025: unknown main item tag 0x0
[  636.306339][ T5829] a4tech 0003:09DA:001A.0025: unknown main item tag 0x0
[  636.324918][ T5829] a4tech 0003:09DA:001A.0025: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0
[  636.641665][ T5879] input: PS/2 Generic Mouse as /devices/serio2/input/input44
[  636.659541][ T5829] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  636.859352][ T5879] psmouse serio2: Failed to enable mouse on 
[  636.873499][ T5829] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  636.881659][ T5829] usb 3-1: config 0 has no interface number 0
[  636.889720][ T5829] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  636.900061][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.908455][ T5829] usb 3-1: Product: syz
[  636.912986][ T5829] usb 3-1: Manufacturer: syz
[  636.917639][ T5829] usb 3-1: SerialNumber: syz
[  636.921219][T13399] fuse: Unknown parameter ''
[  636.929694][ T5829] usb 3-1: config 0 descriptor??
[  637.025354][ T5829] yurex 3-1:0.50: Could not find endpoints
[  637.645435][ T5991] usb 1-1: USB disconnect, device number 38
[  637.664021][ T5873] usb 3-1: USB disconnect, device number 33
[  637.833447][T13406] overlayfs: failed to clone upperpath
[  638.785820][T13418] nbd: couldn't find device at index 0
[  640.039368][   T47] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  640.199669][   T47] usb 4-1: Using ep0 maxpacket: 8
[  640.207261][   T47] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  640.221918][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.252622][   T47] usb 4-1: config 0 descriptor??
[  640.259411][ T5829] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  640.409469][ T5829] usb 1-1: Using ep0 maxpacket: 16
[  640.432728][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.451616][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  640.569126][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  641.478440][ T5829] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  642.104495][   T47] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[  642.117796][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.136451][   T47] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[  642.149146][ T5829] usb 1-1: config 0 descriptor??
[  642.154893][   T47] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[  642.169736][   T47] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[  642.179091][   T47] a4tech 0003:09DA:001A.0026: unknown main item tag 0x0
[  642.188442][   T47] a4tech 0003:09DA:001A.0026: hidraw0: USB HID v0.07 Device [HID 09da:001a] on usb-dummy_hcd.3-1/input0
[  643.231280][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.239333][ T5829] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max
[  643.248976][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.256300][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.264161][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.363002][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.363058][ T5873] usb 4-1: USB disconnect, device number 44
[  643.370272][ T5829] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0
[  643.448700][T13466] team0: Mode changed to "broadcast"
[  643.515710][ T5829] microsoft 0003:045E:07DA.0027: No inputs registered, leaving
[  643.536189][ T5829] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  643.565937][ T5829] microsoft 0003:045E:07DA.0027: no inputs found
[  643.574938][ T5829] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway
[  644.289864][ T5829] usb 1-1: USB disconnect, device number 39
[  645.439504][   T30] audit: type=1400 audit(1745500649.800:946): avc:  denied  { ioctl } for  pid=13476 comm="syz.5.2127" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  646.749378][ T5829] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  646.783768][T13500] netlink: 'syz.4.2128': attribute type 10 has an invalid length.
[  646.899622][ T5829] usb 1-1: Using ep0 maxpacket: 16
[  646.913074][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  646.928884][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.991890][ T5829] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  647.028489][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.074821][ T5829] usb 1-1: config 0 descriptor??
[  648.106225][ T5829] hid-alps 0003:044E:1215.0028: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0
[  648.254423][   T30] audit: type=1400 audit(1745500652.620:947): avc:  denied  { create } for  pid=13521 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  648.275027][    C1] vkms_vblank_simulate: vblank timer overrun
[  648.306568][T13523] ipt_ECN: cannot use operation on non-tcp rule
[  648.428167][   T30] audit: type=1400 audit(1745500652.650:948): avc:  denied  { write } for  pid=13521 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  648.755538][   T30] audit: type=1400 audit(1745500652.670:949): avc:  denied  { ioctl } for  pid=13521 comm="syz.3.2139" path="socket:[36151]" dev="sockfs" ino=36151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  648.827880][ T5829] usb 1-1: USB disconnect, device number 40
[  650.781548][T13564] netlink: 'syz.4.2147': attribute type 10 has an invalid length.
