last executing test programs:

1m42.498858409s ago: executing program 1 (id=334):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
connect$unix(r0, 0x0, 0xfffffeee)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b)
readv(r2, &(0x7f0000000000), 0x0)
write$binfmt_script(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000007000000"], 0x50)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r4})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = dup(r5)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)

1m38.969992448s ago: executing program 1 (id=349):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x4e23, @multicast2}})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000080), 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x83, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1, 0x0, 0x3231564e, 0x4, 0x1, [{0x9, 0x80000001}, {0x10000, 0x10000}, {0xfffffff1, 0xe49}, {0x2, 0x100}, {0xd1a4, 0x6}, {0x18, 0x3}, {0x0, 0x8}, {0x2, 0x401}], 0x10, 0x10, 0x3b5d31d310848330, 0x0, 0x1}})
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'hmac(sha1)\x00'}})

1m37.991197107s ago: executing program 1 (id=352):
socket$qrtr(0x2a, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000))
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$video(0x0, 0x7, 0x40580)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x2}, &(0x7f0000000180)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r3, r7], 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209})
io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10)
r12 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18)

1m36.984291534s ago: executing program 1 (id=357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x2, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x1e}, {0xf000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x900, [0x0, 0x0, 0x0, 0x3]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)

1m36.737100945s ago: executing program 1 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000400)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "5e19da5c5549f443"}, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

1m36.327563406s ago: executing program 1 (id=361):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
iopl(0x3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x4080)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1})
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0)
close(0x3)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})

1m35.966013451s ago: executing program 32 (id=361):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
iopl(0x3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', <r2=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x4080)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1})
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0)
close(0x3)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})

9.392763259s ago: executing program 5 (id=656):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x42c, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x418, 0x1, [@m_skbmod={0x188, 0x2020, 0x0, 0x0, {{0xb}, {0xdc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xfffffffc, 0x7, 0x200, 0x7}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x1, 0x3000000a, 0x2, 0x80000003}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x7fff, 0x20000000, 0x1, 0x4}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10, 0xa1, 0x2, 0xfffffffe, 0x2}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x62bc, 0x3, 0x5, 0x769}, 0x3}}]}, {0x84, 0x6, "3160690b954228cd51bf8b0f52b71a5696cf74a92524a5e399c933fbc4f926fe4a4c648bd6afeec803459a3b60e96271cd23bed30fdbae7a15104df846f8613926ac7eae155f816dddf49c875b72e8c7c6afdce10b5f3cd055869de0a570fd1899fa5a6e464a45d455cc51431e2204bf35e5b608073cb52a67c71b1074303103"}, {0xc, 0x7, {0x67bdb80157c26324, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7a, 0x725, 0x4, 0xf, 0x7ff}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x158, 0x1d, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x47b, 0x1, 0x8, 0x91e3, 0x713d}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0xffffffff, 0x3, 0x800, 0x9}, 0xb}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x5, 0xffffffffffffffff, 0x2007, 0x7}, 0xd}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x6f, 0x6, "fb6f4cdf36ebed2b00e98d6492a072d9bdb77ff68051d21e4bc45f4c40c02813febb8c841e3ecc61ddc0f8fc9ccb8e9998fcc14011654343d29c912ded7888b549f9caf16d6386b7749657f1b2c1835494d7d94790354eaa445df4043f4a51c4ab1dd7af7d7587f7ceeb70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xe0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0xb2, 0x6, "a48b78da95fc81ec59b32248081e7f11b0736da9d814ed35313a6db2b0305bef386938d00fe05f04fc65bccd8e276d45020a304e539fdabe1dc34e5acc64d62d0d31f166f9939079f83ebf09807faeda866f62b1a56386ba230775037435ccd77a06939c935946b859f9a4b57c24b1484ba22c1d02bb50dae9b4585ecb639cff05c3ef4024830bd9d3b6b35bc9eb26124391ebf3c0f86b835a3799d5cace0ad5cd1b3f2dc594d9843c5c4746e4e3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x42c}}, 0x4048880)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000406030000000000000000000000000005000100070000"], 0x5c}}, 0x0)

