last executing test programs:

4m50.388241411s ago: executing program 0 (id=198):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = semget(0x2, 0x2, 0x105)
semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000180)=""/236)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000002, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000000c0)=[0xf63])
fallocate(r5, 0x0, 0x400000000000000, 0x2)
semctl$SEM_STAT_ANY(r1, 0x2, 0x14, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
pwritev(r6, 0x0, 0x0, 0x0, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file1\x00')
creat(&(0x7f0000000080)='./file0\x00', 0x86)
acct(&(0x7f0000000240)='./file0\x00') (fail_nth: 10)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)

4m49.713581192s ago: executing program 0 (id=199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1])

4m49.347305655s ago: executing program 0 (id=201):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0xa0042, 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0xfc, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffff44, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="2596397b28df9c11d067fa47645af8a01ce738173b84c465103ebc24ecdf0493977edf03110787f3038473b0c0b6666f066fcd12811ac2a4bf87bd2f307ef56cc4d7c9ea480fdb19e6f6e5ff3b67b73431b0bd6c582783b66159e2e2b832e2791308e6f90ddafe97a6196cd96cd035f1ba8707a55b56e50c4841d5f03154d91c696249ec321c8e9ace02cc0baee8cc532a023cb2524599914c43614f", @ANYRES32, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r2], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
iopl(0x3)
setregid(0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000500)='./file2/file0\x00', 0x2801, 0x128)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d41a07402505a0a45d4f0102030109021b00010000000009045500012a"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d77ad55cbbe17f1b50f815ff7ceb2183cc01588050b74afc86689a1d8a1ff08000000db6c902c77c7addc23d3be2c30144196983df419a801f47ae3edfbd0657b8d36c08c907da315d2b0f61b524ececf680463b0a1c53632b79ac9a4b6f8f1ce00f2b194ce2556c3733cc2826f56036304f437f2031f22112807b7d497a0a3bcefa388aac844d656d86e9252e2d393812c5788546f8e2a7e2d1e75830b00", 0xa0, 0xfffffffffffffffe)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0x0, 0x180000000, 0x20, 0x1, 0x0, 0x38})
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80064d12, &(0x7f0000000000))

4m47.966678196s ago: executing program 2 (id=207):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000245b7de191000000"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x5885, 0x80, 0x2}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1})
io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000180)=0x800000, 0x4)
pipe2(&(0x7f0000000340), 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m47.418942835s ago: executing program 2 (id=209):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef1747600000000000010902240001000000000904000001030002000921e6ffff0022050009058103"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000004c0)=0x27)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r5, 0x5}, 0x8)
syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'wg0\x00', 0x4}, 0x18)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r11=>0x0})
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0))
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r10, @ANYRESHEX=r10, @ANYRES32=r11, @ANYBLOB="0800a0002609000008009f0006000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x34}}, 0xc000)

4m46.093425531s ago: executing program 0 (id=216):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000340)="41000000010001", 0x7)
socket$caif_stream(0x25, 0x1, 0x2)
syz_io_uring_setup(0x118, 0x0, &(0x7f0000000000), 0x0)
r4 = socket(0x10, 0x80003, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200)
open$dir(0x0, 0x0, 0x20)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)

4m44.857817578s ago: executing program 0 (id=218):
userfaultfd(0x80001)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
setresgid(0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r4, 0x0, 0x9, &(0x7f0000000040)='\'\')+^}%+\x00'}, 0x30)

4m44.223744252s ago: executing program 2 (id=221):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
close(r2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10)
setrlimit(0x40000000000008, &(0x7f0000000000)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r8, 0x100)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fff16c", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@generic={0x4, 0x3, "dc"}]}}}}}}}}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x40040)

4m43.904244153s ago: executing program 0 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000010180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={r2})
socket$key(0xf, 0x3, 0x2)
rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

4m43.421936691s ago: executing program 2 (id=226):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0xa0042, 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0xfc, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={<r3=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}}}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1fffffffffffff44, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="2596397b28df9c11d067fa47645af8a01ce738173b84c465103ebc24ecdf0493977edf03110787f3038473b0c0b6666f066fcd12811ac2a4bf87bd2f307ef56cc4d7c9ea480fdb19e6f6e5ff3b67b73431b0bd6c582783b66159e2e2b832e2791308e6f90ddafe97a6196cd96cd035f1ba8707a55b56e50c4841d5f03154d91c696249ec321c8e9ace02cc0baee8cc532a023cb2524599914c43614f", @ANYRES32, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32=r2], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
iopl(0x3)
setregid(0x0, 0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000500)='./file2/file0\x00', 0x2801, 0x128)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@lowerdir={'lowerdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d41a07402505a0a45d4f0102030109021b00010000000009045500012a"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d77ad55cbbe17f1b50f815ff7ceb2183cc01588050b74afc86689a1d8a1ff08000000db6c902c77c7addc23d3be2c30144196983df419a801f47ae3edfbd0657b8d36c08c907da315d2b0f61b524ececf680463b0a1c53632b79ac9a4b6f8f1ce00f2b194ce2556c3733cc2826f56036304f437f2031f22112807b7d497a0a3bcefa388aac844d656d86e9252e2d393812c5788546f8e2a7e2d1e75830b00", 0xa0, 0xfffffffffffffffe)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0x0, 0x180000000, 0x20, 0x1, 0x0, 0x38})
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80064d12, &(0x7f0000000000))

4m42.834815382s ago: executing program 3 (id=228):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = epoll_create1(0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000010c0)={0x10000004})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f0000000080), 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006100), 0x0, 0xf0ff, 0x0)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x2)
setreuid(0xee00, 0xee00)
keyctl$setperm(0x5, r6, 0x10080000)
ioprio_set$pid(0x1, 0x0, 0x4000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m41.870552881s ago: executing program 3 (id=229):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x6}, 0x1c)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
io_uring_setup(0x4053, &(0x7f0000000080)={0x0, 0xa557, 0x4, 0x2, 0x94})
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$isdn(0x22, 0x2, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0)

4m40.395780966s ago: executing program 3 (id=232):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ecm(0x4, 0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109024300010101c000090400a502020600020024060200004005240000020d240f01230e00000400ff073c06240706000209058202ff031d00060905030220000108d6"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0)
openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000500)=0x1d)
r1 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008081)

4m39.834111944s ago: executing program 2 (id=233):
userfaultfd(0x80001)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
setresgid(0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r4, 0x0, 0x9, &(0x7f0000000040)='\'\')+^}%+\x00'}, 0x30)

4m39.198953504s ago: executing program 3 (id=236):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000245b7de191000000"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x5885, 0x80, 0x2}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1})
io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

4m39.07752033s ago: executing program 3 (id=237):
userfaultfd(0x80001)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r3, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010)
setresgid(0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r4, 0x0, 0x9, &(0x7f0000000040)='\'\')+^}%+\x00'}, 0x30)

4m38.78381593s ago: executing program 2 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x117, 0x0, 0x0, 0x0, 0x0, 0xe88}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0)

4m38.091476227s ago: executing program 3 (id=239):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x48140, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7078, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x1000000, 0x0, 0x0, 0x0)

4m28.605530754s ago: executing program 32 (id=223):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0x4008af24, &(0x7f0000010180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={r2})
socket$key(0xf, 0x3, 0x2)
rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0)
epoll_create1(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

4m23.502899813s ago: executing program 33 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x117, 0x0, 0x0, 0x0, 0x0, 0xe88}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0)

4m22.954997524s ago: executing program 34 (id=239):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x48140, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7078, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x1000000, 0x0, 0x0, 0x0)

9.226151408s ago: executing program 5 (id=1337):
socket(0x10, 0x3, 0xfffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) (fail_nth: 6)

6.854435355s ago: executing program 6 (id=1347):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x800000000000, 0x0, 0x2004cb, 0x200000000000, 0x5, 0x0, 0xfffffffffffffffd], 0x0, 0x40200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
recvmsg(r5, &(0x7f0000000180)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/198, 0xc6}, {&(0x7f0000000500)=""/236, 0xec}], 0x3, &(0x7f0000000100)=""/46, 0x2e}, 0x60002040)
write(r5, &(0x7f0000000000)="2e000400010002", 0x7)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)

5.16765056s ago: executing program 7 (id=1353):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="2e000400010002", 0x7) (fail_nth: 4)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)

4.988032881s ago: executing program 6 (id=1354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
socket$kcm(0x29, 0x3, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000180)={0x642, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040955f1c6a524d7fb7f155611c69895f6856bcda41f68b8f4090b4ae339ce5de0c44a94b1f1d5d9c90c0360dddb90bf4d32f98ea73e229c471730f3495e6ef37b79fc8fe88eb665fb2d87dd712"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
accept4(r6, 0x0, 0x0, 0x0)

4.591740543s ago: executing program 5 (id=1355):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001b00)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000002300)="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", 0x1000}, {&(0x7f00000001c0)}, {&(0x7f0000000540)="27e4ff4621dd206e7f0dbef5744bf06c05cecec4e705cfdc9e02b06e2b65c18655d5efa4392701e080d0a2224df5d5759deee40427abd53086b9fa74947b297adee9e62a959a311c065cb9f8dd7f5b5f5424a5989b1bc5b17e3254ffc592089278c183e9d829e6f2bfbd8f", 0x6b}, {&(0x7f0000000400)="21058d34487527c8f2eaba9a0f6bd8f6ebc57062bc0a61f3f1", 0x19}], 0x4, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r1, 0xffffffffffffffff, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [r2, r2, r2, r2, r2, r1, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r2, r2, r2, r2, r2]}}], 0x160, 0x40000}}], 0x1, 0x800)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40080)
mount(&(0x7f00000022c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='qnx4\x00', 0x40, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000020000100ffffffff000000000a0000020000000512000000982f3ec514f28f54a93a11ab18e07ee9f9185da66c62aefbdf3ead00e0d7419f01817c9504a1fe6a95f23761c6117ba6d25d30938581564cfd67b8eb40514c86eda1d7d9fac590812eb34eb4ac6baf5477018c14516edd5f831cfa86574359b25698a741e4973f3e96f7b345fa9ad6d4072f14bc950407b1857be5dc22ed0a73799fecf5b84d"], 0x1c}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
socket$kcm(0x11, 0x3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="b8b282e50ff54e9999fd435b1adb2f22623e78a9b84249c8142addd70dd5de9243dc2ab72f7c7b28916f42fba53c923c1a095a00"/62, 0x12}], 0x45}, 0x28040085)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8000000, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0xc, 0x5, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x100b, 0x3, 'snmp_trap\x00', {0x9}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0xffffff00, 0x0, 0xffffff00], 'veth1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
dup(0xffffffffffffffff)

4.364898306s ago: executing program 1 (id=1356):
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x8040)

4.066838052s ago: executing program 1 (id=1358):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcd4)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)="772174c1ed978e7ddda9ef53856c5ecf3dcd14fd0056ea5fdadfdb03803ad920ba04bc0109ad307b3d38c51f3698f6ef56690cb7dc764fb8f9413f3ea211c88f7399cc12083cc71a663c401c064d0a2700c49ecb1b16fb4adb174aa5faace9b2e6792f1474b0a7bdb55b5825ce61481ab8ddc8319c65a832d1b69cda07bf", 0x7e}, {&(0x7f0000000080)}, {&(0x7f0000000100)}], 0x3)

3.444967865s ago: executing program 1 (id=1359):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400f010000000adbf217fd2f89ab53a5f4e4962695d450dbac3620c6366dc9e3456029598a3234d340f857ddbe8ee4df45a4f169b29153bab6d4984dc478cb36ec5a3ad5efc1e39ef893f75fd37cd57e40973f31766f7857b7"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.440158573s ago: executing program 5 (id=1360):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x40000000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0)

3.270647248s ago: executing program 5 (id=1361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000ffff070002"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0xa00, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c041}, 0x41000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
shutdown(r2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x63}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20008021)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_create(0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380), 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

3.227127764s ago: executing program 4 (id=1363):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
epoll_create1(0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1})
fcntl$setpipe(r2, 0x407, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000031000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)

3.185525305s ago: executing program 4 (id=1364):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='/-\x00', 0xfffffffffffffffe)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000"], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c"], 0xec}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

2.962335098s ago: executing program 7 (id=1365):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
socket(0x10, 0x803, 0x0)

2.674522224s ago: executing program 6 (id=1366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000019440)={0x0, 0x304000, 0x1800, 0x0, 0x3}, 0x20)

2.632188081s ago: executing program 1 (id=1367):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b000000010000000100009300000000"], 0x0, 0x3b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)

2.510400506s ago: executing program 4 (id=1368):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000040)={0x1d, 0x4, 0x1})
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r8 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
close(r0)

2.510061033s ago: executing program 1 (id=1369):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
inotify_rm_watch(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcd4)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)="772174c1ed978e7ddda9ef53856c5ecf3dcd14fd0056ea5fdadfdb03803ad920ba04bc0109ad307b3d38c51f3698f6ef56690cb7dc764fb8f9413f3ea211c88f7399cc12083cc71a663c401c064d0a2700c49ecb1b16fb4adb174aa5faace9b2e6792f1474b0a7bdb55b5825ce61481ab8ddc8319c65a832d1b69cda07bf", 0x7e}, {&(0x7f0000000080)}, {&(0x7f0000000100)}], 0x3)

2.505414572s ago: executing program 7 (id=1370):
iopl(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
listen(0xffffffffffffffff, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800040000000200000032fd00000d000000243b64110bc1f45573ced5a5ea39a3af"], 0x118)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f00000000c0)={@hyper, 0x8001})
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x4d, 0xa, 0x1, "3258ae0bc770aa63f5040800", 0x34324948})
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.455947877s ago: executing program 6 (id=1371):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x80) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x97000286)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2055)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0xfffc, 0xfc0b, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
setpriority(0x0, 0xffffffff, 0xef) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file6\x00', 0x8000, 0x2) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

2.045237684s ago: executing program 5 (id=1372):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
write$dsp(r0, &(0x7f0000000080)="22082df4a64e85ba45a31f49ba3f1f670000004f39bc08a7cc0924e303501e59fb3f648617f8df1cbaf694a0a6a6bab035bc4296846fbeee206276fdbe731a3751697e872cba7dc833c05640c1", 0x4d)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', 0x0})
r1 = memfd_secret(0x0)
ftruncate(r1, 0x51a9497)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.902380995s ago: executing program 7 (id=1373):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
getpriority(0x0, 0x0)
r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x40)
write$cgroup_int(r3, &(0x7f00000003c0)=0xd9d, 0x12)
setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x8cffffffffffffff)

1.889659627s ago: executing program 4 (id=1374):
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x5885, 0x80, 0x2}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1})
io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000180)=0x800000, 0x4)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.822770567s ago: executing program 1 (id=1375):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0x11, 0x148, 0x0, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r5 = socket(0x6, 0x3, 0x40100)
r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f00000014c0)=""/99, 0x63}, {&(0x7f0000001540)=""/109, 0x6d}], 0x2, 0x2, 0x6) (async)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x0)

1.822496191s ago: executing program 6 (id=1376):
r0 = syz_open_pts(0xffffffffffffffff, 0x22000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[])
ioctl$KDSETLED(r0, 0x4b32, 0x0)
socket$inet(0x2, 0x80000, 0x101)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

1.820290156s ago: executing program 5 (id=1377):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400f010000000adbf217fd2f89ab53a5f4e4962695d450dbac3620c6366dc9e3456029598a3234d340f857ddbe8ee4df45a4f169b29153bab6d4984dc478cb36ec5a3ad5efc1e39ef893f75fd37cd57e40973f31766f7857b7"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.663682969s ago: executing program 4 (id=1378):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20004050)
r3 = socket$tipc(0x1e, 0x5, 0x0)
listen(r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pipe(&(0x7f0000000380))
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4e5d}, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/llc/core\x00')
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x82, 0x82982)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.kill\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab787c179fd1f8a0e91ddaaca7bd6447a4b4e00d9683f6a1af1ea09de2b7fb0a01000000000b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c9b40f45f819e01177d3d458dd4992861ac000000000000000000000000000000002b16", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x8000)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000480)={r4, 0xd45, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x6, 0xb, 0xf, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948226ad54afac11d875397bd9e01177d3dd40600000061ac000000000000000000000000000000ee9a0000004000", "90be8b1c55f96400", [0x800, 0x4b]}})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
memfd_create(&(0x7f0000000040)='%\x00', 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x64100, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