[  650.814055][T13565] FAULT_INJECTION: forcing a failure.
[  650.814055][T13565] name failslab, interval 1, probability 0, space 0, times 0
[  650.829342][T13565] CPU: 1 UID: 0 PID: 13565 Comm: syz.2.2152 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  650.829368][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  650.829378][T13565] Call Trace:
[  650.829384][T13565]  <TASK>
[  650.829391][T13565]  dump_stack_lvl+0x16c/0x1f0
[  650.829418][T13565]  should_fail_ex+0x512/0x640
[  650.829436][T13565]  ? __kmalloc_noprof+0xbf/0x510
[  650.829454][T13565]  ? bpf_test_init.isra.0+0x9e/0x140
[  650.829473][T13565]  should_failslab+0xc2/0x120
[  650.829491][T13565]  __kmalloc_noprof+0xd2/0x510
[  650.829512][T13565]  bpf_test_init.isra.0+0x9e/0x140
[  650.829533][T13565]  bpf_prog_test_run_skb+0x245/0x2280
[  650.829556][T13565]  ? __fget_files+0x204/0x3c0
[  650.829575][T13565]  ? __fget_files+0x20e/0x3c0
[  650.829591][T13565]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  650.829616][T13565]  ? fput+0x70/0xf0
[  650.829637][T13565]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  650.829660][T13565]  __sys_bpf+0x1485/0x4d80
[  650.829685][T13565]  ? __pfx___sys_bpf+0x10/0x10
[  650.829707][T13565]  ? ksys_write+0x190/0x240
[  650.829730][T13565]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  650.829759][T13565]  ? fput+0x70/0xf0
[  650.829770][T13565]  ? ksys_write+0x1b9/0x240
[  650.829779][T13565]  ? __pfx_ksys_write+0x10/0x10
[  650.829787][T13565]  ? rcu_is_watching+0x12/0xc0
[  650.829803][T13565]  __x64_sys_bpf+0x78/0xc0
[  650.829817][T13565]  ? lockdep_hardirqs_on+0x7c/0x110
[  650.829831][T13565]  do_syscall_64+0xcd/0x260
[  650.829847][T13565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.829858][T13565] RIP: 0033:0x7fab34d8e969
[  650.829867][T13565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  650.829877][T13565] RSP: 002b:00007fab35c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  650.829888][T13565] RAX: ffffffffffffffda RBX: 00007fab34fb5fa0 RCX: 00007fab34d8e969
[  650.829894][T13565] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a
[  650.829900][T13565] RBP: 00007fab35c95090 R08: 0000000000000000 R09: 0000000000000000
[  650.829907][T13565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.829913][T13565] R13: 0000000000000000 R14: 00007fab34fb5fa0 R15: 00007ffd13912538
[  650.829926][T13565]  </TASK>
[  651.053672][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.549321][ T5874] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  651.700730][ T5874] usb 3-1: Using ep0 maxpacket: 8
[  651.713499][ T5874] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  651.733869][ T5874] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.755218][ T5874] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.767305][ T5874] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  651.782467][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0
[  651.794463][ T5874] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  651.811734][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.823603][ T5874] usb 3-1: config 0 descriptor??
[  651.874468][T13583] FAULT_INJECTION: forcing a failure.