8.743556256s ago: executing program 3 (id=659):
socket$alg(0x26, 0x5, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x180)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x25, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x809000}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r3, 0x401870c8, &(0x7f0000000040)=0x3)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$inet(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}, {&(0x7f0000000200)="fc", 0x1}], 0x2}}], 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f00000200000001"], 0x50)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b08d25a80648c7494f90224fc60580002400c000400031f82c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.689093212s ago: executing program 5 (id=661):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000240)={0xd9b, 0x4ad75eeb8fc57834, 0x1})

8.531642341s ago: executing program 4 (id=662):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_WRITE_DEF_DATA_LEN={{0xa2}, 0x9}}}, 0x7)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)

8.275635909s ago: executing program 5 (id=664):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800300000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0)

8.073445341s ago: executing program 5 (id=666):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
utimensat(r1, 0x0, 0x0, 0x0)

8.071003353s ago: executing program 3 (id=667):
r0 = msgget(0x0, 0x2c4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfff, 0x2000)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe})
r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000010c0)={r2, r2, r3}, &(0x7f0000001100)=""/85, 0x55, &(0x7f0000001200)={&(0x7f0000001180)={'hmac(sha384-arm)\x00'}, &(0x7f00000011c0)="98f0116119fa9d166518fec3", 0xc})
keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'sha224-avx2\x00'}})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003600)=""/120)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x2, 0x0, 0x9})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x8, 0x101, 0x2, {0x1, @vbi={0x10001, 0x5, 0x2, 0x0, [0x0, 0x2], [0x10001, 0x4], 0x2}}, 0x4})
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/4096}, 0x1008, 0x3, 0x1000)
msgget(0x0, 0x2c4) (async)
syz_open_dev$sndctrl(&(0x7f0000000040), 0xfff, 0x2000) (async)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) (async)
add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f4", 0x1, 0xfffffffffffffffe) (async)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async)
keyctl$dh_compute(0x17, &(0x7f00000010c0)={r2, r2, r3}, &(0x7f0000001100)=""/85, 0x55, &(0x7f0000001200)={&(0x7f0000001180)={'hmac(sha384-arm)\x00'}, &(0x7f00000011c0)="98f0116119fa9d166518fec3", 0xc}) (async)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'sha224-avx2\x00'}}) (async)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003600)=""/120) (async)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x8, 0x1, 0x2, 0x0, 0x9}) (async)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x8, 0x101, 0x2, {0x1, @vbi={0x10001, 0x5, 0x2, 0x0, [0x0, 0x2], [0x10001, 0x4], 0x2}}, 0x4}) (async)
msgctl$IPC_RMID(r0, 0x0) (async)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/4096}, 0x1008, 0x3, 0x1000) (async)

7.997024919s ago: executing program 5 (id=668):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
connect$unix(r0, 0x0, 0xfffffeee)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b)
readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
write$binfmt_script(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r4})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = dup(r5)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)

7.79539631s ago: executing program 4 (id=669):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000280)=@x86={0x7f, 0x5, 0x7, 0x0, 0xfffffffd, 0x6, 0x75, 0x1, 0x9, 0x5, 0x3, 0x6, 0x0, 0x9, 0x800, 0x74, 0x9, 0x4, 0xc, '\x00', 0xc7, 0x3})
syz_io_uring_setup(0x1e1f, 0x0, &(0x7f0000002000), 0x0)
syz_io_uring_setup(0x644b, &(0x7f00000000c0)={0x0, 0xac3b, 0x2000, 0x1, 0x59}, 0x0, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x42, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x4d)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYRESHEX, @ANYRES32=r1, @ANYRESDEC], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0)
r4 = fsopen(&(0x7f0000002580)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