899.50301ms ago: executing program 7 (id=1379):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x30)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080))
mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={0x0, 0x70, 0x20000, {r1}}, 0x20)
setns(r1, 0x40000000)
r2 = syz_io_uring_setup(0x1f90, &(0x7f0000000100)={0x0, 0x8444, 0x80, 0x2, 0x21f}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_setup(0x1297, &(0x7f0000000200)={0x0, 0x331e, 0x20, 0x0, 0x144, 0x0, r2})
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000280)=@ethtool_ts_info})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={<r4=>r3})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x4}}, './file0\x00'})
getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f00000005c0)={@remote, <r6=>0x0}, &(0x7f0000000600)=0x14)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x10}, 0xc)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffc00, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000007c0), 0x40, 0x0)
r11 = openat$incfs(r0, &(0x7f0000000800)='.log\x00', 0x101000, 0x110)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x66}, [@exit, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x12, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000680)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xd, 0x3, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940)=[r8, r9, 0x1, r10, r11, r12, r13], &(0x7f0000000980)=[{0x0, 0x1, 0x4, 0xd}], 0x10, 0x7ff, @void, @value}, 0x94)
r15 = socket$inet(0x2, 0x3, 0x71)
sendmmsg(r15, &(0x7f0000003e00)=[{{&(0x7f0000000a80)=@ax25={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)="349eda4e54c59c", 0x7}], 0x1}}, {{&(0x7f0000000b80)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c00)="6357f44c38af6d008c25cfcd6abaa75f6cca1cbe138e2c669ba3b14fe68df82b91d2f742dcf419cd6392dcf96ec4ac4b977526c4e1e968aefa701d3ab5f79f8da103f2a513e1fd305cf7780325178719d025e0375311c5eb124cd33af4f8f47e914289af93f8c2b7f6db232d634e88ba113c6f8fdad79183c8051197dfc69661fd11720ef11db62677221dadf9d39a505f7480f796776d275d9087dd7e5e96fdb52e43106ad8154ad5aeb4e2597b8187f16379b4cc2cccd40f35da6b76671be8b0f6fab82438017ee2efa2b77eb374b5bf8f6254a1c9bd805e29eeed1c746c0fca0f5e9903b2db", 0xe7}], 0x1, &(0x7f0000000d40)=[{0x88, 0x84, 0x2, "0f272afd4e930558be8de1137934455bcc26a32eb636b5eb342e33aa12d220463cb2c561f23088c45e3faad4d8d830a06114a7c7120920640ba09cd2414c71fe88bd942e50961ea2319ecc83ac2849b6c245efcdde4011b29fd1143a295c3b3d0611f30dfd97b25fb8f497393337da37eb5913dec6abdcf6"}, {0x80, 0x102, 0x5, "5eeb0da0cb6ae5055736f9f2da50970286103bcc2e94f784696ebce963ab540d3ac8387eed31f5a38d082ff08e5ba58493078f900d597fd5fa468a0a78942455cfd320434e90a9055b6e5529b1866f1160d1d872019cc6bdb7b8d338841587c839cf82d358a90d2a653d"}, {0x68, 0x84, 0x7fff, "1cd03b3c11b3c82099c6f93f1820902259965c79c21922d6db50ee3e00e47bc49349fa334c2fafbf0702fb8d01e892dc2801def394a39478ba2fd4a7a950c16f706c2a4951e7928a3160bdf80ab8105f0d7245"}], 0x170}}, {{&(0x7f0000000ec0)=@caif=@dgm={0x25, 0xfffffc00, 0x3}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)="10bd6b36a0327fcb02b877911da973ed73128032cd641d19605303034ff5edc517c0af8278fbc3838bbbf9b59b472743d6c625fd3be57b6478b67c7a7efbdbdc42ff9273a34af0c3cd2198885c13cfcb60dbb105b2cc5d95754bc6c96e3f83025446b7d16742848802d8101884f51e023b4b1b31f3008392d64bba42cafd3000", 0x80}, {&(0x7f0000000fc0)="177269b83898fdc4ce2ac7c4563a3bffeb567c7ba6f3fa6c9fe534e71a2c4c28a2b068de2a6051d2fe7e4c7c8cdd6a6e75ad22719b11a94b", 0x38}, {&(0x7f0000001000)="8e46eeaaeb85c8aa764c96ac4440f5ec7168b03de9f19d44809c0791e8904147356c51f81858c395c6c52e7f3a7c", 0x2e}], 0x3, &(0x7f0000001080)=[{0x90, 0x29, 0x2, "9c2dd096e064cdc760597dfa46e0afc89801f4cf828346243f73a2ec8b67aefeaccb49b163e525b2d405b1bb92c25dc3342cdb33f056016dded2b8a2dd07631f5dfc462799cfe5d80516bb1bdd161a30fb62a5c334bd20cb10ded38556eac2d7074af4c39919e1bf6ed948b81284512cae7efda4a52adc15320d63ad5dd514"}, {0x18, 0x10b, 0x7f, "3e93cced77db"}, {0xa8, 0x113, 0xc0b, "4c2f1c67328b142a6fab4876c723d56aad9c978775cfd6c242bfb1df3031417638a9354c188988c410b133394295f17002451704ba4effdf14b5000abd5e3aac12125464fd132d7087f07976b973719d29aa32f726e2e4075b386322a4b98f5f1ae1febb768d3cab7434337fe7f681fa50ae16f8a792b0023aa9174e987ddec2a44312923441ff32434d263a00a3d51e43d7008bbede55f7"}], 0x150}}, {{&(0x7f0000001200)=@xdp={0x2c, 0xd, r6, 0xa}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="980b20d159120a0ef7b95e6813d1a9568d1101348e7de64023faa8b67d0f5c754fee126cc7530a1fb9937a87dca455a57f6f25b3e8017ea3882299c77ec74039cd7d204da8bddab5f076ede458279452987729e333997405adb6f21517b1f14d1064d8c83289fd1967502ef397d4c9011043bec57e499f5ed153c1ff94a954d844800bf5e0f56621355a26564bf506c21b1a8ca4cb0f11db23240233136d4a40ce7af13e9dcb8c64b64d8cfd85e516bd83a242831034ab73e0028ab14a70a2c0d1a08ae703bb8498a79efe26ddc16abfe92b5e77384bb2f16e2d7ae110efe9e2c54d819f7d81f6fb7fee68897493437c542960f533", 0xf5}, {&(0x7f0000002380)="20df50285b304f17d677ae7725aa77df8ff58e9233d244fb2e7c5af996b048d21575f71101a3a45cd6150fe3a3f6e8bcb780a3397dc9e8b7a775bb7db7e2681dfcbfe1e14f07a4e675d02ebfff660b3aa8c89613f57fd06cd632b19a4e086f5675a1fec201791f0bbe5e58aa8d8c423d51dab7111ca98f620f0815f53a23ca1dcb40b86ed8aeb333029ebaaecb2f0b0855afc60ce0d0e7dd11c570e5c44b96031297ced69b517627c9e0c435fa9b2db397694bdf4733dd0a03d96d8aebf158", 0xbf}, {&(0x7f0000002440)="a91776e06f67afc59bba7697b74d9fabd49de9dbc7da85d3a1301cec6adcd8264a0a2556271208178d487ce548056b3cc1e4c8833bcf7f8f704b1b16f66dca48de8b58a0d67f95c4424f91abbbb84be392000247d4f6721c6b", 0x59}, {&(0x7f00000024c0)="913d12c8a68784b20e96138a1082eb74db5d430a3174d56502c7896160a35891ad9c548bfa2a3d0cec67ccada5775c03e5acadea148f609a13896489c79490254ec019b084069984746977f7030bac5916660fd3091294aacfad1dbf92e72774cd6638f9903420781edf512275dc48444283b046c895132e5332a32851a3b04a", 0x80}, {&(0x7f0000002540)="ef7744d42109b45b321218a29e01867a007c26fd2fa40f9ef3c4f7ce6ea0da6a8a7f63903880ed6fdba1", 0x2a}, {&(0x7f0000002580)="0ac070c24d41ec40e280aa6e8b190415f588a161ab68473db30b5a91c98125830d9f36fe7c95ff2c19422d95bc58578ec06b2a6d70d45213c40a4970cd0e16a87aacba574663716e5d5921d74753833d1f9cbbd594dd71a407a696fd046f67811939db10ee8349ee71f7c2710148ce9e65498bbdec4163be48c8140b00dd244f8c2c8abc156ebd818941902da3d925a7c3058cfd126fc0afb1ea001201ed3e0704ddb5a843b7d9dd7fa3e6d1f099bbf52b2cdc06e40bb63806a6c22ca335dd0f3184e7db320efd092fc6540c9f2cbfb1613e429227179cb715c802d1e85109bc857b5cc0026cc3a5", 0xe8}, {&(0x7f0000002680)="0dcd612012f5762878c37d9f1d3b626ef79d518411acf2b4219b9b0c209b90f685d0dbc3de05d600293126ef9f73e41e651d57490f1e4b38676e8c392e1bc5d0cb778dcdbb87203704d417e77653e223f1cbb6f4854158d4764cb7072f1ec8e3b6fbb8ff6ec70e06636ebc44e0d50d1fbd92beeb3b8abe478f727eb8387f8d79372d205bd15df15f261a14da70017a0e4fba7e2e16a4d0864ca1b5c59f8dc75785561cf31abc577568486d0e94001e05d37c3484e1600ee81ffe15b695a524076cbefd6dd04517a55b30c769e774932df654dc0e96536e360d7bba70b8ff900823cffcc68aac85", 0xe7}, {&(0x7f0000002780)="701bea70fc74", 0x6}], 0x9, &(0x7f0000002880)=[{0x1010, 0x1e, 0x9, "77587c9e2be1c79bf1380f04d7ea1879bb36790449318a57286fca582200dec5c55178e4eb4556bc132a00ecb26b6219200562b61cc9be445543d1160d7008cda21ca3493aafac42ad42e377f8e3e31a2cce420121b32ad2478b85f2d5e7e99a25945fabe354d9ddef881c8ea385570fa1092e38d053a55afc2661807babd796d4e0c32b20f3f8babb6c43da1f43b953a4697093efdcbb1a40f3b32f0fcba8110cef81ce3ef621f4c88aaad63824936cc46ec776aebbccbadc6cee22f64d260071a37d1be37dfc6fbabe3c3c210bdc257e8609202794df79b6dbdf36042f3f227a74e0de2c224fdf78b980149b0901f44b53b736422650c4f1a42b012917d3aaa3f2aaea0c3cc6e2376299428b52b7a5807b3631476f98a17870dbf5d6c784d46fe663560b2e3d40902e158d84c636bcd5f6d65fc01e5454c643f155f8529722ca8244a54844e05afc6a0bd4e8f5c212892797000a3c1c6fe83a22ca84c545042d21446a79e431caef83eef3ea73396dabd18714cd7eefe6fe8a19121373611aeea7e02f61017a95f9700b7fe6980320a6f22bfc938e7f31e8d73114a596d0860f2b8aa898c4f4a39094d5d621db829c974e4756458bae2923e7528e8d33dc93db8c7ccdda1c78119ab27a0ee0890b123bfc62c5aa56fbb5a83a4bb5744e2c37f7db78684742a8b9e9b855ee85bead6e381e45672bced8157f0580d799f225f50f07aa2d9f8a945e58f2c331d4a64c578b030192090b527d77dd86a1af4a502575c592dc8d77360188ed0309ec2ba3926bc255996387e8adf890bf1db054c2fd47817ce640c68f6f3f3740654f7c4fc6c728916efc6acc91093ee45d9e4e6e396b05c6c3e1d2d70da8f73ff9b59d3f003ba6268e9c043c5a39badb10f4c939ffbe23b5725a243b0310fe76cc7e768d8120505dfdf81f46cfd8cb8718f0ee66a53c493c65ac40d02c73cb4e29f888b1fc54512dac5cc3973c2f1687abbe0a75a731f7fa2baa1e699db13f75f514e4437e9d09c44d217f777537fc32f5b9b71fdff2ff2882b8a210b722eb146af92ea2d0a1686f6845035ce9ac9ce765b92ed0ba5dbaed835e4cc2a0a029dcb8fc2d5eea63d67e58e96c4470cb4714b97efba7befa091fe410067a0c3bb31aa7ac8b70ceac7ee5ba706cf0eddd672308382c4d1d074ca081bcb367616779a45a26b1480e50ffb7be0d908a81146a38697d2227f3b971129dabc24d04f4a3816fb056f3eeb5a1370e327973507e83ed16c03a72aee79efc31bdd945cc894f4760d62a850ef594837591ae78024702536f1e1598570365f5a641d87a433ae4a0700eb201efcdd44a46a2c9afb8679696d3ef3e8dde1d99bca6908d8d87bf1d0a711ef8782179b80bc7aa9a056828cb52886975fe31257d39264e9b1571e6427b198ebcd8c6d21efbbc1037d3f98e5300b901c9b4b1fc2c10082d3aa6ed7d827308403bca6709a510320f0c76e587f2b869ecd9c03977e0a45875617ddf224555f542890de2ba5dcec93b0bbc224687698ef6d8c367aa24e72dfd1925daa53355a9c7e69a863b4cb3cc4f94c9e666e7513e4c4ca65815fa2c5749a1efe373d79b0c10c979b2f7bb041ca8fd40c4e17b4430ba007b69b3477dc485697bfc3d828cd94164cddd703c3760b9a5873e5d486cf8b49927cd90717bc33b211eb7398767a3ec6edc5f7f94d3f1110e6a83821e413fbe7deb6cf594972b197ad658afa68f4b712e3fc885432758abcde7c7419a2dff3b57f737442e2b66ece59e15669f97d0fff6f71f81837a3245956bed3d6d5b6c08f462150f0e84a8fce16447c4dd7df942b2c6090329d86cccc476d504052d3213b5e3fc5f03d0bb5179aa2725fde8cc4d2f575e433b2dc5d7edd7b4db553b0fac626900e2e3df876c4bc3de0e5bf262bd99a965cf1a8c2d305a02d2778d980fd798a1f84029cf12181235691042a04d6bab370a2e935315c38d12bb2a88901a07b78874bb169f142223097c78fb22f1bc2acf27e79902ee3076565964608ac4068e81d42911bef4142006eeb701a293aafda777cc48308854c6a2322271f0e4c5136196d192327eb35e125e27038ef295b26ca00e2ca2caa58cca55db9dbd5085e3dc27668275e431f09a711689fa0429c066eccbc7a4bd1465e7e518ba0eb6e6974efb847729bc0bc0d9a6d1dddd6a1e09e42fe959552671ac99ccdd5bb16c37cf91e3a2c0d069fa5a4b36f20e764b2a8cd65cb56acb7a5656e1d2f3778652414c617cdb7d617c61ed5ebdf7576ecacc85283b1ede9fefbf404452310f14f32c714ba691e023b967d6478054eb96d94ba200aa9d515bdf1e8ef7bd5bc8ac8c262ce5aeead3ebc877406d3500807dd3a4159942d18adfdb20de465003e28a19ca80927a4ccec6ff075651fc8cb90a51aba115bd20dddd0e88dd076dd5083fefe05055bc72f99f792a43aa1609be7d01ae3fc65851d5afdb7bf423f4d96c3449f3111b1fe88cf02733208808d76877feb452c04d649ee22f8ab92ef7b98381af9d518ef65e478be0de331c206c7f5dfb24c2f7ce9057683bcb75435bc4131d9ce70976d9c381856ea0480449736da6239a77981627ca187c36e2218cd0200db1a321c31b8be0d1b760f46c48718a488549396be3ff56afa712cdda9b2b52c376bf2e9a384aa3869bd024880930af0857a6f27b4fd0694cef7eddac4c85821da98f2e9e5fad6e0dac58c8b61cba4494f9bc7d8a28e91899c3b54ef5498a3c8f2a350d157c26b1114c26e3bc55abf64547b373e56295d9fcf7590929c88925c9e1ea4c9955e6f0eff620be4617b07655ab9b175b8450c50e62073cfed49e9ad885b836b3826ef1ead1ff85709cf0fc5df073c23903b9ea7a219e8a79ec69612c7d8d3627ea5e2292f64f91a7e6f95c172bad44c95a3e8ed0dfa681653f925d64230f8559c861c3d61c99ded46b5f5305b34f54aa8406664c2afb6b9ddfe630be2c07779efe989daf4a6cd0533716cb243772090e8fe32f9ee61c48d9840380402e1d9734ef5a2913ba67eb73ac7908bde180a35e84919fcaf7476af06664e21b402737d61e0fa0d24649c9149f5afcce4736668b53ca79e963023a9aaa944096d6461ef966a64b94fab1140beca0f9065baf5e49345ac5a0d18d6b36ee64c0ea72b9fe1a7742b89263cda18a7eb320fe1483eaf637a642cf0e85177ba2e05c037cd880c546583c8e85a37471ff551b6d7d9a5179850d4ecc0bb046d6737f7a162771053d85d280ea8177ef8706a673b3d81ea2f447c83b301bd456fe7dee384bf77c03013b53de08fa2350976efd0f5e1362d5ddaa9e109e5210bdd2aed7939cf8c46a739211f68e804b847374475d2e727fc8c4029d7bcc3a039bc80cbb977bc28801ff6cd66f0f7d1939694604607b65f11466c447c264de2fab4638bf96a5a5ebf67d2206170e6b3f4bb463d30b05b6b7bf4efee9281d09286a56e5bf68ae7169f98216349b3049576f820c34dcc6e010b101f9bc55f3a6c88bb0363f6470c68a4a9693d8e06171f51575669d6d189064354deae08fa811417aed0f00d1ca8d422249a4a6b3ee28d63c3436e67556bff963a9af5ef10044d398bdfc3ce446a38bb0ce9f361f9af2ef6d9b8269c5c2c99b5668d25ece77438ba1b8112b70559d24b8f8db37b73251da1a6eaef344e4e60fd787520162400f3721253508d695164915584c9b89e19ed88059c2aa348310bbfd6d2d7d8b182c0bc571ddd674dbbba9a6b2232530721ccbab81c168d2c32807515b3efba64eb6fe7e79fba468838aea4adcc7871edffebc0417a58cc549f4f9967b838853410ad6dc2b9a9392370c2d56bee69c987389da7ca26cb0e4a0207a77886546d3814d9231f3858c740be37844a15c22d00f5b923b38293ffc45f069e8cf2833a2d7a8dbe57bd948b9ad40c83b535d8bb3d6f1da5519480bce1800f4cd76131d8f17f16271e6c8777d4b9cdef3c94ffbf3ecb158df855ef54340f501d5e52865d7f0285e255b004353377cc8b5cdaa8bf13145e4151f6b312984d8881af09f1e07c5b76956bc4e0bf6c0bd67d51de08e90e7e483a8217b5176543068c39b659a679492e4aef4d93dc15cf516f8823fae670d8f1c92cb18508a4cfa5e9eed7a5e564b4673ca2870fab4c93f2b088daf1c03a1710795ed760b027be660c8f47bd72670efbb8eb2ee3928be0e5f6d298c7a16d38c8e4a5173f8c205b6d4f2595c6169d27725a2885d042ca729217ae45fd455509a87fb77f7e607d9fcf7de09e91e87ae3f07d974f8c0e4a131e7e70ad53f420e16f48f484fe54e6f650016393c85a8bcff5c313ad9b1b94081f976e4abae4ed96e60e47d1aa53d5d5b4edfec86a4ef9ab43d0915c4c26609cb409868bd08c648e53dd38cf96d5be49cb1169fae39330272bfd224203cfbb7c7fbd1be96530c2f9cf39d8ca3c361b6ba2010847cd18fd4bb7d41a45d5f9719dfe13663d184355a84ff80315e9e008bf74b7ecbe10e26ab9831d4a4f688a52871b2567a243291a72660e1781cb5de9bd817b35a8f125d13d8932dcbf64da119c5fcb8159004b9c4497015515d23bd38790bcd9aa6189243df52ff2727e8d37eae5c87157e8cd3859e22a663f130c754ae7b7db8e005230c4e1900f61c606992c447d4a69108fd856b431e7f00bd09d99ac7636a9328814ce5f3202adce21c5a9cbcbffdd6d5f931967bff9debbe51dabaf982dc2a7e309c6ba054690a8fb021d6a0f03b0f56b44a2cf0753254c0085772b30fc09c60df6f24cab9add4b21b9badd704732a621025ddc7d91a30ee55fbac9572e5db256afe910eda6604200ffe94ade95f806fbd402d9a02a09aa0a08d1bb4c65ec9a8745db9a95b8074b2d57c53ac192956d23f6b90ad5040d5200c7eb08ba3f5982cf748107c1d2f8412769b02ad3493e91ff9419780b5a81d6ca2d18289971eaff8994ba9f865ee8f1e7fb24f728e0d490e252260721d1778b135cddc4d4a0274d4d81af8684a175ea5f90680b6092dd4e3a79514e40677021fdb50f38d3b4f7db778ed41faf60cb8297c173808f1f0e5aafc0eda2f4493229ee7d32f8e151b5f3fa8705739035da217657bfc34dde1b180cecb2366184c4f1269ad18b4aad95a9605f45105646df239623a3f5abee400df6ef664b41309922221819cc41141f9d21f0f820e01b2cbea2ed7f522791e942afed95f768bf40b417e6b4c749a6f046f0a727d36b0c66301aa6bcdb31d83678ff1599b8c3554eed097712d6a4cc8638ad4b12b62d2707dd1d8d37a824a3948a55b943cad08c1f3e5c930bc1232b16578f4b5bed8251208b48681b2b9ec69a2e5531d4b2929c38c8faa77fdcd3d6f1b6fbabd533416149f1edaa68033c76f34057cfe7bdae166cc3c40d21d3411983f31f77f2941affdc5a338a14caca2cc54377cc25e564b53307562f62305a3980977eedb60da576c7bf61c9630b6a394a733c44692fd9cf48d696c13f67aedbde7d58d1de4245d34acb9a52ef4ed5b3be2581b70386f84652bfc12fd02a3c4520d812b53e984dff0ebaf7dbe3e5bc1e717f204b58a82acec711cc4e9d178fea39cc4c66a79b3e09684bc63540b3cb0a9c6b8b93662f36905876b581d1fdc74bae346ff162455390a070a6c444932de762a73afb179047c035fd3cd8468ec67265fb3a3eda217140de102e45edea571b22122b82150c179c0b3a942a2367818b51217430cc7a6aa9d76620bfe2317f694415adb4a6ba475ec34ac9c8a312329609b2c4e8c7a980a657942d8428052c7fab7"}], 0x1010}}, {{&(0x7f00000038c0)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x3, 0x3}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003940)}], 0x1, &(0x7f00000039c0)=[{0x108, 0x117, 0x2, "5a465c6a2e7c3c8ea8134b05f394aafc0a9006832d17018ed382ad4d53762026bf635bee8edf4e04d697c11eae5ab0246b8fead091ff30a8ee6a7b09b6160b3fcbad0b3cc7615b3fe9a69877dec17599523c63ca385ecc2d288b08085b74d749498232c07bb747ed8eaac2a7e20afb505e8c03642e0c1f4f606d30d3781576222b9436580088dcc15d14105653fc7f450370de99fdfb986d0dd439686fdf5a1e160c06ad3e14f2bd0c80160c7b5d7205f7c08a3a8359fd4b43739455b3042c73abee326725f0f281f1e92775164c6d37170bcd50e387d16a1c27257fa6212e5b61eced83649291eef857452cabe9ed1de47dc8"}, {0xf0, 0x10e, 0x4, "97e6f3980e93e3b1e861038c2956445efc910f701ca4b3b581acb2f09e3751a88b9d21ebe6f0e0db9a93f8ab69b263f0e71d54eb05f5598b826db770ea8e3b0b6c4285b189740e2ec5acea4d1c5f6964f1f8635b3be57ac02c8d5752e7a83b3c30cff7c5a526e7a9284a7baae7c963ca438bca4eff0cb46c682864b2777b3ba586a7bf16c805b744c490dcb2b5796d8322dc2edb61f72ac1060f481a7a34edca0ee0c644199533d30702a2da511d6b46e60acdcec8850b294173c58b91e90373a1bc25a9e462a14e903bff2fa1513ac765254f2ccd3ff3e0e5a49bc4"}, {0xe8, 0x102, 0x8, "74fa81fd34751a4b3d763a638836ac5891f850c63e8a828868550b84196b71f761a1f5bd24101ddae0e8d74f2066270e71ce7e53c87847543a0fb0c17f9296d768f890f45cdaa206e9649532ccbc39336ed2abb844bca54d2d1c08509da1a9b3d36e861df4275cb58de2cd0ed1ef528b5faa8e1834f4e6d88fa63de553aab8a613f7fdbb356b9ded9ccfe62dda87cb2853ffabb71dfd57341ddaeb6a4a2eaaee9a94ba6cfffc73962a9556aa134f009996b6756d7e472dbf2f848f61a7dce69ebe8c1d45f9efb2f212ae40a73203a8e4cd92"}, {0x60, 0x103, 0x7, "008800c2712f02704d38cb0e6ff21ab1ac4991ae6edf9c6d6074ca503d8850e463253f7bbda702b0d4e9739d0d1262f559bdcf7092ef0a08af83ba1dd05979953d5997a6eb0ed3bea18f04c6c7117b"}, {0xa0, 0x10b, 0x1000, "e4154afb0f998e3362c00044b2a0bd6b877ce7d88b60e6baefcafa1084ff21ad0a92f193b8a9bc98006499b09b01d2f8160925351b6a41431750bef84eb57d9125c9c0a7df83363d480b92a45e4a2a368c384d55704f6b5c95a3b0acd3a2ef95276c0718c077ab03ed92a36387b0bb2405f83f555024047a1d0171dce98bafa197d7db5b9cc30fc75b635fba9b"}, {0x48, 0x15, 0x6, "6cd829908df6dd1ae012f74624bc6be97f535cb4f469ebd6e279ec88de51b52f08e3b6638d553e4b9151e7cdf8ec2c6c63b2db8de7458b"}], 0x428}}], 0x5, 0x200000d0)
r16 = msgget$private(0x0, 0x208)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000003f40)={{0x1, 0x1, 0x18, r14, {<r17=>0xee00, 0xee00}}, './file0\x00'})
read$FUSE(r10, &(0x7f0000003f80)={0x2020, 0x0, 0x0, <r18=>0x0}, 0x2020)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000005fc0)={0x0, 0x0, <r19=>0x0}, &(0x7f0000006000)=0xc)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000006040)=<r20=>0x0)
r21 = gettid()
msgctl$IPC_SET(r16, 0x1, &(0x7f0000006080)={{0x2, r17, 0xffffffffffffffff, r18, r19, 0x84, 0xfffc}, 0x0, 0x0, 0x6, 0x0, 0x8, 0x7fffffffffffffff, 0xfffffffffffffff6, 0x5, 0x5, 0x9, r20, r21})
close_range(r1, r4, 0x0)