[  651.874468][T13583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  651.892180][T13583] CPU: 0 UID: 0 PID: 13583 Comm: syz.3.2160 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  651.892206][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  651.892216][T13583] Call Trace:
[  651.892222][T13583]  <TASK>
[  651.892228][T13583]  dump_stack_lvl+0x16c/0x1f0
[  651.892254][T13583]  should_fail_ex+0x512/0x640
[  651.892276][T13583]  _copy_to_user+0x32/0xd0
[  651.892298][T13583]  simple_read_from_buffer+0xcb/0x170
[  651.892326][T13583]  proc_fail_nth_read+0x197/0x270
[  651.892351][T13583]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  651.892375][T13583]  ? rw_verify_area+0xcf/0x680
[  651.892395][T13583]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  651.892417][T13583]  vfs_read+0x1de/0xc70
[  651.892443][T13583]  ? __pfx___mutex_lock+0x10/0x10
[  651.892464][T13583]  ? __pfx_vfs_read+0x10/0x10
[  651.892493][T13583]  ? __fget_files+0x20e/0x3c0
[  651.892513][T13583]  ksys_read+0x12a/0x240
[  651.892526][T13583]  ? __pfx_ksys_read+0x10/0x10
[  651.892555][T13583]  do_syscall_64+0xcd/0x260
[  651.892579][T13583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.892596][T13583] RIP: 0033:0x7f906298d37c
[  651.892609][T13583] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  651.892624][T13583] RSP: 002b:00007f9063774030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  651.892640][T13583] RAX: ffffffffffffffda RBX: 00007f9062bb5fa0 RCX: 00007f906298d37c
[  651.892651][T13583] RDX: 000000000000000f RSI: 00007f90637740a0 RDI: 0000000000000003
[  651.892661][T13583] RBP: 00007f9063774090 R08: 0000000000000000 R09: 0000000000000000
[  651.892670][T13583] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  651.892681][T13583] R13: 0000000000000000 R14: 00007f9062bb5fa0 R15: 00007ffc04977cf8
[  651.892710][T13583]  </TASK>
[  652.265263][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'.
[  652.482421][   T47] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  652.699401][   T47] usb 1-1: Using ep0 maxpacket: 16
[  652.715192][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10
[  652.762114][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024
[  652.774735][   T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  652.790003][   T47] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  652.799033][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.819182][T13602] FAULT_INJECTION: forcing a failure.
[  652.819182][T13602] name failslab, interval 1, probability 0, space 0, times 0
[  652.820963][   T47] usb 1-1: config 0 descriptor??
[  652.839161][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.5.2166 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  652.839186][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  652.839196][T13602] Call Trace:
[  652.839202][T13602]  <TASK>
[  652.839209][T13602]  dump_stack_lvl+0x16c/0x1f0
[  652.839239][T13602]  should_fail_ex+0x512/0x640
[  652.839257][T13602]  ? __kmalloc_noprof+0xbf/0x510
[  652.839276][T13602]  ? io_cache_alloc_new+0x45/0xf0
[  652.839294][T13602]  should_failslab+0xc2/0x120
[  652.839313][T13602]  __kmalloc_noprof+0xd2/0x510
[  652.839326][T13602]  ? __pfx___io_alloc_req_refill+0x10/0x10
[  652.839354][T13602]  io_cache_alloc_new+0x45/0xf0
[  652.839375][T13602]  io_uring_cmd_prep+0x36d/0x660
[  652.839399][T13602]  io_submit_sqes+0x825/0x25d0
[  652.839436][T13602]  __do_sys_io_uring_enter+0xd6a/0x1630
[  652.839464][T13602]  ? __fget_files+0x20e/0x3c0
[  652.839479][T13602]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[  652.839507][T13602]  ? fput+0x70/0xf0
[  652.839524][T13602]  ? ksys_write+0x1b9/0x240
[  652.839536][T13602]  ? __pfx_ksys_write+0x10/0x10
[  652.839547][T13602]  ? rcu_is_watching+0x12/0xc0
[  652.839573][T13602]  do_syscall_64+0xcd/0x260
[  652.839596][T13602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.839614][T13602] RIP: 0033:0x7fea74d8e969
[  652.839628][T13602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  652.839644][T13602] RSP: 002b:00007fea75c88038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  652.839661][T13602] RAX: ffffffffffffffda RBX: 00007fea74fb5fa0 RCX: 00007fea74d8e969
[  652.839672][T13602] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000004
[  652.839682][T13602] RBP: 00007fea75c88090 R08: 0000000000000000 R09: 0000000000000000
[  652.839692][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.839702][T13602] R13: 0000000000000000 R14: 00007fea74fb5fa0 R15: 00007ffc7bcea808
[  652.839723][T13602]  </TASK>
[  653.049816][   T47] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46
[  653.254631][ T5879] usb 1-1: USB disconnect, device number 41
[  653.323825][   T30] audit: type=1400 audit(1745500657.690:950): avc:  denied  { write } for  pid=13609 comm="syz.4.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  653.330050][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'.