7.264852162s ago: executing program 3 (id=671):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r2, 0x0, 0x1}, 0x18)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x200, 0x6, 0x0, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r0, 0x80002)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001940)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25180600000800030014ef0179c3675a65386585a63c2d02fe1905dc0b3b", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x20000080)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x2, 0x5, 0x0, {0x7, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r8=>0x0], &(0x7f0000000200), 0x4, r7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r9], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r8], &(0x7f0000000040)})
r10 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r12=>0x0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0x3, 0x5, 0x7, 0x1}, 0x15, [0x4, 0xfff, 0x5, 0x1800000, 0x9, 0xffffffff, 0x4, 0xfffffff8, 0x4, 0x5, 0x28bc, 0x8, 0x3ff, 0x7ff, 0x7, 0x5, 0xaf0, 0xb72b, 0x100, 0xf, 0x9, 0x0, 0x1, 0x1, 0x13, 0x0, 0x1, 0x6, 0x4000000, 0x7, 0x3, 0x5, 0x400, 0x1, 0x9, 0x6, 0xfff, 0xfff, 0xe, 0x9691, 0x5, 0x1, 0x3ff, 0xffffff81, 0x8f, 0x80000001, 0x8, 0x6, 0x6, 0x1, 0xffff01b0, 0x0, 0x10001, 0x7, 0x2, 0x9, 0x4, 0x8, 0xe872, 0xc79, 0x142e, 0x3, 0x6, 0x8000], [0x2f, 0x80000001, 0x1, 0x800, 0x3, 0x7, 0x99, 0x6, 0x7fffffff, 0xffffffff, 0x8, 0xfff, 0x0, 0x4, 0xfffff096, 0x8, 0x80000001, 0x7f, 0x4, 0x9f6, 0x5, 0x96, 0xfffffff9, 0x8, 0xffff, 0x2, 0x818, 0x2, 0x1, 0x6, 0x4, 0x6, 0x6, 0x800, 0x6, 0xfffffffc, 0xa, 0xed2a, 0x5, 0xffc, 0x2, 0x5, 0x1, 0x5, 0x3, 0x3, 0x6, 0xc7, 0x2, 0x3269, 0x8, 0x5, 0x180000, 0x1, 0x2fb4, 0x7, 0xd, 0xd, 0x1, 0x6, 0x9, 0x9, 0xfffffff8, 0xff], [0x7, 0x100, 0x10001, 0x8, 0xffffffeb, 0x1700, 0x8, 0x4, 0xca, 0x1, 0xffffffff, 0x5, 0xff, 0x9, 0xb, 0xfffffffa, 0x80000000, 0x7f, 0x5, 0x6, 0x6, 0x3, 0x81, 0xfa, 0x80, 0x1, 0x5, 0x101, 0x1, 0x67, 0xa, 0x5, 0xe120, 0x4, 0xc9, 0xf, 0xffff, 0x80, 0x5, 0x3, 0x7, 0x1, 0x2, 0x0, 0x8, 0x4, 0x2, 0x401, 0xce3, 0x1ff, 0x6deb, 0x8, 0x100, 0x2, 0x2, 0x299240, 0xabe, 0x7ff, 0xd, 0xfffffffb, 0xf2, 0x8000, 0x45, 0x7], [0x40, 0x7, 0x8, 0x10, 0x9, 0x5, 0x2, 0xaf, 0x0, 0xc0d8, 0x42a, 0x8, 0x5, 0xef, 0x4, 0x7, 0x32f, 0x6, 0x10001, 0x5, 0x4fa9, 0xe45, 0x6, 0x0, 0x9, 0xd, 0x718, 0x0, 0x8, 0x9, 0x1, 0x7f, 0x2, 0xf, 0x6, 0xffff, 0x10000, 0xff, 0xc, 0x8000, 0x8000, 0x996, 0x6, 0xfe98, 0x1, 0x6, 0x2, 0x2, 0x0, 0x8, 0x3, 0xf7b0, 0xc1, 0xfffffffa, 0x8000, 0x9e6c, 0x1, 0x8, 0xffffff8c, 0x3, 0x6, 0x101, 0x7, 0x1800]}, 0x45c)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0xfffffffffffffd5f, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r12, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x40)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x76d, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r13}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000009c0)=@ethtool_eee={0x45, 0xde3c, 0xa, 0xffffff83, 0xfffffffb, 0x5, 0xfffffffe, 0x4, [0x0, 0x1]}})
setresgid(0x0, 0x0, 0xee01)