638.680328ms ago: executing program 6 (id=1380):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$pid(0x2, 0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020f0000120000000000000000000000030005000000000002000000000000000000000000000000080012000000010001000000000000000600000000000000000000000000000000000000000068626e00000000000000000000fc0200000000000000000000000000fce4000600000000000a004e2100000005fc0000000000000000ef0000000000000100000000000000"], 0x92}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
shutdown(r3, 0x0)
splice(r1, 0x0, r6, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="8e090a209bca9175a4be9205266bb2be246695bb968bc67dbbad751ddf92591a12e008d39ed3dfe9c3428d190d8a52ce2174d4775b2662d95f2fa13699f52aa33ed6eb9afa0727a67247d3a7e0707bbd88839c0e968c3e4ec2f9340e85f850c2b49c325948bc24c3d956bce3fdd1339b236f47bbc63cf8cbaa2c9cca463ce239b589", @ANYRES8=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4)

638.246282ms ago: executing program 7 (id=1381):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
socket$kcm(0x10, 0x2, 0x0)
rename(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file3\x00')
sched_setaffinity(0x0, 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x138})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
r4 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000)
sendfile(r6, r5, &(0x7f0000000240)=0x8e, 0x6)
bind$inet6(r5, 0x0, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x3, 0x0)
lsm_get_self_attr(0x1, 0x0, &(0x7f0000001bc0), 0x0)
mkdirat(r6, &(0x7f00000008c0)='./file3\x00', 0x50)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6)

0s ago: executing program 4 (id=1382):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = socket$kcm(0x29, 0x5, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x7c7e6000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x0, @multicast2}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='trans=rdma,port=0x'])
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r5, r6, 0x0)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000240))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffff0100000000000171499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000000380))
connect$ax25(r7, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @default]}, 0x48)
syz_emit_ethernet(0x64, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2e2caa", 0x2e, 0x32, 0x0, @remote, @mcast2, {[], "aacb787ec53a10a108f44ba0d9d51d112448094bf1e348138138f4f06b4a3dd5554812753cbb68bd25568e027dfb"}}}}}, 0x0)

kernel console output (not intermixed with test programs):

 Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  275.339634][ T9476] Call Trace:
[  275.339638][ T9476]  <TASK>
[  275.339642][ T9476]  dump_stack_lvl+0x16c/0x1f0
[  275.339661][ T9476]  gup_vma_lookup+0x1d2/0x220
[  275.339679][ T9476]  __get_user_pages+0x236/0x36f0
[  275.339690][ T9476]  ? find_held_lock+0x2d/0x110
[  275.339705][ T9476]  ? mtree_load+0x30a/0xa40
[  275.339716][ T9476]  ? __pfx_lock_release+0x10/0x10
[  275.339731][ T9476]  ? __pfx___get_user_pages+0x10/0x10
[  275.339752][ T9476]  get_user_pages_remote+0x25e/0xb30
[  275.339766][ T9476]  ? __pfx_get_user_pages_remote+0x10/0x10
[  275.339783][ T9476]  __access_remote_vm+0x235/0x7a0
[  275.339799][ T9476]  ? __pfx___access_remote_vm+0x10/0x10
[  275.339813][ T9476]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  275.339826][ T9476]  proc_pid_cmdline_read+0x4f5/0x900
[  275.339842][ T9476]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  275.339858][ T9476]  ? rw_verify_area+0xcf/0x680
[  275.339873][ T9476]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  275.339887][ T9476]  vfs_readv+0x6c2/0x8a0
[  275.339900][ T9476]  ? __pfx___lock_acquire+0x10/0x10
[  275.339918][ T9476]  ? __pfx_vfs_readv+0x10/0x10
[  275.339935][ T9476]  ? __fget_files+0x1fc/0x3a0
[  275.339944][ T9476]  ? __pfx_lock_release+0x10/0x10
[  275.339964][ T9476]  ? __fget_files+0x206/0x3a0
[  275.339976][ T9476]  ? do_preadv+0x1b1/0x270
[  275.339989][ T9476]  do_preadv+0x1b1/0x270
[  275.340004][ T9476]  ? __pfx_do_preadv+0x10/0x10
[  275.340021][ T9476]  do_syscall_64+0xcd/0x250
[  275.340035][ T9476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.340050][ T9476] RIP: 0033:0x7faf4438cde9
[  275.340059][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.340068][ T9476] RSP: 002b:00007faf452cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  275.340079][ T9476] RAX: ffffffffffffffda RBX: 00007faf445a5fa0 RCX: 00007faf4438cde9
[  275.340085][ T9476] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000006
[  275.340091][ T9476] RBP: 00007faf4440e2a0 R08: 00000000fffffff9 R09: 0000000000000000
[  275.340097][ T9476] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  275.340102][ T9476] R13: 0000000000000000 R14: 00007faf445a5fa0 R15: 00007fffefb293c8
[  275.340114][ T9476]  </TASK>
[  276.466488][   T29] audit: type=1400 audit(1739963347.102:768): avc:  denied  { read } for  pid=9493 comm="syz.5.832" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  276.542449][ T9500] syz.7.834: attempt to access beyond end of device
[  276.542449][ T9500] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0
[  276.583115][ T9500] XFS (nbd7): SB validate failed with error -5.
[  276.755303][ T5831] Bluetooth: hci3: command 0x1003 tx timeout
[  276.755554][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  277.069333][ T9509] syz.5.835: attempt to access beyond end of device
[  277.069333][ T9509] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  277.192105][ T9509] XFS (nbd5): SB validate failed with error -5.
[  278.115443][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.837'.
[  278.124299][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.837'.
[  278.136256][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  278.136288][   T29] audit: type=1400 audit(1739963348.762:773): avc:  denied  { write } for  pid=9526 comm="syz.6.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  278.844381][   T29] audit: type=1400 audit(1739963349.452:774): avc:  denied  { mounton } for  pid=9526 comm="syz.6.839" path="/proc/273/task" dev="proc" ino=21322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  278.953698][   T29] audit: type=1400 audit(1739963349.582:775): avc:  denied  { mounton } for  pid=9533 comm="syz.7.840" path="/101/file0" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  278.967403][ T9537] ISOFS: Unable to identify CD-ROM format.
[  279.339933][   T29] audit: type=1400 audit(1739963349.872:776): avc:  denied  { read } for  pid=9526 comm="syz.6.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  280.161301][   T29] audit: type=1400 audit(1739963350.802:777): avc:  denied  { mounton } for  pid=9544 comm="syz.7.843" path="/102/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  280.358721][ T5899] usb 5-1: USB disconnect, device number 40
[  280.440656][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  280.515432][   T29] audit: type=1400 audit(1739963351.152:778): avc:  denied  { mount } for  pid=9557 comm="syz.4.847" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  280.609593][    T9] usb 7-1: Using ep0 maxpacket: 16
[  280.615952][    T9] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  280.624481][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.651187][    T9] usb 7-1: config 0 has no interface number 0
[  280.673214][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  280.683315][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.709683][    T9] usb 7-1: Product: syz
[  280.745033][   T29] audit: type=1400 audit(1739963351.382:779): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  280.749934][    T9] usb 7-1: Manufacturer: syz
[  280.795816][    T9] usb 7-1: SerialNumber: syz
[  280.818133][    T9] usb 7-1: config 0 descriptor??
[  281.022315][ T9554] evm: overlay not supported
[  281.050237][   T29] audit: type=1400 audit(1739963351.652:780): avc:  denied  { unlink } for  pid=9553 comm="syz.7.846" name="#11" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  281.072594][ T5899] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  281.092689][    T9] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  281.111619][    T9] usb 7-1: No valid video chain found.
[  281.140311][   T29] audit: type=1400 audit(1739963351.652:781): avc:  denied  { mount } for  pid=9553 comm="syz.7.846" name="/" dev="overlay" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  281.163387][    T9] usb 7-1: USB disconnect, device number 22
[  281.177052][   T29] audit: type=1400 audit(1739963351.652:782): avc:  denied  { read } for  pid=9553 comm="syz.7.846" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  281.280231][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  281.286941][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  281.299434][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  281.312782][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  281.322631][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.332545][ T5899] usb 5-1: Product: syz
[  281.339304][ T5899] usb 5-1: Manufacturer: syz
[  281.353845][ T5899] usb 5-1: SerialNumber: syz
[  281.381186][ T5899] usb 5-1: config 0 descriptor??
[  281.399725][ T5899] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  281.408935][ T5899] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  282.102637][ T9570] netlink: 92 bytes leftover after parsing attributes in process `syz.6.850'.
[  282.204786][ T5899] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  282.332777][ T5899] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  282.361326][ T5899] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  282.378140][ T5899] em28xx 5-1:0.0: No AC97 audio processor
[  282.395980][ T5899] usb 5-1: USB disconnect, device number 41
[  282.404325][ T5899] em28xx 5-1:0.0: Disconnecting em28xx
[  282.421576][ T5899] em28xx 5-1:0.0: Freeing device
[  282.865281][ T9587] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  283.281293][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  283.281310][   T29] audit: type=1400 audit(1739963353.922:794): avc:  denied  { create } for  pid=9594 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  283.660956][ T5899] IPVS: starting estimator thread 0...
[  283.672654][   T29] audit: type=1400 audit(1739963353.962:795): avc:  denied  { create } for  pid=9596 comm="syz.5.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  283.739628][   T29] audit: type=1400 audit(1739963354.352:796): avc:  denied  { connect } for  pid=9594 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  283.779808][ T9603] IPVS: using max 43 ests per chain, 103200 per kthread
[  283.782578][   T29] audit: type=1400 audit(1739963354.412:797): avc:  denied  { read } for  pid=9594 comm="syz.4.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  283.864803][   T29] audit: type=1400 audit(1739963354.502:798): avc:  denied  { write } for  pid=9594 comm="syz.4.858" path="socket:[21435]" dev="sockfs" ino=21435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  283.959654][ T5899] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  284.072221][   T29] audit: type=1400 audit(1739963354.712:799): avc:  denied  { bind } for  pid=9608 comm="syz.6.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  284.132366][ T5899] usb 8-1: Using ep0 maxpacket: 8
[  284.152048][ T5899] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[  284.169738][   T29] audit: type=1400 audit(1739963354.712:800): avc:  denied  { setopt } for  pid=9610 comm="syz.5.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  284.193050][ T5899] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  284.429018][ T5899] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  284.555598][   T29] audit: type=1400 audit(1739963354.752:801): avc:  denied  { accept } for  pid=9608 comm="syz.6.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  284.599642][ T5899] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  284.618504][ T5899] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.632485][ T9618] netlink: 37 bytes leftover after parsing attributes in process `syz.6.866'.
[  284.644472][ T5899] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  284.667649][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.893845][ T5899] usb 8-1: GET_CAPABILITIES returned 0
[  284.899994][ T5899] usbtmc 8-1:16.0: can't read capabilities
[  285.027067][ T9631] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  285.035386][ T5870] IPVS: starting estimator thread 0...
[  285.059906][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  285.088423][ T9631] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.104210][ T5899] usb 8-1: USB disconnect, device number 23
[  285.110265][   T29] audit: type=1400 audit(1739963355.742:802): avc:  denied  { write } for  pid=9601 comm="syz.7.862" name="usbtmc0" dev="devtmpfs" ino=3091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  285.139666][ T9633] IPVS: using max 42 ests per chain, 100800 per kthread
[  285.220900][    T9] usb 7-1: Using ep0 maxpacket: 16
[  285.236955][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  285.258246][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  285.283092][    T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  285.295774][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.306280][    T9] usb 7-1: Product: syz
[  285.439757][    T9] usb 7-1: Manufacturer: syz
[  285.483264][    T9] usb 7-1: SerialNumber: syz
[  285.689807][    T9] usb 7-1: config 0 descriptor??
[  285.743549][    T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  285.769201][    T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  285.896866][ T9644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.872'.
[  285.907852][ T9644] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  286.060962][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.875'.
[  286.328213][    T9] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  286.361232][   T29] audit: type=1400 audit(1739963356.982:803): avc:  denied  { setopt } for  pid=9652 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  286.428571][    T9] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  286.556652][    T9] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  286.644646][ T5870] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  286.663733][    T9] em28xx 7-1:0.0: No AC97 audio processor
[  286.695710][    T9] usb 7-1: USB disconnect, device number 23
[  286.713062][    T9] em28xx 7-1:0.0: Disconnecting em28xx
[  286.758293][    T9] em28xx 7-1:0.0: Freeing device
[  286.824541][ T9661] netlink: 'syz.5.879': attribute type 2 has an invalid length.
[  286.875086][ T5870] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.910080][ T5870] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.941006][ T5870] usb 8-1: New USB device found, idVendor=18d1, idProduct=5061, bcdDevice= 0.00
[  287.065965][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.089426][ T5870] usb 8-1: config 0 descriptor??
[  287.449810][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  287.793067][    T9] usb 5-1: Using ep0 maxpacket: 16
[  287.799174][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.811683][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.825858][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.838552][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  287.865897][ T5870] hid-generic 0003:18D1:5061.000A: unknown main item tag 0x0
[  287.867018][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.953027][    T9] usb 5-1: config 0 descriptor??
[  287.989967][ T5870] hid-generic 0003:18D1:5061.000A: unknown main item tag 0x0
[  288.114172][ T5870] hid-generic 0003:18D1:5061.000A: unknown main item tag 0x0
[  288.123886][ T5870] hid-generic 0003:18D1:5061.000A: unknown main item tag 0x0
[  288.138474][ T5870] hid-generic 0003:18D1:5061.000A: unknown main item tag 0x0
[  288.152916][ T5870] hid-generic 0003:18D1:5061.000A: hidraw0: USB HID v0.05 Device [HID 18d1:5061] on usb-dummy_hcd.7-1/input0
[  288.469830][  T973] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  288.703144][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  288.703196][   T29] audit: type=1400 audit(1739963359.342:814): avc:  denied  { getopt } for  pid=9671 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  288.769693][  T973] usb 7-1: Using ep0 maxpacket: 16
[  288.988078][ T5899] usb 8-1: USB disconnect, device number 24
[  289.029227][    T9] microsoft 0003:045E:009D.000B: hidraw0: USB HID v2.00 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0
[  289.047549][  T973] usb 7-1: config 0 has no interfaces?
[  289.058562][  T973] usb 7-1: New USB device found, idVendor=05ac, idProduct=1202, bcdDevice=12.1e
[  289.073244][    T9] microsoft 0003:045E:009D.000B: no inputs found
[  289.112829][  T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.133760][    T9] microsoft 0003:045E:009D.000B: could not initialize ff, continuing anyway
[  289.147191][  T973] usb 7-1: Product: syz
[  289.164290][  T973] usb 7-1: Manufacturer: syz
[  289.179117][  T973] usb 7-1: SerialNumber: syz
[  289.189265][  T973] apple-mfi-fastcharge 7-1: config 0 descriptor??
[  289.203732][   T29] audit: type=1800 audit(1739963359.842:815): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.884" name="/newroot/168/bus" dev="tmpfs" ino=922 res=0 errno=0
[  289.270545][ T5870] usb 5-1: USB disconnect, device number 42
[  289.319602][   T29] audit: type=1400 audit(1739963359.842:816): avc:  denied  { bind } for  pid=9701 comm="syz.7.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  289.469725][   T29] audit: type=1400 audit(1739963359.842:817): avc:  denied  { name_bind } for  pid=9701 comm="syz.7.890" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  289.490953][   T29] audit: type=1400 audit(1739963359.842:818): avc:  denied  { node_bind } for  pid=9701 comm="syz.7.890" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  289.512375][   T29] audit: type=1400 audit(1739963359.882:819): avc:  denied  { listen } for  pid=9701 comm="syz.7.890" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  289.539668][   T29] audit: type=1400 audit(1739963359.882:820): avc:  denied  { connect } for  pid=9701 comm="syz.7.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  290.051634][   T29] audit: type=1400 audit(1739963359.882:821): avc:  denied  { name_connect } for  pid=9701 comm="syz.7.890" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  290.081310][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.107029][   T11] Bluetooth: hci3: Frame reassembly failed (-84)
[  290.128013][   T29] audit: type=1400 audit(1739963359.882:822): avc:  denied  { ioctl } for  pid=9701 comm="syz.7.890" path="socket:[22705]" dev="sockfs" ino=22705 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  290.140885][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.165882][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.174417][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.184087][ T5870] apple-mfi-fastcharge 7-1: USB disconnect, device number 24
[  290.266345][   T29] audit: type=1400 audit(1739963359.882:823): avc:  denied  { write } for  pid=9701 comm="syz.7.890" laddr=172.20.20.170 lport=35840 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  290.355864][ T9718] netlink: 60 bytes leftover after parsing attributes in process `syz.1.895'.
[  290.369146][ T9718] netlink: 60 bytes leftover after parsing attributes in process `syz.1.895'.
[  290.679685][ T5870] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  290.874076][ T5870] usb 5-1: Using ep0 maxpacket: 8
[  290.980064][ T5870] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  290.994166][ T5870] usb 5-1: config 0 has no interface number 0
[  291.023076][ T5870] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  291.049442][ T5870] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  291.207907][ T5870] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  291.241093][ T5870] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  291.259405][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  291.289548][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.316459][ T5870] usb 5-1: Product: syz
[  291.324328][ T5870] usb 5-1: Manufacturer: syz
[  291.332895][ T5870] usb 5-1: SerialNumber: syz
[  291.342793][ T9729] netlink: 'syz.5.898': attribute type 5 has an invalid length.
[  291.364104][ T5870] usb 5-1: config 0 descriptor??
[  291.374287][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.898'.
[  291.557755][ T9733] syz.5.900: attempt to access beyond end of device
[  291.557755][ T9733] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  291.577983][ T9733] XFS (nbd5): SB validate failed with error -5.
[  291.653861][ T5870] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  292.119991][ T5831] Bluetooth: hci3: command 0x1003 tx timeout
[  292.209373][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  292.579641][   T44] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  292.746812][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  292.786010][   T44] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  292.818224][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  292.849989][   T44] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  292.973758][   T44] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  293.021962][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.043906][   T44] usb 7-1: Product: syz
[  293.053655][   T44] usb 7-1: Manufacturer: syz
[  293.068170][   T44] usb 7-1: SerialNumber: syz
[  293.083700][   T44] usb 7-1: config 0 descriptor??
[  293.100308][   T44] ums-isd200 7-1:0.0: USB Mass Storage device detected
[  293.351749][   T44] ums-isd200 7-1:0.0: probe with driver ums-isd200 failed with error -22
[  293.446648][  T973] usb 5-1: USB disconnect, device number 43
[  293.506566][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.533067][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.596443][    T9] usb 7-1: USB disconnect, device number 25
[  293.788651][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  293.788668][   T29] audit: type=1400 audit(1739963364.422:829): avc:  denied  { read append } for  pid=9765 comm="syz.4.906" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  293.825856][ T9774] pimreg: entered allmulticast mode
[  293.863396][   T29] audit: type=1400 audit(1739963364.422:830): avc:  denied  { open } for  pid=9765 comm="syz.4.906" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  293.897863][ T9777] pimreg: left allmulticast mode
[  293.945956][   T29] audit: type=1400 audit(1739963364.472:831): avc:  denied  { shutdown } for  pid=9765 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  294.005281][   T29] audit: type=1400 audit(1739963364.472:832): avc:  denied  { read } for  pid=9765 comm="syz.4.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  294.176491][   T29] audit: type=1400 audit(1739963364.812:833): avc:  denied  { write } for  pid=9781 comm="syz.1.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  294.450064][ T7189] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  294.737755][   T29] audit: type=1400 audit(1739963365.332:834): avc:  denied  { mount } for  pid=9786 comm="syz.7.913" name="/" dev="gadgetfs" ino=6653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  294.929715][ T9798] netlink: 'syz.4.916': attribute type 1 has an invalid length.
[  294.953917][ T9798] 8021q: adding VLAN 0 to HW filter on device bond1
[  294.962861][   T29] audit: type=1400 audit(1739963365.602:835): avc:  denied  { read write } for  pid=9795 comm="syz.5.915" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  295.002781][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv1
[  295.023111][ T9798] bond1: (slave batadv1): making interface the new active one
[  295.030972][ T7189] usb 7-1: Using ep0 maxpacket: 16
[  295.045280][   T29] audit: type=1400 audit(1739963365.602:836): avc:  denied  { open } for  pid=9795 comm="syz.5.915" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  295.081755][ T7189] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  295.091529][ T9798] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  295.103222][ T7189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.115647][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'.
[  295.185540][ T7189] usb 7-1: config 0 has no interface number 0
[  295.195351][ T9802] vlan2: entered promiscuous mode
[  295.207803][ T7189] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  295.217018][ T7189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.221214][ T9802] bond1: entered promiscuous mode
[  295.226462][ T7189] usb 7-1: Product: syz
[  295.234286][ T7189] usb 7-1: Manufacturer: syz
[  295.238894][ T7189] usb 7-1: SerialNumber: syz
[  295.248017][ T9802] batadv1: entered promiscuous mode
[  295.275811][ T7189] usb 7-1: config 0 descriptor??
[  295.306087][   T29] audit: type=1400 audit(1739963365.942:837): avc:  denied  { read } for  pid=9803 comm="syz.7.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  295.337269][ T9807] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  295.487436][ T7189] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  295.497194][ T7189] usb 7-1: No valid video chain found.
[  295.516231][ T7189] usb 7-1: USB disconnect, device number 26