[  653.449345][   T47] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  653.609357][   T47] usb 6-1: Using ep0 maxpacket: 16
[  653.615691][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.626670][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.636386][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  653.649851][   T47] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  653.659066][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.668377][   T47] usb 6-1: config 0 descriptor??
[  653.994438][T13618] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  654.079681][T13618] Cannot find set identified by id 0 to match
[  654.440883][   T47] shield 0003:0955:7214.0029: unknown main item tag 0x0
[  654.446822][T13608] random: crng reseeded on system resumption
[  654.448281][   T47] shield 0003:0955:7214.0029: unknown main item tag 0x0
[  654.460972][   T47] shield 0003:0955:7214.0029: unknown main item tag 0x0
[  654.467929][   T47] shield 0003:0955:7214.0029: unknown main item tag 0x0
[  654.474946][   T47] shield 0003:0955:7214.0029: unknown main item tag 0x0
[  654.484049][   T47] input: HID 0955:7214 Haptics as /devices/virtual/input/input47
[  654.494620][ T5874] usb 3-1: USB disconnect, device number 34
[  654.503693][   T47] shield 0003:0955:7214.0029: Registered Thunderstrike controller
[  654.511785][   T47] shield 0003:0955:7214.0029: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  654.622142][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.631636][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.775380][   T47] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  654.775651][ T5874] usb 6-1: USB disconnect, device number 32
[  654.791624][   T47] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  654.803891][   T47] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  654.829370][   T47] shield 0003:0955:7214.0029: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  654.876065][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  655.739663][   T47] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  655.773364][   T30] audit: type=1400 audit(1745500660.140:951): avc:  denied  { getopt } for  pid=13647 comm="syz.5.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  656.143821][T13656] overlayfs: failed to clone lowerpath
[  656.239867][   T47] usb 3-1: Using ep0 maxpacket: 16
[  656.890714][   T30] audit: type=1400 audit(1745500661.260:952): avc:  denied  { remount } for  pid=13655 comm="syz.4.2185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  656.936563][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.960370][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.019545][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  657.037831][   T47] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  657.051484][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.063706][   T47] usb 3-1: config 0 descriptor??
[  657.262584][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2189'.