6.531145747s ago: executing program 4 (id=674):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r3})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@local, 0x7e, r3})
pwrite64(r1, &(0x7f0000000140)="f5cdfd8f5567b782d9fafc5c45a1ddf2358e33bcfcb8539b467dcce6419916b33c93be0bd082540985a058d1c98719f90535abe5f611dbc997ef00a1949ffd19857b1de043d0cd22a9881c46f0f6aff5e4fa8f8d", 0x54, 0x7f4c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={<r7=>0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="740100001700010027bd7000fedbdf25ac1e0101000000000000000000000000000004d4ff0000000a010102000000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e2101004e2000030200e0203b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa000000000000000000000000ffffffff00e7ffffff000000000000004e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000000000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd700008001f000400000044000500ac1e0101000000000000000000000000000004d22b0000000200000000000000000000000000ffffe00000020535000004010900b90a00000900000001000000"], 0x174}}, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f00000000c0)={"07bcaeb3711cd7192582c4e828c82f72d4da77e27d263e176149c6589a80", 0x5116, 0x9, 0x1abe, [0x0, 0x6, 0x0, 0xffffff00, 0x800, 0x7fffffff, 0x3ff, 0x2, 0x745, 0x0, 0x100, 0xb74a, 0x10000, 0xf9c, 0x1, 0x4, 0x1, 0xdba0]})

5.591887927s ago: executing program 0 (id=675):
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000))

5.52159349s ago: executing program 2 (id=676):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$MSR(&(0x7f0000000080), 0x7, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

5.520758962s ago: executing program 3 (id=677):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x803, 0x341c40)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000700)=@t={0x81, 0x8, 0x8, 0xf})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)={0x2, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x6000, 0x62, &(0x7f0000000600)=""/98}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94)
unshare(0x64000600)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10)

5.506723704s ago: executing program 0 (id=678):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000d77364454b0000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x3e)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0xffffffff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, &(0x7f0000000140))

5.467330165s ago: executing program 4 (id=679):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000d77364454b0000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x3e)
r0 = socket(0x10, 0x80002, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140))

5.01157531s ago: executing program 2 (id=680):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = userfaultfd(0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpid()
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1894b2211f6acab3c757b8b44c1a73a14cc81b0e4177d6f76c886d6d5bfa11dffb38a30d8cd3", 0x26, 0x894, &(0x7f0000000040)={0x11, 0x5, r1, 0x1, 0x51, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00'})

4.747155102s ago: executing program 0 (id=681):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
acct(0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000240)={[{}, {@subsystem='cpuacct'}]})
read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/40, 0x28)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x8000, @local, 0x80000000}}}, 0x3a)
ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280))

4.422003261s ago: executing program 2 (id=682):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="7da0faf5f9edbffae52484764ec963e001bf0b7619b877ecc437563c979ae004d7db25b1148c8f598ba501cdfcd863fd98e2bb3ab775545aa2d26f44dd31900cedc6a6d4ad5d2aca6bba40d492a454118440bdfc3605b0cfe2df11917011b2b38904c3d9fb89781e"], 0x28}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x3c, @private=0xa010100, 0x4e24, 0x3, 'dh\x00', 0x4, 0x9, 0x2a}, 0x2c)
r4 = socket$isdn(0x22, 0x2, 0x26)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$isdn(r4, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x190c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
shutdown(r5, 0x1)
recvfrom$inet(r5, 0x0, 0x0, 0x40000122, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)

4.414259431s ago: executing program 4 (id=683):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000037, &(0x7f0000000000)=0x4001, 0x4)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20)
r3 = socket(0x2c, 0x80000, 0xfffffffc)
r4 = socket(0x1d, 0x2, 0x4e69)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x2c, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xe, 0x0, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x16}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4004014)
syz_open_dev$dri(0x0, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r9 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r9, 0x641e)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r10 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
r11 = fsmount(0xffffffffffffffff, 0x0, 0xf0)
ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f0000000ac0)={{0x2, 0x4e20, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x40, {0x2, 0x4e24, @private=0xa010102}, 'ip6gre0\x00'})
syz_usb_control_io(r10, &(0x7f00000001c0)={0x2c, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000100)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa8, 0x9, 0xd, 0xd1, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xf, 0xc, 0x1ff}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x10, 0x9, 0x2, "2de8a8be", "49f75fbd"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x0, 0xb3, 0x4, 0x1, 0x9, 0x9}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0xa, 0x41, "bd9ef7d206110ed7959d5ff76e88c27c0f358665f81125e6910350b98cd1ffc91c9dccbb0ddd0a60859cf2bcbf89f1f952d89333d30bb4f0237a9e56d8ac999c27"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000880)=ANY=[@ANYBLOB="2000040f000000100000e7203269fc62e75f37643706fade47a60f9f5bc3713bf294cfb4145bfb0eb1c0d898392ff86f38e5075246040b2f8b4c07edd2798b7a631e7c93a42cc301fa908c08391e007620774cc637824290294ef91d243a98b1ab49fa220920734027224bc6f88c8a48a6e27cb3f5ee50aa5f9ca837683293ae9559a89f9c1e27d050e9c5027da8b3100192d763ac01049f8ad385f1edf5494697918f88518a89ff20"], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x1d}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "d01d"}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ea21"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x76dc}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x38}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf9}})