[  296.088385][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.922'.
[  296.413217][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.923'.
[  296.508085][ T9821] fuse: Unknown parameter ''
[  296.689023][ T9824] vlan0: entered promiscuous mode
[  296.761029][ T9824] team0: Port device vlan0 added
[  297.066563][ T9833] loop6: detected capacity change from 0 to 64
[  297.069589][   T29] audit: type=1400 audit(1739963367.687:838): avc:  denied  { append } for  pid=9831 comm="syz.6.928" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  297.096572][    C1] vkms_vblank_simulate: vblank timer overrun
[  297.203235][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.212544][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.269924][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.279142][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.294767][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.303947][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.313703][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.322857][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.340327][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.349552][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.364704][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80000 phys_seg 5 prio class 0
[  297.374235][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.423920][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.433148][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.443629][    C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.452813][    C0] Buffer I/O error on dev loop6, logical block 1, async page read
[  297.459758][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.469818][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  297.478456][    C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  297.487636][ T9833] ldm_validate_partition_table(): Disk read failed.
[  297.487652][    C1] Buffer I/O error on dev loop6, logical block 1, async page read
[  297.518659][ T9833] Dev loop6: unable to read RDB block 0
[  297.537733][ T9833]  loop6: unable to read partition table
[  297.549844][ T9833] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  298.201674][    T8] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  298.245725][ T9804] block nbd7: shutting down sockets
[  298.308754][ T9854] ieee802154 phy0 wpan0: encryption failed: -90
[  298.405378][    T8] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  298.416283][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.430212][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  298.452483][    T8] usb 5-1: Product: syz
[  298.516373][    T8] usb 5-1: Manufacturer: syz
[  298.524774][    T8] usb 5-1: SerialNumber: syz
[  298.620854][    T8] usb 5-1: config 0 descriptor??
[  298.662085][  T973] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  298.762117][    T9] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  298.780612][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.806040][    T9] usb 6-1: config 0 has no interface number 0
[  298.823642][    T9] usb 6-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  298.875940][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'.
[  298.881164][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  298.910305][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.918366][    T9] usb 6-1: Product: syz
[  298.923263][    T9] usb 6-1: Manufacturer: syz
[  298.929983][    T9] usb 6-1: SerialNumber: syz
[  298.940588][  T973] usb 7-1: Using ep0 maxpacket: 16
[  298.952389][  T973] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  298.964746][    T9] usb 6-1: config 0 descriptor??
[  298.978912][  T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  298.992384][    T9] usbtest 6-1:0.85: couldn't get endpoints, -22
[  298.995377][ T7189] usb 5-1: USB disconnect, device number 44
[  298.998675][    T9] usbtest 6-1:0.85: probe with driver usbtest failed with error -22
[  299.025475][  T973] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  299.056145][  T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.079172][  T973] usb 7-1: Product: syz
[  299.085413][  T973] usb 7-1: Manufacturer: syz
[  299.103083][  T973] usb 7-1: SerialNumber: syz
[  299.128168][  T973] usb 7-1: config 0 descriptor??
[  299.132872][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  299.132889][   T29] audit: type=1400 audit(1739963369.767:845): avc:  denied  { connect } for  pid=9871 comm="syz.7.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  299.166284][  T973] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  299.211718][ T9851] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  299.224704][  T973] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  299.799311][  T973] em28xx 7-1:0.0: unknown em28xx chip ID (234)
[  300.006243][  T973] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  300.120310][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'.
[  300.159687][    T8] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  300.269685][   T44] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  300.309656][    T8] usb 5-1: Using ep0 maxpacket: 8
[  300.316171][    T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  300.325733][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.335488][    T8] usb 5-1: config 0 descriptor??
[  300.423439][  T973] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  300.434679][  T973] em28xx 7-1:0.0: No AC97 audio processor
[  300.439796][   T44] usb 8-1: Using ep0 maxpacket: 16
[  300.453811][  T973] usb 7-1: USB disconnect, device number 27
[  300.460703][  T973] em28xx 7-1:0.0: Disconnecting em28xx
[  300.463176][   T44] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  300.469221][  T973] em28xx 7-1:0.0: Freeing device
[  300.481746][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.494664][   T44] usb 8-1: Product: syz
[  300.498863][   T44] usb 8-1: Manufacturer: syz
[  300.505542][   T44] usb 8-1: SerialNumber: syz
[  300.519957][   T44] r8152-cfgselector 8-1: Unknown version 0x0000
[  300.526384][   T44] r8152-cfgselector 8-1: config 0 descriptor??
[  300.545624][    T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  300.960661][    T9] r8152-cfgselector 8-1: USB disconnect, device number 25
[  301.012581][   T29] audit: type=1400 audit(1739963371.657:846): avc:  denied  { getopt } for  pid=9901 comm="syz.6.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  301.039254][ T9902] netlink: 72 bytes leftover after parsing attributes in process `syz.6.951'.
[  301.052653][ T9902] netlink: 'syz.6.951': attribute type 1 has an invalid length.
[  301.123347][   T44] usb 6-1: USB disconnect, device number 21
[  302.282715][    T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  302.283065][   T29] audit: type=1400 audit(1739963372.917:847): avc:  denied  { connect } for  pid=9912 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  302.297195][    T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  302.476787][    T8] asix 5-1:0.0: probe with driver asix failed with error -71
[  302.489705][   T29] audit: type=1400 audit(1739963373.127:848): avc:  denied  { bind } for  pid=9915 comm="syz.7.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.575464][    T8] usb 5-1: USB disconnect, device number 45
[  303.780488][   T29] audit: type=1400 audit(1739963374.417:849): avc:  denied  { append } for  pid=9923 comm="syz.4.958" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  303.822626][ T9928] netlink: 'syz.6.960': attribute type 1 has an invalid length.
[  303.858185][   T29] audit: type=1400 audit(1739963374.497:850): avc:  denied  { ioctl } for  pid=9920 comm="syz.5.957" path="socket:[22360]" dev="sockfs" ino=22360 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  303.882692][    C0] vkms_vblank_simulate: vblank timer overrun
[  303.890584][ T9925] vxcan1: tx drop: invalid sa for name 0x0000000000000002
[  303.939167][   T29] audit: type=1400 audit(1739963374.527:851): avc:  denied  { write } for  pid=9920 comm="syz.5.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  304.182503][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  304.650138][   T29] audit: type=1400 audit(1739963374.667:852): avc:  denied  { ioctl } for  pid=9923 comm="syz.4.958" path="socket:[23194]" dev="sockfs" ino=23194 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  304.747082][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.6.962'.
[  305.160776][ T9952] openvswitch: netlink: EtherType 50a is less than min 600
[  305.409706][  T970] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  305.504316][   T29] audit: type=1400 audit(1739963376.147:853): avc:  denied  { map } for  pid=9953 comm="syz.6.967" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  305.509682][    T8] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  305.538448][   T29] audit: type=1400 audit(1739963376.147:854): avc:  denied  { execute } for  pid=9953 comm="syz.6.967" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  305.709996][    T8] usb 8-1: Using ep0 maxpacket: 8
[  305.721716][  T970] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  305.729906][  T970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.731456][    T8] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  305.740268][  T970] usb 6-1: config 0 has no interface number 0
[  305.755765][  T970] usb 6-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  305.791488][  T970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  305.838676][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.908354][  T970] usb 6-1: Product: syz
[  305.931340][   T29] audit: type=1400 audit(1739963376.567:855): avc:  denied  { listen } for  pid=9966 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  305.960438][  T970] usb 6-1: Manufacturer: syz
[  305.965778][  T970] usb 6-1: SerialNumber: syz
[  305.988181][   T29] audit: type=1400 audit(1739963376.577:856): avc:  denied  { ioctl } for  pid=9966 comm="syz.6.972" path="socket:[22401]" dev="sockfs" ino=22401 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  306.043514][  T970] usb 6-1: config 0 descriptor??
[  306.105996][  T970] usbtest 6-1:0.85: couldn't get endpoints, -22
[  306.142043][  T970] usbtest 6-1:0.85: probe with driver usbtest failed with error -22
[  306.164674][   T29] audit: type=1400 audit(1739963376.777:857): avc:  denied  { setopt } for  pid=9966 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  306.181003][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.187751][ T9969] tmpfs: Bad value for 'uid'
[  306.203225][    T8] usb 8-1: config 0 descriptor??
[  306.214107][ T9969] tmpfs: Bad value for 'uid'
[  306.219987][ T9967] bridge0: port 3(netdevsim2) entered blocking state
[  306.226752][ T9967] bridge0: port 3(netdevsim2) entered disabled state
[  306.233658][ T9967] netdevsim netdevsim6 netdevsim2: entered allmulticast mode
[  306.241975][ T9967] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[  306.251248][ T9967] bridge0: port 3(netdevsim2) entered blocking state
[  306.258043][ T9967] bridge0: port 3(netdevsim2) entered forwarding state
[  306.288501][ T9949] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  306.416167][    T8] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  306.436618][   T29] audit: type=1400 audit(1739963377.077:858): avc:  denied  { create } for  pid=9970 comm="syz.6.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  306.563102][ T9975] all (unregistering): Released all slaves
[  306.734843][ T9971] netlink: 1268 bytes leftover after parsing attributes in process `syz.6.973'.
[  306.769744][   T29] audit: type=1400 audit(1739963377.407:859): avc:  denied  { connect } for  pid=9970 comm="syz.6.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  306.799614][   T29] audit: type=1400 audit(1739963377.437:860): avc:  denied  { accept } for  pid=9970 comm="syz.6.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  306.854280][ T9982] FAULT_INJECTION: forcing a failure.
[  306.854280][ T9982] name failslab, interval 1, probability 0, space 0, times 0
[  306.868426][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: syz.4.977 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  306.868450][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  306.868460][ T9982] Call Trace:
[  306.868465][ T9982]  <TASK>
[  306.868472][ T9982]  dump_stack_lvl+0x16c/0x1f0
[  306.868497][ T9982]  should_fail_ex+0x50a/0x650
[  306.868522][ T9982]  ? fs_reclaim_acquire+0xae/0x150
[  306.868546][ T9982]  ? tomoyo_realpath_from_path+0xb9/0x720
[  306.868569][ T9982]  should_failslab+0xc2/0x120
[  306.868588][ T9982]  __kmalloc_noprof+0xcb/0x510
[  306.868605][ T9982]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  306.868632][ T9982]  tomoyo_realpath_from_path+0xb9/0x720
[  306.868655][ T9982]  ? tomoyo_path_number_perm+0x235/0x590
[  306.868675][ T9982]  ? tomoyo_path_number_perm+0x235/0x590
[  306.868696][ T9982]  tomoyo_path_number_perm+0x248/0x590
[  306.868715][ T9982]  ? tomoyo_path_number_perm+0x235/0x590
[  306.868737][ T9982]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  306.868780][ T9982]  ? __pfx_lock_release+0x10/0x10
[  306.868801][ T9982]  ? trace_lock_acquire+0x14e/0x1f0
[  306.868822][ T9982]  ? lock_acquire+0x2f/0xb0
[  306.868841][ T9982]  ? __fget_files+0x40/0x3a0
[  306.868860][ T9982]  ? __fget_files+0x206/0x3a0
[  306.868879][ T9982]  security_file_ioctl+0x9b/0x240
[  306.868909][ T9982]  __x64_sys_ioctl+0xb7/0x200
[  306.868934][ T9982]  do_syscall_64+0xcd/0x250
[  306.868955][ T9982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.868977][ T9982] RIP: 0033:0x7fa7fdd8cde9
[  306.868991][ T9982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.869007][ T9982] RSP: 002b:00007fa7febd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  306.869022][ T9982] RAX: ffffffffffffffda RBX: 00007fa7fdfa5fa0 RCX: 00007fa7fdd8cde9
[  306.869032][ T9982] RDX: 0000400000000040 RSI: 0000000000004601 RDI: 0000000000000003
[  306.869042][ T9982] RBP: 00007fa7febd4090 R08: 0000000000000000 R09: 0000000000000000
[  306.869051][ T9982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.869059][ T9982] R13: 0000000000000000 R14: 00007fa7fdfa5fa0 R15: 00007ffe491b21b8
[  306.869082][ T9982]  </TASK>
[  306.869088][ T9982] ERROR: Out of memory at tomoyo_realpath_from_path.
[  307.059796][    T9] usb 7-1: new low-speed USB device number 28 using dummy_hcd
[  307.257588][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  307.409990][    T9] usb 7-1: new low-speed USB device number 29 using dummy_hcd
[  307.419353][   T29] audit: type=1326 audit(1739963378.057:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.1.980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d82d8cde9 code=0x0
[  307.569587][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  307.577489][    T9] usb usb7-port1: attempt power cycle
[  307.634563][    T8] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  307.649431][    T8] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  307.676132][    T8] asix 8-1:0.0: probe with driver asix failed with error -71
[  307.702991][    T8] usb 8-1: USB disconnect, device number 26
[  307.934849][ T9993] ubi31: attaching mtd0
[  307.940567][    T9] usb 7-1: new low-speed USB device number 30 using dummy_hcd
[  307.960480][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  308.109904][   T25] usb 6-1: USB disconnect, device number 22
[  308.131139][    T9] usb 7-1: new low-speed USB device number 31 using dummy_hcd
[  308.210428][    T9] usb 7-1: Invalid ep0 maxpacket: 32
[  308.233684][    T9] usb usb7-port1: unable to enumerate USB device
[  308.334493][T10000] netlink: 44 bytes leftover after parsing attributes in process `syz.7.983'.
[  308.357390][ T7189] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  308.389409][T10000] netlink: 43 bytes leftover after parsing attributes in process `syz.7.983'.
[  308.405152][T10000] netlink: 'syz.7.983': attribute type 5 has an invalid length.
[  308.414991][T10000] netlink: 43 bytes leftover after parsing attributes in process `syz.7.983'.
[  308.610908][ T7189] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.622237][ T7189] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  308.632372][ T7189] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.641557][ T7189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.347970][ T5829] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  309.358149][ T5829] Bluetooth: hci2: Injecting HCI hardware error event
[  309.367503][ T5831] Bluetooth: hci2: hardware error 0x00
[  309.410140][ T9996] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  309.421567][ T7189] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  309.816868][ T7189] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  310.056586][ T5829] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  310.649682][ T7189] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  310.733298][ T7189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.755647][ T7189] usb 6-1: config 0 descriptor??
[  310.769449][ T7189] gspca_main: spca508-2.14.0 probing 8086:0110
[  310.868112][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.990'.
[  310.876011][    T9] usb 5-1: USB disconnect, device number 46
[  310.926923][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  310.926957][   T29] audit: type=1400 audit(1739963381.567:863): avc:  denied  { bind } for  pid=10022 comm="syz.7.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  311.099607][  T970] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  311.173098][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.185201][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.204109][ T7189] gspca_spca508: reg_read err -71
[  311.209874][ T7189] gspca_spca508: reg_read err -71
[  311.218661][ T7189] gspca_spca508: reg_read err -71
[  311.237795][ T7189] gspca_spca508: reg_read err -71
[  311.243598][ T7189] gspca_spca508: reg write: error -71
[  311.249203][ T7189] spca508 6-1:0.0: probe with driver spca508 failed with error -71
[  311.269695][  T970] usb 7-1: Using ep0 maxpacket: 32
[  311.277238][ T7189] usb 6-1: USB disconnect, device number 23
[  311.286469][  T970] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  311.301647][  T970] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  311.316515][  T970] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  311.325620][  T970] usb 7-1: Product: syz
[  311.330032][  T970] usb 7-1: Manufacturer: syz
[  311.334630][  T970] usb 7-1: SerialNumber: syz
[  311.353621][  T970] usb 7-1: config 0 descriptor??
[  311.365235][T10021] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  311.389044][T10030] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  311.396793][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  312.187441][   T29] audit: type=1404 audit(1739963382.817:864): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  312.668665][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[  312.759526][   T29] audit: type=1400 audit(1739963382.897:865): avc:  denied  { read write } for  pid=10034 comm="syz.4.993" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  312.837006][   T29] audit: type=1404 audit(1739963383.277:866): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  312.858613][   T29] audit: type=1400 audit(1739963383.287:867): avc:  denied  { read } for  pid=10037 comm="syz.5.994" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  312.887220][   T29] audit: type=1400 audit(1739963383.287:868): avc:  denied  { open } for  pid=10037 comm="syz.5.994" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  312.921269][   T29] audit: type=1400 audit(1739963383.307:869): avc:  denied  { create } for  pid=10039 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  312.948760][   T29] audit: type=1400 audit(1739963383.307:870): avc:  denied  { write } for  pid=10039 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  312.975746][   T29] audit: type=1400 audit(1739963383.437:871): avc:  denied  { read } for  pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  313.007117][   T29] audit: type=1400 audit(1739963383.437:872): avc:  denied  { search } for  pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.864727][  T970] usb 7-1: USB disconnect, device number 32
[  314.520069][T10061] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  314.867734][T10078] overlayfs: failed to clone upperpath
[  315.018130][T10082] ISOFS: Unable to identify CD-ROM format.
[  315.067945][  T970] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  315.530503][  T973] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  315.548861][T10090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  315.627612][  T970] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  315.723408][  T970] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.810950][  T970] usb 6-1: config 0 has no interface number 0
[  315.815657][  T973] usb 8-1: device descriptor read/64, error -71
[  315.971192][  T970] usb 6-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  316.046167][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  316.046203][   T29] audit: type=1400 audit(1739963386.687:931): avc:  denied  { mount } for  pid=10091 comm="syz.1.1009" name="/" dev="rpc_pipefs" ino=24689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  316.145796][  T973] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  316.423589][  T970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  316.432813][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.460952][  T970] usb 6-1: Product: syz
[  316.469542][  T970] usb 6-1: Manufacturer: syz
[  316.474198][  T970] usb 6-1: SerialNumber: syz
[  316.484530][  T970] usb 6-1: config 0 descriptor??
[  316.508302][  T970] usbtest 6-1:0.85: couldn't get endpoints, -22
[  316.515013][  T970] usbtest 6-1:0.85: probe with driver usbtest failed with error -22
[  316.556709][T10097] 9pnet_fd: Insufficient options for proto=fd
[  316.559903][  T973] usb 8-1: device descriptor read/64, error -71
[  316.679987][  T973] usb usb8-port1: attempt power cycle
[  316.713272][T10072] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  316.789266][   T29] audit: type=1400 audit(1739963387.427:932): avc:  denied  { create } for  pid=10105 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  316.829169][   T29] audit: type=1400 audit(1739963387.457:933): avc:  denied  { setopt } for  pid=10105 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  316.862825][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  316.869110][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  316.881225][    T8] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  317.030137][  T973] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  317.041579][    T8] usb 7-1: Using ep0 maxpacket: 32