[  657.570638][   T47] shield 0003:0955:7214.002A: unknown main item tag 0x0
[  657.590018][   T47] shield 0003:0955:7214.002A: unknown main item tag 0x0
[  657.624238][   T47] shield 0003:0955:7214.002A: unknown main item tag 0x0
[  657.640677][   T47] shield 0003:0955:7214.002A: unknown main item tag 0x0
[  657.665953][   T47] shield 0003:0955:7214.002A: unknown main item tag 0x0
[  657.692729][   T47] input: HID 0955:7214 Haptics as /devices/virtual/input/input48
[  657.778274][T13641] random: crng reseeded on system resumption
[  657.809663][   T47] shield 0003:0955:7214.002A: Registered Thunderstrike controller
[  657.817708][   T47] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  657.855694][   T30] audit: type=1400 audit(1745500662.220:953): avc:  denied  { execute } for  pid=13691 comm="syz.3.2197" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=36507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  657.919557][ T5159] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  657.999230][T13699] overlayfs: failed to clone upperpath
[  658.083642][ T5991] usb 3-1: USB disconnect, device number 35
[  658.083821][   T47] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  658.094884][ T5991] ------------[ cut here ]------------
[  658.106067][ T5991] workqueue: work disable count underflowed
[  658.111993][ T5991] WARNING: CPU: 0 PID: 5991 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340
[  658.120933][ T5991] Modules linked in:
[  658.125013][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:7 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  658.137069][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  658.147119][ T5991] Workqueue: usb_hub_wq hub_event
[  658.152138][ T5991] RIP: 0010:enable_work+0x2f8/0x340
[  658.157331][ T5991] Code: 89 ee e8 2b 6a 37 00 45 84 ed 0f 85 29 fe ff ff e8 3d 6f 37 00 c6 05 73 be ea 0e 01 90 48 c7 c7 60 e5 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 eb 9c 00 e9 aa fe ff ff
[  658.176940][ T5991] RSP: 0018:ffffc900033573c8 EFLAGS: 00010086
[  658.182997][ T5991] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a014000
[  658.190964][ T5991] RDX: 0000000000100000 RSI: ffffffff817ae005 RDI: 0000000000000001
[  658.198927][ T5991] RBP: ffff88805af9d730 R08: 0000000000000001 R09: 0000000000000000
[  658.206885][ T5991] R10: 0000000000000000 R11: fffffffffffd5db8 R12: 1ffff9200066ae7a
[  658.214842][ T5991] R13: 0000000000000000 R14: ffff88805af9d728 R15: ffffffff8fc4ab60
[  658.222807][ T5991] FS:  0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000
[  658.231723][ T5991] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  658.238288][ T5991] CR2: 0000001b2f8f2ff8 CR3: 00000000601fc000 CR4: 00000000003526f0
[  658.246241][ T5991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  658.254194][ T5991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  658.262169][ T5991] Call Trace:
[  658.265432][ T5991]  <TASK>
[  658.268345][ T5991]  ? __pfx_enable_work+0x10/0x10
[  658.273274][ T5991]  ? __thermal_zone_cdev_unbind+0x6c/0x6a0
[  658.279069][ T5991]  __cancel_work_sync+0xe7/0x130
[  658.284007][ T5991]  thermal_zone_device_unregister+0x239/0x450
[  658.290075][ T5991]  ? __pfx_shield_remove+0x10/0x10
[  658.295190][ T5991]  power_supply_unregister+0x10a/0x150
[  658.300641][ T5991]  shield_remove+0x75/0x130
[  658.305134][ T5991]  ? __pfx_shield_remove+0x10/0x10
[  658.310230][ T5991]  hid_device_remove+0xce/0x260
[  658.315067][ T5991]  ? __pfx_hid_device_remove+0x10/0x10