4.28752126s ago: executing program 3 (id=684):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000001500)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000880)=""/241, 0xf1}], 0x5}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000a00)={0x0, <r2=>0x0})
prlimit64(r2, 0x7, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0))
ioctl$TCXONC(r5, 0x540a, 0x3)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10)
close(r6)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)

4.208561437s ago: executing program 0 (id=685):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0}, 0x10)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000280)=@x86={0x7f, 0x5, 0x7, 0x0, 0xfffffffd, 0x6, 0x75, 0x1, 0x9, 0x5, 0x3, 0x6, 0x0, 0x9, 0x800, 0x74, 0x9, 0x4, 0xc, '\x00', 0xc7, 0x3})
syz_io_uring_setup(0x1e1f, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000), &(0x7f00000004c0)=<r2=>0x0)
syz_io_uring_setup(0x644b, &(0x7f00000000c0)={0x0, 0xac3b, 0x2000, 0x1, 0x59}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x42, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYRESHEX=r2, @ANYRES32=r5, @ANYRESDEC=r4], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r7, &(0x7f00000000c0), 0x2c8, 0x0)
r8 = fsopen(&(0x7f0000002580)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0)
fsmount(r8, 0x0, 0x29)
sched_setscheduler(0x0, 0x6, &(0x7f0000000340)=0x37)

2.387966437s ago: executing program 2 (id=686):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000d77364454b0000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x3e)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0xffffffff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140))

1.717756494s ago: executing program 5 (id=687):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x2f)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(r8, &(0x7f0000000480)='./file1/file2\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0)

1.693752286s ago: executing program 2 (id=688):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000880)=""/241, 0xf1}], 0x4}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000a00)={0x0, <r2=>0x0})
prlimit64(r2, 0x7, 0x0, &(0x7f0000000080))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0))
ioctl$TCXONC(r5, 0x540a, 0x3)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10)
close(r6)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)

1.628177059s ago: executing program 0 (id=689):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000d77364454b0000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x3e)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0xffffffff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140))

1.586464226s ago: executing program 3 (id=690):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000040000d77364454b0000000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x3e)
r0 = socket(0x10, 0x80002, 0x0)
socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x8000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140))

346.635562ms ago: executing program 2 (id=691):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x800}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffffffffffffff0c, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0xd8, 0x30, 0x8, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4, 0x6, "17b9cbe8fc24a78f1c775d348c607b360474fa6b7fca16532625"}, {0xc, 0x3}, {0xc}}}]}]}, 0xd8}}, 0x4000000) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32)
ioprio_get$pid(0x2, 0x0) (async, rerun: 32)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000880)=""/4096, 0x0, 0x1800, 0xc, 0x3}, 0x20)
r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x400100)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000140), 0x4) (async)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x1}, 0x2) (async)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

164.486211ms ago: executing program 4 (id=692):
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
capset(0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000740)="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", 0x150)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}})