[  317.060835][    T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  317.078150][    T8] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  317.087979][  T973] usb 8-1: device descriptor read/8, error -71
[  317.094597][    T8] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  317.120054][    T8] usb 7-1: Product: syz
[  317.124573][    T8] usb 7-1: Manufacturer: syz
[  317.129185][    T8] usb 7-1: SerialNumber: syz
[  317.141547][    T8] usb 7-1: config 0 descriptor??
[  317.150273][T10100] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  317.284529][   T29] audit: type=1400 audit(1739963387.927:934): avc:  denied  { create } for  pid=10119 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  317.392359][   T29] audit: type=1400 audit(1739963388.027:935): avc:  denied  { write } for  pid=10116 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  317.703858][   T29] audit: type=1400 audit(1739963388.327:936): avc:  denied  { write } for  pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.782862][  T973] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  317.913866][   T44] usb 6-1: USB disconnect, device number 24
[  317.920968][   T29] audit: type=1400 audit(1739963388.327:937): avc:  denied  { remove_name } for  pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  317.972983][   T29] audit: type=1400 audit(1739963388.327:938): avc:  denied  { rename } for  pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  318.116881][   T29] audit: type=1400 audit(1739963388.327:939): avc:  denied  { add_name } for  pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  318.163084][   T29] audit: type=1400 audit(1739963388.337:940): avc:  denied  { unlink } for  pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  318.214694][  T973] usb 8-1: device descriptor read/8, error -71
[  318.367822][  T973] usb usb8-port1: unable to enumerate USB device
[  320.307716][T10149] ubi31: attaching mtd0
[  320.658997][   T44] usb 7-1: USB disconnect, device number 33
[  321.283652][    T8] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  321.377785][   T29] kauditd_printk_skb: 17 callbacks suppressed
[  321.377802][   T29] audit: type=1400 audit(1739963391.997:958): avc:  denied  { read write } for  pid=10164 comm="syz.6.1031" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  321.416389][T10160] ref_ctr_offset mismatch. inode: 0x404 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  321.463394][   T29] audit: type=1400 audit(1739963391.997:959): avc:  denied  { open } for  pid=10164 comm="syz.6.1031" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  321.487301][   T29] audit: type=1400 audit(1739963392.057:960): avc:  denied  { create } for  pid=10164 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  321.507658][   T29] audit: type=1400 audit(1739963392.077:961): avc:  denied  { create } for  pid=10164 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  321.543817][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  321.578042][    T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  321.606157][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  321.626639][   T29] audit: type=1400 audit(1739963392.097:962): avc:  denied  { bind } for  pid=10164 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  321.656300][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.684079][T10156] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  321.723823][    T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  322.119181][    T8] usb 6-1: USB disconnect, device number 25
[  322.195255][T10165] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  322.207110][T10165] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  322.225268][T10165] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  322.326714][T10165] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  322.337194][T10165] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  322.465836][T10178] vcan0 speed is unknown, defaulting to 1000
[  322.472519][   T29] audit: type=1400 audit(1739963393.087:963): avc:  denied  { write } for  pid=10177 comm="syz.4.1036" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  322.561110][   T29] audit: type=1400 audit(1739963393.087:964): avc:  denied  { watch } for  pid=10177 comm="syz.4.1036" path="/191" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  322.596948][   T29] audit: type=1400 audit(1739963393.147:965): avc:  denied  { create } for  pid=10177 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  322.677740][ T5868] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  322.844690][T10185] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  322.854638][T10185] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  322.973815][T10186] x_tables: ip6_tables: MASQUERADE target: used from hooks OUTPUT, but only usable from POSTROUTING
[  323.076565][ T5868] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  323.162053][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.258758][ T5868] usb 8-1: config 0 has no interface number 0
[  323.271773][ T5868] usb 8-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  323.300808][ T5868] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  323.312409][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.322874][ T5868] usb 8-1: Product: syz
[  323.327088][ T5868] usb 8-1: Manufacturer: syz
[  323.335269][ T5868] usb 8-1: SerialNumber: syz
[  323.344484][ T5868] usb 8-1: config 0 descriptor??
[  323.352638][ T5868] usbtest 8-1:0.85: couldn't get endpoints, -22
[  323.359205][ T5868] usbtest 8-1:0.85: probe with driver usbtest failed with error -22
[  323.549653][ T5831] Bluetooth: hci0: command 0x0401 tx timeout
[  323.603598][T10168] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  323.758089][ T5831] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  324.269814][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[  324.304712][   T29] audit: type=1400 audit(1739963394.947:966): avc:  denied  { ioctl } for  pid=10197 comm="syz.5.1040" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  324.360325][ T5831] Bluetooth: hci4: command 0x206a tx timeout
[  324.420132][  T973] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  324.558873][   T29] audit: type=1400 audit(1739963395.197:967): avc:  denied  { bind } for  pid=10202 comm="syz.5.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  324.619766][  T973] usb 7-1: Using ep0 maxpacket: 32
[  324.627961][  T973] usb 7-1: unable to get BOS descriptor or descriptor too short
[  324.704835][T10204] pim6reg: entered allmulticast mode
[  325.192775][  T973] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  325.202241][  T973] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  325.212766][  T973] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  325.222060][  T973] usb 7-1: config 128 has no interface number 0
[  325.228494][  T973] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  325.241354][  T973] usb 7-1: config 128 interface 127 has no altsetting 0
[  325.251350][  T973] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  325.261842][ T5868] usb 8-1: USB disconnect, device number 31
[  325.268830][  T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.278167][  T973] usb 7-1: Product: syz
[  325.342936][  T973] usb 7-1: Manufacturer: syz
[  325.348483][  T973] usb 7-1: SerialNumber: syz
[  325.381441][T10194] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  325.587643][T10206] rdma_rxe: rxe_newlink: failed to add wg2
[  325.611115][T10207] ptm ptm24: ldisc open failed (-12), clearing slot 24
[  325.650111][T10194] overlay: ./file0 is not a directory
[  325.688406][  T973] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  325.715322][  T973] usb 7-1: USB disconnect, device number 34
[  325.991478][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.206261][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1048'.
[  326.351004][ T5831] Bluetooth: hci5: command 0x0406 tx timeout
[  326.395851][   T29] kauditd_printk_skb: 105 callbacks suppressed
[  326.395867][   T29] audit: type=1400 audit(1739963397.037:1073): avc:  denied  { ioctl } for  pid=10228 comm="syz.4.1050" path="socket:[24982]" dev="sockfs" ino=24982 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  326.429575][ T5831] Bluetooth: hci4: command 0x206a tx timeout
[  326.497403][T10234] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  326.618609][   T29] audit: type=1400 audit(1739963397.067:1074): avc:  denied  { sys_module } for  pid=10228 comm="syz.4.1050" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  326.641371][   T29] audit: type=1400 audit(1739963397.157:1075): avc:  denied  { listen } for  pid=10227 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  326.661671][   T29] audit: type=1400 audit(1739963397.157:1076): avc:  denied  { accept } for  pid=10227 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  326.845551][   T29] audit: type=1400 audit(1739963397.487:1077): avc:  denied  { read } for  pid=10237 comm="syz.7.1051" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  326.868309][    C0] vkms_vblank_simulate: vblank timer overrun
[  326.892629][   T29] audit: type=1400 audit(1739963397.487:1078): avc:  denied  { open } for  pid=10237 comm="syz.7.1051" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  326.927573][   T29] audit: type=1400 audit(1739963397.557:1079): avc:  denied  { name_connect } for  pid=10239 comm="syz.1.1052" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  326.949809][    C0] vkms_vblank_simulate: vblank timer overrun
[  327.530661][   T29] audit: type=1400 audit(1739963397.857:1080): avc:  denied  { create } for  pid=10241 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  327.775237][   T29] audit: type=1400 audit(1739963397.927:1081): avc:  denied  { connect } for  pid=10241 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  327.905937][   T29] audit: type=1400 audit(1739963397.927:1082): avc:  denied  { name_connect } for  pid=10241 comm="syz.4.1053" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  328.263121][  T973] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  328.611641][  T973] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  328.623268][  T973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.654181][  T973] usb 8-1: config 0 has no interface number 0
[  328.682483][  T973] usb 8-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  328.724868][  T973] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  328.801009][  T973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.816079][T10268] IPVS: set_ctl: invalid protocol: 244 224.0.0.2:20000
[  328.883509][  T973] usb 8-1: Product: syz
[  328.923681][  T973] usb 8-1: Manufacturer: syz
[  328.967427][  T973] usb 8-1: SerialNumber: syz
[  329.072407][  T973] usb 8-1: config 0 descriptor??
[  329.149130][  T973] usbtest 8-1:0.85: couldn't get endpoints, -22
[  329.169911][  T973] usbtest 8-1:0.85: probe with driver usbtest failed with error -22
[  329.627858][T10255] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value
[  330.017489][T10285] dvmrp0: entered allmulticast mode
[  331.685383][ T5870] usb 8-1: USB disconnect, device number 32
[  331.807057][   T29] kauditd_printk_skb: 52 callbacks suppressed
[  331.807070][   T29] audit: type=1400 audit(1739963402.447:1133): avc:  denied  { mounton } for  pid=10295 comm="syz.7.1069" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  332.398075][   T29] audit: type=1400 audit(1739963403.037:1134): avc:  denied  { read write } for  pid=10295 comm="syz.7.1069" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  332.412652][T10300] syz.7.1069: attempt to access beyond end of device
[  332.412652][T10300] nbd7: rw=4096, sector=0, nr_sectors = 2 limit=0
[  332.509970][T10300] XFS (nbd7): SB validate failed with error -5.
[  332.527683][   T29] audit: type=1400 audit(1739963403.037:1135): avc:  denied  { open } for  pid=10295 comm="syz.7.1069" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  332.690399][   T29] audit: type=1400 audit(1739963403.037:1136): avc:  denied  { create } for  pid=10295 comm="syz.7.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  332.729842][   T29] audit: type=1400 audit(1739963403.367:1137): avc:  denied  { ioctl } for  pid=10310 comm="syz.1.1072" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23997 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  333.071056][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'.
[  333.192619][T10296] hfs: can't find a HFS filesystem on dev nullb0
[  333.238993][   T29] audit: type=1400 audit(1739963403.877:1138): avc:  denied  { create } for  pid=10295 comm="syz.7.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  333.359773][   T29] audit: type=1400 audit(1739963403.877:1139): avc:  denied  { create } for  pid=10316 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.420114][   T29] audit: type=1400 audit(1739963403.907:1140): avc:  denied  { read } for  pid=10295 comm="syz.7.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  333.441595][   T29] audit: type=1400 audit(1739963403.967:1141): avc:  denied  { getopt } for  pid=10316 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.465129][   T29] audit: type=1400 audit(1739963403.967:1142): avc:  denied  { name_bind } for  pid=10316 comm="syz.1.1074" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  333.544148][T10327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1079'.
[  333.555401][T10327] unsupported nlmsg_type 40
[  333.667464][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'.
[  333.759591][  T973] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  333.790529][T10330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1080'.
[  333.815038][T10331] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1081'.
[  333.920172][  T973] usb 8-1: config 1 has an invalid interface number: 140 but max is 0
[  333.946438][  T973] usb 8-1: config 1 has no interface number 0
[  333.959849][  T973] usb 8-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88
[  333.977362][  T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.017774][  T973] usb 8-1: MBOX3: Invalid descriptor size=18.
[  334.210390][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.225445][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.239809][  T973] usb 8-1: USB disconnect, device number 33
[  334.422654][T10345] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  334.430826][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.253522][T10354] syz.5.1088: attempt to access beyond end of device
[  335.253522][T10354] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  335.276396][T10354] XFS (nbd5): SB validate failed with error -5.
[  335.402800][T10354] hfs: can't find a HFS filesystem on dev nullb0
[  335.427995][T10369] overlayfs: failed to clone upperpath
[  335.448367][T10367] xt_hashlimit: size too large, truncated to 1048576
[  335.789779][ T5868] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  335.939874][ T5868] usb 8-1: Using ep0 maxpacket: 8
[  335.973419][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.038032][ T5868] usb 8-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=9f.d1
[  336.059931][ T5868] usb 8-1: New USB device strings: Mfr=92, Product=2, SerialNumber=3
[  336.088680][ T5868] usb 8-1: Product: syz
[  336.108613][ T5868] usb 8-1: Manufacturer: syz
[  336.130256][ T5868] usb 8-1: SerialNumber: syz
[  336.151440][ T5868] usb 8-1: config 0 descriptor??
[  336.183455][ T5868] imon_raw 8-1:0.0: IR endpoint missing
[  336.359676][ T5831] Bluetooth: hci0: command 0x0401 tx timeout
[  336.381729][    T8] usb 8-1: USB disconnect, device number 34
[  336.856332][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  336.856505][   T29] audit: type=1326 audit(1739963407.497:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.007269][   T29] audit: type=1326 audit(1739963407.517:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.009740][ T5868] usb 7-1: new full-speed USB device number 35 using dummy_hcd
[  337.207190][   T29] audit: type=1326 audit(1739963407.517:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.298154][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1098'.
[  337.313825][T10397] netlink: 'syz.7.1098': attribute type 7 has an invalid length.
[  337.325898][   T29] audit: type=1326 audit(1739963407.517:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.350124][   T29] audit: type=1326 audit(1739963407.517:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.350181][T10397] netlink: 'syz.7.1098': attribute type 8 has an invalid length.
[  337.373581][   T29] audit: type=1326 audit(1739963407.517:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.373622][   T29] audit: type=1326 audit(1739963407.517:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.373650][   T29] audit: type=1326 audit(1739963407.517:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.373678][   T29] audit: type=1326 audit(1739963407.517:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.373706][   T29] audit: type=1326 audit(1739963407.517:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  337.510743][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1098'.
[  337.523317][T10397] syz_tun: entered promiscuous mode
[  337.529455][T10397] batadv_slave_1: entered promiscuous mode
[  337.551591][T10397] gretap0: entered promiscuous mode
[  337.560455][T10397] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  337.573865][T10397] Cannot create hsr debugfs directory
[  337.699450][ T5868] usb 7-1: device descriptor read/64, error -71
[  338.203966][ T5868] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[  338.799555][ T5868] usb 7-1: device descriptor read/64, error -71
[  339.025609][ T5868] usb usb7-port1: attempt power cycle
[  340.131202][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.654605][ T5831] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  341.600393][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1110'.
[  341.993493][T10449] Bluetooth: hci3: Frame reassembly failed (-84)
[  342.143812][T10451] Bluetooth: hci6: Frame reassembly failed (-84)
[  342.278275][ T3021] Bluetooth: hci6: Frame reassembly failed (-84)
[  342.284959][ T1146] Bluetooth: hci3: Frame reassembly failed (-84)
[  342.498140][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  342.498155][   T29] audit: type=1400 audit(1739963413.137:1189): avc:  denied  { create } for  pid=10455 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  342.533973][   T29] audit: type=1400 audit(1739963413.177:1190): avc:  denied  { connect } for  pid=10455 comm="syz.4.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  342.809299][   T29] audit: type=1400 audit(1739963413.357:1191): avc:  denied  { append } for  pid=10460 comm="syz.7.1115" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  343.362375][   T29] audit: type=1400 audit(1739963414.007:1192): avc:  denied  { read } for  pid=10465 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  343.407032][   T29] audit: type=1400 audit(1739963414.047:1193): avc:  denied  { getopt } for  pid=10467 comm="syz.1.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  344.269674][ T5831] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  344.281950][ T5831] Bluetooth: hci6: command 0x1003 tx timeout
[  344.289047][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  344.636870][   T29] audit: type=1400 audit(1739963415.277:1194): avc:  denied  { mount } for  pid=10475 comm="syz.5.1120" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  344.895564][   T29] audit: type=1400 audit(1739963415.517:1195): avc:  denied  { unmount } for  pid=6848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  344.964868][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'.
[  344.979049][   T29] audit: type=1400 audit(1739963415.567:1196): avc:  denied  { execute } for  pid=10482 comm="syz.6.1121" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=24370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  345.141139][T10499] Invalid ELF header magic: != ELF
[  345.146453][   T29] audit: type=1400 audit(1739963415.787:1197): avc:  denied  { module_load } for  pid=10498 comm="syz.4.1127" path="/214/bus" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  345.179750][ T5870] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  345.230167][   T29] audit: type=1326 audit(1739963415.877:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fdd8cde9 code=0x7ffc0000
[  345.265416][ T5819] Bluetooth: hci0: unexpected event for opcode 0x2060
[  345.297287][T10501] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  345.332210][ T5870] usb 7-1: device descriptor read/64, error -71
[  345.349249][T10501] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  345.385670][T10501] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  345.609645][ T5868] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  345.709643][ T5870] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  345.851103][ T5870] usb 7-1: device descriptor read/64, error -71
[  345.870844][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.881971][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.897737][ T5868] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  345.906923][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.992797][ T5870] usb usb7-port1: attempt power cycle
[  346.411872][ T5870] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  346.414463][ T5868] usb 8-1: config 0 descriptor??
[  346.446870][ T5868] usbhid 8-1:0.0: can't add hid device: -22
[  346.460870][ T5870] usb 7-1: device descriptor read/8, error -71
[  346.464399][ T5868] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[  347.572765][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  347.572780][   T29] audit: type=1400 audit(1739963418.217:1252): avc:  denied  { create } for  pid=10520 comm="syz.1.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  347.772850][ T5870] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  347.801686][ T5870] usb 7-1: device descriptor read/8, error -71
[  347.948576][ T5870] usb usb7-port1: unable to enumerate USB device
[  348.221304][  T970] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  348.273219][T10535] sctp: [Deprecated]: syz.7.1129 (pid 10535) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.273219][T10535] Use struct sctp_sack_info instead
[  348.292853][T10534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31768 sclass=netlink_route_socket pid=10534 comm=syz.1.1138
[  348.307936][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1137'.
[  348.332661][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1137'.