[  658.320514][ T5991]  device_remove+0xc8/0x170
[  658.325026][ T5991]  device_release_driver_internal+0x44b/0x620
[  658.331096][ T5991]  bus_remove_device+0x22f/0x420
[  658.336027][ T5991]  device_del+0x396/0x9f0
[  658.340365][ T5991]  ? __pfx_device_del+0x10/0x10
[  658.345207][ T5991]  ? do_raw_spin_lock+0x12c/0x2b0
[  658.350227][ T5991]  hid_destroy_device+0x19c/0x240
[  658.355245][ T5991]  usbhid_disconnect+0xa0/0xe0
[  658.360002][ T5991]  usb_unbind_interface+0x1da/0x9a0
[  658.365192][ T5991]  ? kernfs_remove_by_name_ns+0xbe/0x110
[  658.370814][ T5991]  ? __pfx_usb_unbind_interface+0x10/0x10
[  658.376521][ T5991]  device_remove+0x122/0x170
[  658.381101][ T5991]  device_release_driver_internal+0x44b/0x620
[  658.387163][ T5991]  bus_remove_device+0x22f/0x420
[  658.392092][ T5991]  device_del+0x396/0x9f0
[  658.396410][ T5991]  ? __pfx_device_del+0x10/0x10
[  658.401246][ T5991]  ? kobject_put+0x210/0x5a0
[  658.405833][ T5991]  usb_disable_device+0x355/0x7d0
[  658.410854][ T5991]  usb_disconnect+0x2e1/0x920
[  658.415525][ T5991]  hub_event+0x1c57/0x4fa0
[  658.419936][ T5991]  ? __lock_acquire+0xaa4/0x1ba0
[  658.424857][ T5991]  ? __pfx_hub_event+0x10/0x10
[  658.429599][ T5991]  ? debug_object_deactivate+0x1ec/0x3a0
[  658.435227][ T5991]  ? rcu_is_watching+0x12/0xc0
[  658.439978][ T5991]  process_one_work+0x9cc/0x1b70
[  658.444910][ T5991]  ? __pfx_process_one_work+0x10/0x10
[  658.450271][ T5991]  ? assign_work+0x1a0/0x250
[  658.454845][ T5991]  worker_thread+0x6c8/0xf10
[  658.459423][ T5991]  ? __kthread_parkme+0x19e/0x250
[  658.464437][ T5991]  ? __pfx_worker_thread+0x10/0x10
[  658.469529][ T5991]  kthread+0x3c2/0x780
[  658.473587][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.478158][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.482739][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.487310][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.491879][ T5991]  ? rcu_is_watching+0x12/0xc0
[  658.496629][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.501202][ T5991]  ret_from_fork+0x45/0x80
[  658.505598][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.510170][ T5991]  ret_from_fork_asm+0x1a/0x30
[  658.514931][ T5991]  </TASK>
[  658.517931][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  658.525191][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/0:7 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) 
[  658.537231][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  658.547266][ T5991] Workqueue: usb_hub_wq hub_event
[  658.552274][ T5991] Call Trace:
[  658.555532][ T5991]  <TASK>
[  658.558447][ T5991]  dump_stack_lvl+0x3d/0x1f0
[  658.563026][ T5991]  panic+0x71c/0x800
[  658.566904][ T5991]  ? __pfx_panic+0x10/0x10
[  658.571298][ T5991]  ? show_trace_log_lvl+0x29b/0x3e0
[  658.576489][ T5991]  ? enable_work+0x2f8/0x340
[  658.581062][ T5991]  check_panic_on_warn+0xab/0xb0
[  658.585979][ T5991]  __warn+0xf6/0x3c0
[  658.589856][ T5991]  ? enable_work+0x2f8/0x340
[  658.594428][ T5991]  report_bug+0x3c3/0x580
[  658.598744][ T5991]  ? enable_work+0x2f8/0x340
[  658.603319][ T5991]  handle_bug+0x184/0x210
[  658.607640][ T5991]  exc_invalid_op+0x17/0x50
[  658.612131][ T5991]  asm_exc_invalid_op+0x1a/0x20
[  658.616962][ T5991] RIP: 0010:enable_work+0x2f8/0x340
[  658.622145][ T5991] Code: 89 ee e8 2b 6a 37 00 45 84 ed 0f 85 29 fe ff ff e8 3d 6f 37 00 c6 05 73 be ea 0e 01 90 48 c7 c7 60 e5 8b 8b e8 99 fd f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 eb 9c 00 e9 aa fe ff ff