[  348.341725][   T29] audit: type=1400 audit(1739963418.977:1253): avc:  denied  { bind } for  pid=10532 comm="syz.6.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  348.412880][  T970] usb 6-1: Using ep0 maxpacket: 8
[  348.421581][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.429013][T10535] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.542449][   T29] audit: type=1326 audit(1739963419.167:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10541 comm="syz.1.1139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d82d8cde9 code=0x0
[  348.550171][T10535] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.570461][  T970] usb 6-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[  348.578176][T10535] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.086734][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.094884][  T970] usb 6-1: Product: syz
[  349.099115][  T970] usb 6-1: Manufacturer: syz
[  349.104067][  T970] usb 6-1: SerialNumber: syz
[  349.113451][  T970] usb 6-1: config 0 descriptor??
[  349.119587][   T29] audit: type=1400 audit(1739963419.757:1255): avc:  denied  { name_bind } for  pid=10550 comm="syz.4.1141" src=20007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  349.143460][  T970]  (null): radio-mr800 - initialization failed
[  349.156845][  T970] radio-mr800 6-1:0.0: probe with driver radio-mr800 failed with error -22
[  349.168550][  T970] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  350.319682][T10577] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  350.363490][  T970] usb 8-1: USB disconnect, device number 35
[  350.386727][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'.
[  350.441593][    T9] usb 6-1: USB disconnect, device number 26
[  350.823209][   T29] audit: type=1400 audit(1739963421.367:1256): avc:  denied  { ioctl } for  pid=10581 comm="syz.7.1149" path="socket:[25534]" dev="sockfs" ino=25534 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  351.151976][   T29] audit: type=1400 audit(1739963421.367:1257): avc:  denied  { bind } for  pid=10581 comm="syz.7.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  351.184782][   T29] audit: type=1400 audit(1739963421.417:1258): avc:  denied  { setopt } for  pid=10581 comm="syz.7.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  351.215325][   T29] audit: type=1326 audit(1739963421.487:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10584 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  351.314354][   T29] audit: type=1326 audit(1739963421.607:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10584 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  351.349294][   T29] audit: type=1326 audit(1739963421.617:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10584 comm="syz.5.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  353.130703][   T29] kauditd_printk_skb: 41 callbacks suppressed
[  353.130719][   T29] audit: type=1400 audit(1739963423.777:1303): avc:  denied  { ioctl } for  pid=10614 comm="syz.7.1159" path="socket:[24553]" dev="sockfs" ino=24553 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  353.342593][   T29] audit: type=1400 audit(1739963423.987:1304): avc:  denied  { write } for  pid=10624 comm="syz.5.1162" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  353.945205][T10637] vcan0 speed is unknown, defaulting to 1000
[  354.270057][   T29] audit: type=1400 audit(1739963424.527:1305): avc:  denied  { connect } for  pid=10631 comm="syz.6.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  355.149954][ T5819] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  355.158569][ T5819] Bluetooth: hci5: Injecting HCI hardware error event
[  355.167570][ T5829] Bluetooth: hci5: hardware error 0x00
[  355.250738][   T29] audit: type=1400 audit(1739963425.887:1306): avc:  denied  { create } for  pid=10652 comm="syz.6.1171" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  355.256329][T10656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.469273][   T29] audit: type=1400 audit(1739963425.887:1307): avc:  denied  { block_suspend } for  pid=10653 comm="syz.1.1173" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  355.514591][   T29] audit: type=1400 audit(1739963425.947:1308): avc:  denied  { nlmsg_read } for  pid=10658 comm="syz.7.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  355.754920][   T29] audit: type=1400 audit(1739963426.197:1309): avc:  denied  { unlink } for  pid=6907 comm="syz-executor" name="file0" dev="tmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  355.814373][   T29] audit: type=1400 audit(1739963426.457:1310): avc:  denied  { connect } for  pid=10673 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  357.070687][ T5819] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  357.279310][ T5829] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  357.579592][   T29] audit: type=1400 audit(1739963428.217:1311): avc:  denied  { ioctl } for  pid=10679 comm="syz.6.1179" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  358.595637][T10691] delete_channel: no stack
[  358.754284][   T29] audit: type=1400 audit(1739963428.607:1312): avc:  denied  { create } for  pid=10691 comm="syz.7.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  358.910135][   T29] audit: type=1400 audit(1739963428.607:1313): avc:  denied  { bind } for  pid=10691 comm="syz.7.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  358.939079][T10692] 9pnet_fd: Insufficient options for proto=fd
[  359.077995][T10703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10703 comm=syz.4.1186
[  359.345257][   T29] audit: type=1400 audit(1739963429.987:1314): avc:  denied  { wake_alarm } for  pid=10707 comm="syz.6.1187" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  359.373953][T10706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'.
[  359.467433][   T29] audit: type=1400 audit(1739963430.107:1315): avc:  denied  { listen } for  pid=10713 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  359.488487][   T29] audit: type=1400 audit(1739963430.127:1316): avc:  denied  { ioctl } for  pid=10713 comm="syz.5.1190" path="socket:[26793]" dev="sockfs" ino=26793 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  359.513171][    C1] vkms_vblank_simulate: vblank timer overrun
[  359.746819][   T29] audit: type=1400 audit(1739963430.287:1317): avc:  denied  { write } for  pid=10713 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  360.049677][   T44] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  360.118209][   T29] audit: type=1400 audit(1739963430.757:1318): avc:  denied  { name_bind } for  pid=10729 comm="syz.5.1194" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  360.151916][T10730] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1194'.
[  360.161623][ T5868] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  360.169872][T10730] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1194'.
[  360.250382][   T29] audit: type=1400 audit(1739963430.887:1319): avc:  denied  { mount } for  pid=10731 comm="syz.4.1196" name="/" dev="pstore" ino=3382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  360.274895][T10733] overlayfs: failed to clone lowerpath
[  360.298130][T10733] ./file0: Can't lookup blockdev
[  360.303351][   T44] usb 8-1: Using ep0 maxpacket: 16
[  360.327085][   T44] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  360.329717][ T5868] usb 7-1: Using ep0 maxpacket: 8
[  360.337771][   T44] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.354868][ T5868] usb 7-1: config 0 has no interfaces?
[  360.402020][ T5868] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  360.418179][   T44] usb 8-1: config 0 has no interface number 0
[  360.466102][   T44] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  360.524366][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.573332][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.649548][ T5868] usb 7-1: Product: syz
[  360.653749][ T5868] usb 7-1: Manufacturer: syz
[  360.666348][ T5868] usb 7-1: SerialNumber: syz
[  360.687794][   T44] usb 8-1: Product: syz
[  360.692153][   T44] usb 8-1: Manufacturer: syz
[  360.696776][   T44] usb 8-1: SerialNumber: syz
[  360.711289][   T44] usb 8-1: config 0 descriptor??
[  360.724294][ T5868] usb 7-1: config 0 descriptor??
[  360.811873][   T29] audit: type=1400 audit(1739963431.457:1320): avc:  denied  { create } for  pid=10747 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  360.906485][   T29] audit: type=1400 audit(1739963431.547:1321): avc:  denied  { read } for  pid=10752 comm="syz.5.1202" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  360.930077][    C1] vkms_vblank_simulate: vblank timer overrun
[  360.943638][   T44] usb 8-1: Found UVC 0.00 device syz (046d:08d3)
[  360.958385][   T44] usb 8-1: No valid video chain found.
[  360.981028][   T44] usb 8-1: USB disconnect, device number 36
[  361.517864][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  361.530566][  T973] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  361.602386][T10774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10774 comm=syz.4.1209
[  361.709669][  T973] usb 6-1: Using ep0 maxpacket: 32
[  361.723310][  T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  361.801755][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  361.989812][  T973] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  362.077375][  T973] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  362.116401][  T973] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  362.241320][  T973] usb 6-1: Product: syz
[  362.262624][  T973] usb 6-1: Manufacturer: syz
[  362.268313][  T973] usb 6-1: SerialNumber: syz
[  362.372239][  T973] usb 6-1: config 0 descriptor??
[  362.381588][  T973] hub 6-1:0.0: bad descriptor, ignoring hub
[  362.397547][  T973] hub 6-1:0.0: probe with driver hub failed with error -5
[  362.421890][T10777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'.
[  362.543772][  T973] usb 7-1: USB disconnect, device number 42
[  362.624849][T10788] [U] w!tÁí—Ž}Ý©ïS…l^Ï=Íý
[  362.705242][T10787] [U] '
[  362.810355][    T9] usb 6-1: USB disconnect, device number 27
[  364.611353][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1220'.
[  364.630143][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1220'.
[  364.641411][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  364.641424][   T29] audit: type=1400 audit(1739963435.277:1323): avc:  denied  { connect } for  pid=10812 comm="syz.5.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  364.804223][   T29] audit: type=1400 audit(1739963435.287:1324): avc:  denied  { getopt } for  pid=10812 comm="syz.5.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  365.137306][   T29] audit: type=1326 audit(1739963435.287:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.160852][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.578385][   T29] audit: type=1326 audit(1739963435.287:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.626380][   T29] audit: type=1326 audit(1739963435.287:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.650515][   T29] audit: type=1326 audit(1739963435.287:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.675005][   T29] audit: type=1326 audit(1739963435.287:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.705426][   T29] audit: type=1326 audit(1739963435.287:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.774090][   T29] audit: type=1326 audit(1739963435.287:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  365.846143][   T29] audit: type=1326 audit(1739963435.287:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef2d8cde9 code=0x7ffc0000
[  366.209950][    T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  366.369834][    T9] usb 6-1: Using ep0 maxpacket: 32
[  366.382879][    T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  366.391750][    T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  366.405714][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  366.444667][    T9] usb 6-1: config 1 has no interface number 0
[  366.472365][    T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  366.489790][    T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  366.503683][    T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  366.531929][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.609024][T10852] netlink: 'syz.4.1222': attribute type 3 has an invalid length.
[  366.623934][    T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  366.699036][T10852] netlink: 'syz.4.1222': attribute type 3 has an invalid length.
[  367.277346][T10856] vcan0 speed is unknown, defaulting to 1000
[  367.958288][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1234'.
[  368.233525][    T9] snd_usb_pod 6-1:1.1: set_interface failed
[  368.239864][    T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  368.253399][    T9] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71
[  368.298363][    T9] usb 6-1: USB disconnect, device number 28
[  368.374185][T10871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1237'.
[  369.676874][T10907] syz.7.1247: attempt to access beyond end of device
[  369.676874][T10907] nbd7: rw=4096, sector=0, nr_sectors = 2 limit=0
[  369.702494][T10907] XFS (nbd7): SB validate failed with error -5.
[  369.746493][   T29] kauditd_printk_skb: 51 callbacks suppressed
[  369.746505][   T29] audit: type=1400 audit(1739963440.387:1384): avc:  denied  { unmount } for  pid=6907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  369.853846][T10913] hfs: can't find a HFS filesystem on dev nullb0
[  369.943600][ T3722] Bluetooth: hci3: Frame reassembly failed (-84)
[  370.354674][T10918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1249'.
[  370.512925][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1250'.
[  371.380275][  T970] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  371.819700][   T29] audit: type=1400 audit(1739963442.347:1385): avc:  denied  { bind } for  pid=10938 comm="syz.1.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  372.027708][ T5819] Bluetooth: hci3: command 0x1003 tx timeout
[  372.039376][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  372.070075][T10946] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1258'.
[  372.079968][T10944] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1258'.
[  372.111096][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  372.122328][  T970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.135112][  T970] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  372.145441][   T29] audit: type=1400 audit(1739963442.787:1386): avc:  denied  { read } for  pid=10950 comm="syz.4.1261" path="socket:[26228]" dev="sockfs" ino=26228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  372.145890][  T970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.188693][  T970] usb 6-1: config 0 descriptor??
[  372.265263][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'.
[  372.431221][   T29] audit: type=1400 audit(1739963443.077:1387): avc:  denied  { write } for  pid=10958 comm="syz.7.1265" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  372.543638][T10961] netlink: 'syz.7.1266': attribute type 21 has an invalid length.
[  372.551879][T10961] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1266'.
[  372.563802][T10961] netlink: 'syz.7.1266': attribute type 21 has an invalid length.
[  372.571753][T10961] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1266'.
[  372.610458][  T970] sony 0003:054C:0268.000C: item fetching failed at offset 3/5
[  372.618591][  T970] sony 0003:054C:0268.000C: parse failed
[  372.625818][  T970] sony 0003:054C:0268.000C: probe with driver sony failed with error -22
[  372.989885][    T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  373.150500][    T9] usb 7-1: Using ep0 maxpacket: 16
[  373.166121][    T9] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  373.175695][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.191483][    T9] usb 7-1: config 0 has no interface number 0
[  373.204698][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  373.252014][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.260691][    T9] usb 7-1: Product: syz
[  373.283425][    T9] usb 7-1: Manufacturer: syz
[  373.288165][    T9] usb 7-1: SerialNumber: syz
[  373.304770][    T9] usb 7-1: config 0 descriptor??
[  373.695653][    T9] usb 7-1: Found UVC 0.00 device syz (046d:08d3)
[  373.703205][    T9] usb 7-1: No valid video chain found.
[  373.714196][    T9] usb 7-1: USB disconnect, device number 43
[  374.003673][T10978] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  374.018694][T10978] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  374.251487][   T29] audit: type=1400 audit(1739963444.877:1388): avc:  denied  { append } for  pid=10975 comm="syz.7.1270" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  374.653491][   T29] audit: type=1400 audit(1739963444.887:1389): avc:  denied  { ioctl } for  pid=10975 comm="syz.7.1270" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  374.822032][ T5868] usb 6-1: USB disconnect, device number 29
[  374.934844][T10984] vcan0 speed is unknown, defaulting to 1000
[  375.285800][    T9] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  375.602561][    T9] usb 8-1: config 0 has no interfaces?
[  375.622248][    T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  375.634801][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.649787][    T9] usb 8-1: Product: syz
[  376.622807][    T9] usb 8-1: Manufacturer: syz
[  376.627478][    T9] usb 8-1: SerialNumber: syz
[  376.655370][    T9] usb 8-1: config 0 descriptor??
[  377.177295][   T29] audit: type=1400 audit(1739963447.817:1390): avc:  denied  { ioctl } for  pid=11013 comm="syz.1.1282" path="socket:[26340]" dev="sockfs" ino=26340 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  377.437454][   T29] audit: type=1400 audit(1739963447.827:1391): avc:  denied  { write } for  pid=11013 comm="syz.1.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  377.456956][    C0] vkms_vblank_simulate: vblank timer overrun
[  377.994098][T11014] [U] w!tÁí—Ž}Ý©ïS…l^Ï=Íý
[  377.999385][T11012] [U] '
[  378.003125][T11019] openvswitch: netlink: Key type 225 is out of range max 32
[  378.169417][T11025] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1285'.
[  378.201596][   T29] audit: type=1400 audit(1739963448.847:1392): avc:  denied  { accept } for  pid=11024 comm="syz.5.1285" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  378.280433][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.300304][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.335368][   T29] audit: type=1400 audit(1739963448.977:1393): avc:  denied  { listen } for  pid=11027 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  379.012391][ T5868] usb 8-1: USB disconnect, device number 37
[  379.440772][ T5868] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  379.576744][T11051] FAULT_INJECTION: forcing a failure.
[  379.576744][T11051] name failslab, interval 1, probability 0, space 0, times 0
[  379.610450][T11051] CPU: 1 UID: 0 PID: 11051 Comm: syz.5.1291 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  379.610475][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  379.610485][T11051] Call Trace:
[  379.610489][T11051]  <TASK>
[  379.610495][T11051]  dump_stack_lvl+0x16c/0x1f0
[  379.610520][T11051]  should_fail_ex+0x50a/0x650
[  379.610542][T11051]  ? fs_reclaim_acquire+0xae/0x150
[  379.610565][T11051]  ? sel_write_relabel+0x232/0x400
[  379.610583][T11051]  should_failslab+0xc2/0x120
[  379.610603][T11051]  __kmalloc_noprof+0xcb/0x510
[  379.610625][T11051]  sel_write_relabel+0x232/0x400
[  379.610643][T11051]  ? __pfx_sel_write_relabel+0x10/0x10
[  379.610661][T11051]  ? lock_acquire+0x2f/0xb0
[  379.610682][T11051]  ? __might_fault+0xe3/0x190
[  379.610701][T11051]  ? __might_fault+0xe3/0x190
[  379.610718][T11051]  ? _copy_from_user+0x59/0xd0
[  379.610733][T11051]  ? __pfx_sel_write_relabel+0x10/0x10
[  379.610747][T11051]  selinux_transaction_write+0xf5/0x180
[  379.610762][T11051]  ? __pfx_selinux_transaction_write+0x10/0x10
[  379.610775][T11051]  vfs_write+0x24c/0x1150
[  379.610795][T11051]  ? __fget_files+0x1fc/0x3a0
[  379.610808][T11051]  ? __pfx___mutex_lock+0x10/0x10
[  379.610823][T11051]  ? __pfx_vfs_write+0x10/0x10
[  379.610846][T11051]  ? __fget_files+0x206/0x3a0
[  379.610863][T11051]  ksys_write+0x12b/0x250
[  379.610881][T11051]  ? __pfx_ksys_write+0x10/0x10
[  379.610905][T11051]  do_syscall_64+0xcd/0x250
[  379.610921][T11051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.610939][T11051] RIP: 0033:0x7f6ef2d8cde9
[  379.610950][T11051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.610962][T11051] RSP: 002b:00007f6ef3c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  379.610975][T11051] RAX: ffffffffffffffda RBX: 00007f6ef2fa5fa0 RCX: 00007f6ef2d8cde9
[  379.610983][T11051] RDX: 0000000000000045 RSI: 00004000000005c0 RDI: 0000000000000003
[  379.610990][T11051] RBP: 00007f6ef3c62090 R08: 0000000000000000 R09: 0000000000000000
[  379.610997][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.611005][T11051] R13: 0000000000000000 R14: 00007f6ef2fa5fa0 R15: 00007ffdb8324918
[  379.611022][T11051]  </TASK>
[  379.619588][ T5868] usb 8-1: Using ep0 maxpacket: 8
[  379.839544][   T29] audit: type=1400 audit(1739963450.467:1394): avc:  denied  { mount } for  pid=11059 comm="syz.5.1296" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  379.860820][ T5868] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  379.896278][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.921356][ T5868] usb 8-1: config 0 descriptor??
[  379.927550][T11057] ceph: No mds server is up or the cluster is laggy
[  379.934635][ T5870] libceph: connect (1)[c::]:6789 error -101
[  379.940841][ T5870] libceph: mon0 (1)[c::]:6789 connect error
[  379.974541][   T29] audit: type=1400 audit(1739963450.617:1395): avc:  denied  { write } for  pid=11064 comm="syz.6.1295" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  380.017568][   T29] audit: type=1400 audit(1739963450.657:1396): avc:  denied  { unmount } for  pid=6848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  380.137493][ T5868] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  380.220374][   T29] audit: type=1400 audit(1739963450.867:1397): avc:  denied  { bind } for  pid=11070 comm="syz.1.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  380.277777][   T29] audit: type=1400 audit(1739963450.887:1398): avc:  denied  { write } for  pid=11070 comm="syz.1.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  380.302685][   T29] audit: type=1400 audit(1739963450.887:1399): avc:  denied  { accept } for  pid=11070 comm="syz.1.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  380.542132][ T5868] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  380.746432][ T5868] asix 8-1:0.0: probe with driver asix failed with error -32
[  382.012246][T11100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.105189][   T44] usb 8-1: USB disconnect, device number 38
[  382.279882][ T5868] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  382.439585][ T5868] usb 7-1: Using ep0 maxpacket: 16
[  382.448560][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  382.449694][   T44] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  382.463582][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  382.481765][ T5868] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  382.493758][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.502161][ T5868] usb 7-1: Product: syz
[  382.506388][ T5868] usb 7-1: Manufacturer: syz
[  382.512472][ T5868] usb 7-1: SerialNumber: syz
[  382.518517][ T5868] usb 7-1: config 0 descriptor??
[  382.526863][ T5868] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  382.538017][ T5868] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  382.631275][   T44] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  382.641902][   T44] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  382.655635][   T44] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  382.664893][   T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.677770][   T44] usb 8-1: config 0 descriptor??
[  383.136296][ T5868] em28xx 7-1:0.0: unknown em28xx chip ID (234)
[  383.179618][   T25] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  383.279208][   T44] usb 8-1: USB disconnect, device number 39
[  383.336952][ T5868] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  383.344877][ T5868] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  383.352559][ T5868] em28xx 7-1:0.0: No AC97 audio processor
[  383.360805][ T5868] usb 7-1: USB disconnect, device number 44
[  383.367621][ T5868] em28xx 7-1:0.0: Disconnecting em28xx
[  383.373305][   T25] usb 6-1: Using ep0 maxpacket: 16
[  383.374481][ T5868] em28xx 7-1:0.0: Freeing device
[  383.392293][   T25] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  383.401203][   T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.412172][   T25] usb 6-1: config 0 has no interface number 0
[  383.420402][   T25] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  383.429603][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.437580][   T25] usb 6-1: Product: syz
[  383.452212][   T25] usb 6-1: Manufacturer: syz
[  383.456839][   T25] usb 6-1: SerialNumber: syz
[  383.472065][   T25] usb 6-1: config 0 descriptor??
[  383.679067][   T25] usb 6-1: Found UVC 0.00 device syz (046d:08d3)
[  383.687921][   T25] usb 6-1: No valid video chain found.
[  383.695038][   T25] usb 6-1: USB disconnect, device number 30
[  384.036982][T11126] pimreg3: entered allmulticast mode
[  384.061642][T11126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11126 comm=syz.4.1316
[  384.083334][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1316'.
[  384.293212][T11138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  384.302918][T11138] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  384.324497][   T25] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  385.292826][   T29] audit: type=1400 audit(1739963455.717:1400): avc:  denied  { connect } for  pid=11143 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  385.354917][   T29] audit: type=1400 audit(1739963455.717:1401): avc:  denied  { write } for  pid=11143 comm="syz.1.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  385.450493][   T25] usb 7-1: Using ep0 maxpacket: 16
[  385.463037][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  385.475827][   T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.486645][   T25] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  385.510991][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.524953][T11153] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.525747][T11161] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1326'.
[  385.542783][   T25] usb 7-1: config 0 descriptor??
[  385.638390][T11153] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.647439][T11153] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.656427][T11153] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.668600][T11153] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.031951][T11168] Bluetooth: hci3: Frame reassembly failed (-84)
[  386.067881][ T3722] Bluetooth: hci3: Frame reassembly failed (-84)
[  386.199991][   T25] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0
[  386.414009][T11127] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1315'.
[  386.523552][  T973] usb 7-1: USB disconnect, device number 45
[  387.289554][   T25] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  387.440012][   T25] usb 8-1: Using ep0 maxpacket: 16
[  387.450348][   T25] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  387.459621][   T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.470784][   T25] usb 8-1: config 0 has no interface number 0
[  387.489258][   T25] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  387.498709][   T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.507484][   T25] usb 8-1: Product: syz
[  387.511931][   T25] usb 8-1: Manufacturer: syz
[  387.519501][   T25] usb 8-1: SerialNumber: syz
[  387.530192][   T25] usb 8-1: config 0 descriptor??
[  387.737920][   T25] usb 8-1: Found UVC 0.00 device syz (046d:08d3)
[  387.756741][   T25] usb 8-1: No valid video chain found.
[  387.764169][   T25] usb 8-1: USB disconnect, device number 40
[  388.139764][ T5819] Bluetooth: hci3: command 0x1003 tx timeout
[  388.152885][ T5829] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  389.007709][T11199] FAULT_INJECTION: forcing a failure.
[  389.007709][T11199] name failslab, interval 1, probability 0, space 0, times 0
[  389.027226][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.5.1337 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  389.027249][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  389.027258][T11199] Call Trace:
[  389.027263][T11199]  <TASK>
[  389.027268][T11199]  dump_stack_lvl+0x16c/0x1f0
[  389.027293][T11199]  should_fail_ex+0x50a/0x650
[  389.027313][T11199]  ? fs_reclaim_acquire+0xae/0x150
[  389.027335][T11199]  should_failslab+0xc2/0x120
[  389.027353][T11199]  kmem_cache_alloc_lru_noprof+0x73/0x3d0
[  389.027369][T11199]  ? __d_alloc+0x31/0xaa0
[  389.027389][T11199]  __d_alloc+0x31/0xaa0
[  389.027408][T11199]  d_alloc+0x4a/0x1e0
[  389.027425][T11199]  d_alloc_parallel+0xe7/0x12b0
[  389.027448][T11199]  ? __pfx_lock_release+0x10/0x10
[  389.027474][T11199]  ? __d_lookup+0xee/0x4a0
[  389.027491][T11199]  ? __d_lookup+0x12e/0x4a0
[  389.027510][T11199]  ? __pfx_d_alloc_parallel+0x10/0x10
[  389.027531][T11199]  ? lockdep_init_map_type+0x16d/0x7d0
[  389.027553][T11199]  ? lockdep_init_map_type+0x16d/0x7d0
[  389.027582][T11199]  proc_fill_cache+0x2eb/0x470
[  389.027598][T11199]  ? __pfx_proc_ns_instantiate+0x10/0x10
[  389.027622][T11199]  ? __pfx_proc_fill_cache+0x10/0x10
[  389.027646][T11199]  ? irqentry_exit+0x3b/0x90
[  389.027663][T11199]  ? lockdep_hardirqs_on+0x7c/0x110
[  389.027687][T11199]  ? proc_ns_dir_readdir+0x41b/0x560
[  389.027716][T11199]  proc_ns_dir_readdir+0x1bc/0x560
[  389.027745][T11199]  iterate_dir+0x293/0xab0
[  389.027771][T11199]  __x64_sys_getdents+0x148/0x2c0
[  389.027791][T11199]  ? __pfx___x64_sys_getdents+0x10/0x10
[  389.027812][T11199]  ? __pfx_filldir+0x10/0x10
[  389.027842][T11199]  do_syscall_64+0xcd/0x250
[  389.027862][T11199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.027883][T11199] RIP: 0033:0x7f6ef2d8cde9
[  389.027896][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.027911][T11199] RSP: 002b:00007f6ef3c20038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  389.027926][T11199] RAX: ffffffffffffffda RBX: 00007f6ef2fa6160 RCX: 00007f6ef2d8cde9
[  389.027936][T11199] RDX: 00000000000000b8 RSI: 0000400000001fc0 RDI: 0000000000000006
[  389.027944][T11199] RBP: 00007f6ef3c20090 R08: 0000000000000000 R09: 0000000000000000
[  389.027952][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.027961][T11199] R13: 0000000000000000 R14: 00007f6ef2fa6160 R15: 00007ffdb8324918
[  389.027982][T11199]  </TASK>
[  389.268655][    C0] vkms_vblank_simulate: vblank timer overrun
[  389.834764][T11210] /dev/nullb0: Can't lookup blockdev
[  391.745872][T11222] kvm: pic: non byte read
[  391.835693][T11226] Bluetooth: MGMT ver 1.23
[  391.842228][   T29] audit: type=1400 audit(1739963462.477:1402): avc:  denied  { read } for  pid=11221 comm="syz.6.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  391.972010][   T29] audit: type=1400 audit(1739963462.477:1403): avc:  denied  { write } for  pid=11221 comm="syz.6.1347" path="socket:[27938]" dev="sockfs" ino=27938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  392.446823][T11248] FAULT_INJECTION: forcing a failure.
[  392.446823][T11248] name failslab, interval 1, probability 0, space 0, times 0
[  392.474839][T11248] CPU: 0 UID: 0 PID: 11248 Comm: syz.7.1353 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  392.474864][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  392.474873][T11248] Call Trace:
[  392.474879][T11248]  <TASK>
[  392.474887][T11248]  dump_stack_lvl+0x16c/0x1f0
[  392.474911][T11248]  should_fail_ex+0x50a/0x650
[  392.474935][T11248]  ? trace_contention_end+0xee/0x140
[  392.474963][T11248]  should_failslab+0xc2/0x120
[  392.474982][T11248]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  392.474999][T11248]  ? hci_sock_sendmsg+0xdee/0x25e0
[  392.475022][T11248]  ? __alloc_skb+0x2b1/0x380
[  392.475050][T11248]  ? __pfx___mutex_lock+0x10/0x10
[  392.475071][T11248]  __alloc_skb+0x2b1/0x380
[  392.475087][T11248]  ? __pfx___alloc_skb+0x10/0x10
[  392.475111][T11248]  hci_sock_sendmsg+0x1a47/0x25e0
[  392.475134][T11248]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  392.475158][T11248]  sock_write_iter+0x4fe/0x5b0
[  392.475172][T11248]  ? __pfx_sock_write_iter+0x10/0x10
[  392.475184][T11248]  ? inode_security+0xa7/0x130
[  392.475212][T11248]  ? bpf_lsm_file_permission+0x9/0x10
[  392.475227][T11248]  ? security_file_permission+0x71/0x210
[  392.475251][T11248]  ? rw_verify_area+0xcf/0x680
[  392.475277][T11248]  vfs_write+0x5ae/0x1150
[  392.475300][T11248]  ? __pfx_sock_write_iter+0x10/0x10
[  392.475319][T11248]  ? __pfx_vfs_write+0x10/0x10
[  392.475345][T11248]  ? __fget_files+0x40/0x3a0
[  392.475373][T11248]  ksys_write+0x207/0x250
[  392.475397][T11248]  ? __pfx_ksys_write+0x10/0x10
[  392.475428][T11248]  do_syscall_64+0xcd/0x250
[  392.475449][T11248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.475471][T11248] RIP: 0033:0x7faf4438cde9
[  392.475485][T11248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.475499][T11248] RSP: 002b:00007faf452ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  392.475515][T11248] RAX: ffffffffffffffda RBX: 00007faf445a6080 RCX: 00007faf4438cde9
[  392.475525][T11248] RDX: 0000000000000007 RSI: 0000400000000000 RDI: 0000000000000005
[  392.475534][T11248] RBP: 00007faf452ab090 R08: 0000000000000000 R09: 0000000000000000
[  392.475543][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.475556][T11248] R13: 0000000000000000 R14: 00007faf445a6080 R15: 00007fffefb293c8
[  392.475579][T11248]  </TASK>
[  392.709283][    C0] vkms_vblank_simulate: vblank timer overrun
[  392.865076][T11253] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1354'.
[  392.952482][T11256] /dev/nbd5: Can't open blockdev
[  392.962849][T11256] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  394.098449][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'.
[  394.108013][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'.
[  394.170553][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11272 comm=syz.5.1361
[  394.948314][   T29] audit: type=1400 audit(1739963465.587:1404): avc:  denied  { ioctl } for  pid=11287 comm="syz.6.1366" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  395.316640][T11292] syz.7.1370 (11292): drop_caches: 2
[  395.775193][T11315] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  396.379971][   T29] audit: type=1400 audit(1739963467.017:1405): avc:  denied  { listen } for  pid=11321 comm="syz.4.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.429557][    T8] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  396.554626][   T29] audit: type=1400 audit(1739963467.187:1406): avc:  denied  { unmount } for  pid=6916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  396.609601][    T8] usb 6-1: Using ep0 maxpacket: 8
[  396.620062][    T8] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  396.647058][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.658866][   T29] audit: type=1400 audit(1739963467.297:1407): avc:  denied  { ioctl } for  pid=11328 comm="syz.7.1379" path="socket:[29171]" dev="sockfs" ino=29171 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  396.685872][T11329] raw_sendmsg: syz.7.1379 forgot to set AF_INET. Fix it!
[  396.740899][    T8] usb 6-1: config 0 descriptor??
[  397.411453][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  397.518692][   T29] audit: type=1400 audit(1739963468.137:1408): avc:  denied  { read } for  pid=11335 comm="syz.7.1381" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  397.662273][T11341] 
[  397.664637][T11341] ======================================================
[  397.671648][T11341] WARNING: possible circular locking dependency detected
[  397.678652][T11341] 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 Not tainted
[  397.685739][T11341] ------------------------------------------------------
[  397.692725][T11341] syz.7.1381/11341 is trying to acquire lock:
[  397.698757][T11341] ffff888029d50540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0
[  397.707167][T11341] 
[  397.707167][T11341] but task is already holding lock:
[  397.714500][T11341] ffff88802fee3c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  397.722728][T11341] 
[  397.722728][T11341] which lock already depends on the new lock.
[  397.722728][T11341] 
[  397.733097][T11341] 
[  397.733097][T11341] the existing dependency chain (in reverse order) is:
[  397.742078][T11341] 
[  397.742078][T11341] -> #4 (&pipe->mutex){+.+.}-{4:4}:
[  397.749430][T11341]        __mutex_lock+0x19b/0xb10
[  397.754450][T11341]        pipe_lock+0x64/0x80
[  397.759014][T11341]        iter_file_splice_write+0x1eb/0x10b0
[  397.764971][T11341]        do_splice+0x146a/0x1f70
[  397.769884][T11341]        __do_splice+0x327/0x360
[  397.774794][T11341]        __x64_sys_splice+0x187/0x250
[  397.780142][T11341]        do_syscall_64+0xcd/0x250
[  397.785148][T11341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.791537][T11341] 
[  397.791537][T11341] -> #3 (sb_writers#6){.+.+}-{0:0}:
[  397.798891][T11341]        mnt_want_write+0x6f/0x450
[  397.803976][T11341]        ovl_create_object+0x12e/0x300
[  397.809407][T11341]        lookup_open.isra.0+0x11d2/0x1580
[  397.815110][T11341]        path_openat+0x904/0x2d80
[  397.820104][T11341]        do_filp_open+0x20c/0x470
[  397.825104][T11341]        do_sys_openat2+0x17a/0x1e0
[  397.830274][T11341]        __x64_sys_openat+0x175/0x210
[  397.835620][T11341]        do_syscall_64+0xcd/0x250
[  397.840628][T11341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.847017][T11341] 
[  397.847017][T11341] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}:
[  397.855669][T11341]        down_read+0x9a/0x330
[  397.860319][T11341]        walk_component+0x342/0x5b0
[  397.865491][T11341]        path_lookupat+0x17f/0x770
[  397.870574][T11341]        filename_lookup+0x221/0x5f0
[  397.875833][T11341]        kern_path+0x35/0x50
[  397.880398][T11341]        lookup_bdev+0xd9/0x280
[  397.885216][T11341]        resume_store+0x1d8/0x460
[  397.890217][T11341]        kobj_attr_store+0x55/0x80
[  397.895297][T11341]        sysfs_kf_write+0x117/0x170
[  397.900467][T11341]        kernfs_fop_write_iter+0x33d/0x500
[  397.906244][T11341]        vfs_write+0x5ae/0x1150
[  397.911075][T11341]        ksys_write+0x12b/0x250
[  397.915908][T11341]        do_syscall_64+0xcd/0x250
[  397.920910][T11341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.927296][T11341] 
[  397.927296][T11341] -> #1 (&of->mutex){+.+.}-{4:4}:
[  397.934470][T11341]        __mutex_lock+0x19b/0xb10
[  397.939469][T11341]        kernfs_seq_start+0x4d/0x240
[  397.944726][T11341]        traverse.part.0.constprop.0+0xac/0x640
[  397.950941][T11341]        seq_read_iter+0x934/0x12b0
[  397.956112][T11341]        kernfs_fop_read_iter+0x414/0x580
[  397.961800][T11341]        do_iter_readv_writev+0x737/0x950
[  397.967501][T11341]        vfs_readv+0x4d2/0x8a0
[  397.972237][T11341]        do_preadv+0x1b1/0x270
[  397.976976][T11341]        do_syscall_64+0xcd/0x250
[  397.981970][T11341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.988358][T11341] 
[  397.988358][T11341] -> #0 (&p->lock){+.+.}-{4:4}:
[  397.995368][T11341]        __lock_acquire+0x249e/0x3c40
[  398.000715][T11341]        lock_acquire.part.0+0x11b/0x380
[  398.006320][T11341]        __mutex_lock+0x19b/0xb10
[  398.011314][T11341]        seq_read_iter+0xd8/0x12b0
[  398.016398][T11341]        proc_reg_read_iter+0x21d/0x310
[  398.021922][T11341]        copy_splice_read+0x61d/0xb80
[  398.027267][T11341]        do_splice_read+0x282/0x370
[  398.032439][T11341]        splice_file_to_pipe+0x109/0x120
[  398.038044][T11341]        do_sendfile+0x3fd/0xe40
[  398.042955][T11341]        __x64_sys_sendfile64+0x155/0x220
[  398.048646][T11341]        do_syscall_64+0xcd/0x250
[  398.053642][T11341]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.060041][T11341] 
[  398.060041][T11341] other info that might help us debug this:
[  398.060041][T11341] 
[  398.070238][T11341] Chain exists of:
[  398.070238][T11341]   &p->lock --> sb_writers#6 --> &pipe->mutex
[  398.070238][T11341] 
[  398.082115][T11341]  Possible unsafe locking scenario:
[  398.082115][T11341] 
[  398.089542][T11341]        CPU0                    CPU1
[  398.094876][T11341]        ----                    ----
[  398.100208][T11341]   lock(&pipe->mutex);
[  398.104332][T11341]                                lock(sb_writers#6);
[  398.110978][T11341]                                lock(&pipe->mutex);
[  398.117620][T11341]   lock(&p->lock);
[  398.121397][T11341] 
[  398.121397][T11341]  *** DEADLOCK ***
[  398.121397][T11341] 
[  398.129508][T11341] 1 lock held by syz.7.1381/11341:
[  398.134594][T11341]  #0: ffff88802fee3c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80
[  398.143265][T11341] 
[  398.143265][T11341] stack backtrace:
[  398.149120][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.7.1381 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0
[  398.149133][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  398.149138][T11341] Call Trace:
[  398.149142][T11341]  <TASK>
[  398.149146][T11341]  dump_stack_lvl+0x116/0x1f0
[  398.149158][T11341]  print_circular_bug+0x490/0x760
[  398.149173][T11341]  check_noncircular+0x31a/0x400
[  398.149186][T11341]  ? __pfx_check_noncircular+0x10/0x10
[  398.149201][T11341]  ? lockdep_lock+0xc6/0x200
[  398.149211][T11341]  ? __pfx_lockdep_lock+0x10/0x10
[  398.149222][T11341]  __lock_acquire+0x249e/0x3c40
[  398.149238][T11341]  ? __pfx___lock_acquire+0x10/0x10
[  398.149256][T11341]  ? rcu_is_watching+0x12/0xc0
[  398.149267][T11341]  lock_acquire.part.0+0x11b/0x380
[  398.149280][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149295][T11341]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  398.149309][T11341]  ? rcu_is_watching+0x12/0xc0
[  398.149319][T11341]  ? trace_lock_acquire+0x14e/0x1f0
[  398.149329][T11341]  ? kasan_save_stack+0x33/0x60
[  398.149339][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149352][T11341]  ? lock_acquire+0x2f/0xb0
[  398.149365][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149378][T11341]  __mutex_lock+0x19b/0xb10
[  398.149389][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149403][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149416][T11341]  ? __pfx___mutex_lock+0x10/0x10
[  398.149428][T11341]  ? alloc_pages_bulk_noprof+0xa46/0x1390
[  398.149442][T11341]  ? seq_read_iter+0xd8/0x12b0
[  398.149463][T11341]  seq_read_iter+0xd8/0x12b0
[  398.149482][T11341]  ? __kmalloc_noprof+0x23b/0x510
[  398.149492][T11341]  proc_reg_read_iter+0x21d/0x310
[  398.149502][T11341]  copy_splice_read+0x61d/0xb80
[  398.149517][T11341]  ? __pfx_copy_splice_read+0x10/0x10
[  398.149532][T11341]  ? __pfx___mutex_lock+0x10/0x10
[  398.149542][T11341]  ? __fget_files+0x1fc/0x3a0
[  398.149553][T11341]  ? lock_acquire+0x2f/0xb0
[  398.149565][T11341]  ? __fget_files+0x40/0x3a0
[  398.149574][T11341]  ? __pfx_copy_splice_read+0x10/0x10
[  398.149587][T11341]  do_splice_read+0x282/0x370
[  398.149602][T11341]  splice_file_to_pipe+0x109/0x120
[  398.149617][T11341]  do_sendfile+0x3fd/0xe40
[  398.149632][T11341]  ? __pfx_do_sendfile+0x10/0x10
[  398.149646][T11341]  ? __might_fault+0xe3/0x190
[  398.149658][T11341]  ? __might_fault+0xe3/0x190
[  398.149670][T11341]  __x64_sys_sendfile64+0x155/0x220
[  398.149681][T11341]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  398.149694][T11341]  do_syscall_64+0xcd/0x250
[  398.149706][T11341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.149720][T11341] RIP: 0033:0x7faf4438cde9
[  398.149728][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.149738][T11341] RSP: 002b:00007faf4528a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  398.149747][T11341] RAX: ffffffffffffffda RBX: 00007faf445a6160 RCX: 00007faf4438cde9
[  398.149753][T11341] RDX: 0000400000000240 RSI: 0000000000000008 RDI: 000000000000000a
[  398.149759][T11341] RBP: 00007faf4440e2a0 R08: 0000000000000000 R09: 0000000000000000
[  398.149764][T11341] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  398.149770][T11341] R13: 0000000000000000 R14: 00007faf445a6160 R15: 00007fffefb293c8
[  398.149778][T11341]  </TASK>
[  398.499142][   T29] audit: type=1400 audit(1739963468.137:1409): avc:  denied  { open } for  pid=11335 comm="syz.7.1381" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  398.523743][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  398.533683][    T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  398.544242][    T8] asix 6-1:0.0: probe with driver asix failed with error -61
[  398.554503][   T29] audit: type=1400 audit(1739963468.187:1410): avc:  denied  { ioctl } for  pid=11337 comm="syz.4.1382" path="socket:[28088]" dev="sockfs" ino=28088 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  399.742718][    T8] usb 6-1: USB disconnect, device number 31