[  658.641735][ T5991] RSP: 0018:ffffc900033573c8 EFLAGS: 00010086
[  658.647782][ T5991] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a014000
[  658.655737][ T5991] RDX: 0000000000100000 RSI: ffffffff817ae005 RDI: 0000000000000001
[  658.663691][ T5991] RBP: ffff88805af9d730 R08: 0000000000000001 R09: 0000000000000000
[  658.671643][ T5991] R10: 0000000000000000 R11: fffffffffffd5db8 R12: 1ffff9200066ae7a
[  658.679596][ T5991] R13: 0000000000000000 R14: ffff88805af9d728 R15: ffffffff8fc4ab60
[  658.687556][ T5991]  ? __warn_printk+0x1a5/0x350
[  658.692320][ T5991]  ? enable_work+0x2f7/0x340
[  658.696897][ T5991]  ? __pfx_enable_work+0x10/0x10
[  658.701827][ T5991]  ? __thermal_zone_cdev_unbind+0x6c/0x6a0
[  658.707623][ T5991]  __cancel_work_sync+0xe7/0x130
[  658.712550][ T5991]  thermal_zone_device_unregister+0x239/0x450
[  658.718614][ T5991]  ? __pfx_shield_remove+0x10/0x10
[  658.723719][ T5991]  power_supply_unregister+0x10a/0x150
[  658.729160][ T5991]  shield_remove+0x75/0x130
[  658.733651][ T5991]  ? __pfx_shield_remove+0x10/0x10
[  658.738748][ T5991]  hid_device_remove+0xce/0x260
[  658.743585][ T5991]  ? __pfx_hid_device_remove+0x10/0x10
[  658.749030][ T5991]  device_remove+0xc8/0x170
[  658.753523][ T5991]  device_release_driver_internal+0x44b/0x620
[  658.759584][ T5991]  bus_remove_device+0x22f/0x420
[  658.764512][ T5991]  device_del+0x396/0x9f0
[  658.768835][ T5991]  ? __pfx_device_del+0x10/0x10
[  658.773673][ T5991]  ? do_raw_spin_lock+0x12c/0x2b0
[  658.778699][ T5991]  hid_destroy_device+0x19c/0x240
[  658.783711][ T5991]  usbhid_disconnect+0xa0/0xe0
[  658.788463][ T5991]  usb_unbind_interface+0x1da/0x9a0
[  658.793650][ T5991]  ? kernfs_remove_by_name_ns+0xbe/0x110
[  658.799274][ T5991]  ? __pfx_usb_unbind_interface+0x10/0x10
[  658.804978][ T5991]  device_remove+0x122/0x170
[  658.809558][ T5991]  device_release_driver_internal+0x44b/0x620
[  658.815631][ T5991]  bus_remove_device+0x22f/0x420
[  658.820555][ T5991]  device_del+0x396/0x9f0
[  658.824875][ T5991]  ? __pfx_device_del+0x10/0x10
[  658.829714][ T5991]  ? kobject_put+0x210/0x5a0
[  658.834307][ T5991]  usb_disable_device+0x355/0x7d0
[  658.839326][ T5991]  usb_disconnect+0x2e1/0x920
[  658.843998][ T5991]  hub_event+0x1c57/0x4fa0
[  658.848414][ T5991]  ? __lock_acquire+0xaa4/0x1ba0
[  658.853338][ T5991]  ? __pfx_hub_event+0x10/0x10
[  658.858086][ T5991]  ? debug_object_deactivate+0x1ec/0x3a0
[  658.863715][ T5991]  ? rcu_is_watching+0x12/0xc0
[  658.868468][ T5991]  process_one_work+0x9cc/0x1b70
[  658.873397][ T5991]  ? __pfx_process_one_work+0x10/0x10
[  658.878760][ T5991]  ? assign_work+0x1a0/0x250
[  658.883337][ T5991]  worker_thread+0x6c8/0xf10
[  658.887917][ T5991]  ? __kthread_parkme+0x19e/0x250
[  658.893454][ T5991]  ? __pfx_worker_thread+0x10/0x10
[  658.898555][ T5991]  kthread+0x3c2/0x780
[  658.902618][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.907191][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.911762][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.916333][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.920904][ T5991]  ? rcu_is_watching+0x12/0xc0
[  658.925655][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.930227][ T5991]  ret_from_fork+0x45/0x80
[  658.934626][ T5991]  ? __pfx_kthread+0x10/0x10
[  658.939200][ T5991]  ret_from_fork_asm+0x1a/0x30
[  658.943966][ T5991]  </TASK>
[  658.947152][ T5991] Kernel Offset: disabled
[  658.951459][ T5991] Rebooting in 86400 seconds..