0s ago: executing program 0 (id=693):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = userfaultfd(0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getpid()
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r6, 0x4b3a, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="1894b2211f6acab3c757b8b44c1a73a14cc81b0e4177d6f76c886d6d5bfa11dffb38a30d8cd3", 0x26, 0x894, &(0x7f0000000040)={0x11, 0x5, r1, 0x1, 0x51, 0x6, @broadcast}, 0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00'})

kernel console output (not intermixed with test programs):

ms_vblank_simulate: vblank timer overrun
[  119.884855][ T6929] delete_channel: no stack
[  120.487365][ T5869] usb 2-1: USB disconnect, device number 10
[  120.608256][ T6945] delete_channel: no stack
[  120.767868][   T30] audit: type=1400 audit(1742925521.436:469): avc:  denied  { create } for  pid=6971 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  120.796655][   T30] audit: type=1400 audit(1742925521.446:470): avc:  denied  { getopt } for  pid=6971 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  120.821434][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  121.909211][ T5868] usb 4-1: Using ep0 maxpacket: 8
[  121.935878][ T5868] usb 4-1: too many configurations: 65, using maximum allowed: 8
[  122.918559][ T5868] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  122.927797][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.935877][ T5868] usb 4-1: Product: syz
[  122.952321][ T5868] usb 4-1: Manufacturer: syz
[  123.139157][ T5868] usb 4-1: SerialNumber: syz
[  123.149941][ T5868] usb 4-1: config 0 descriptor??
[  123.176297][ T6978] delete_channel: no stack
[  123.277959][ T5827] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  123.557941][ T5868] gspca_main: 04a5:3003 too many config
[  123.584372][ T5868] usb 4-1: USB disconnect, device number 7
[  123.686541][ T6990] delete_channel: no stack
[  123.999980][ T5827] usb 3-1: device descriptor read/all, error -71
[  124.413092][ T7008] fuse: Bad value for 'fd'
[  124.864605][ T7021] tmpfs: Bad value for 'mpol'
[  125.173192][   T30] audit: type=1400 audit(1742925525.436:471): avc:  denied  { name_bind } for  pid=7019 comm="syz.0.246" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  125.273580][ T7032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'.
[  125.329046][ T7033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.246'.
[  125.571073][   T30] audit: type=1400 audit(1742925525.546:472): avc:  denied  { mounton } for  pid=7013 comm="syz.3.244" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  125.665376][   T30] audit: type=1400 audit(1742925525.556:473): avc:  denied  { ioctl } for  pid=7013 comm="syz.3.244" path="socket:[12834]" dev="sockfs" ino=12834 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  125.838155][   T30] audit: type=1400 audit(1742925525.616:474): avc:  denied  { getopt } for  pid=7013 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  125.866109][   T30] audit: type=1400 audit(1742925525.916:475): avc:  denied  { read } for  pid=7017 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  126.251726][ T7040] netlink: 236 bytes leftover after parsing attributes in process `syz.4.249'.
[  126.459163][ T5827] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  126.512600][ T7087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7087 comm=syz.0.253
[  126.528667][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=110 sclass=netlink_route_socket pid=7088 comm=syz.0.253
[  126.541875][   T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  126.619912][ T5868] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  126.630374][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.649175][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  126.670610][ T5827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.679924][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  126.699359][ T5827] usb 3-1: SerialNumber: syz
[  126.710270][   T48] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  126.730069][   T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.741876][   T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  126.755173][   T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.768552][   T48] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  126.778306][   T48] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  126.787464][   T48] usb 4-1: Product: syz
[  126.791889][   T48] usb 4-1: Manufacturer: syz
[  126.799297][ T5868] usb 5-1: Using ep0 maxpacket: 16
[  126.806999][   T48] cdc_wdm 4-1:1.0: skipping garbage
[  126.807690][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  126.815406][   T48] cdc_wdm 4-1:1.0: skipping garbage
[  126.831136][ T5868] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  126.832450][   T48] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  126.855489][ T5868] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  126.875772][ T5868] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  126.889408][ T5868] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  126.901218][ T5868] usb 5-1: config 1 interface 0 has no altsetting 0
[  126.907919][ T5868] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  126.918807][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.933008][ T5868] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  127.002412][ T5827] usb 3-1: 0:2 : does not exist
[  127.007371][ T5827] usb 3-1: unit 5: unexpected type 0x09
[  127.021716][ T5869] usb 4-1: USB disconnect, device number 8
[  127.023927][ T5827] usb 3-1: USB disconnect, device number 14
[  127.049654][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  127.136847][ T5868] scsi host1: usb-storage 5-1:1.0
[  127.209155][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  127.216100][ T5867] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  127.220105][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.224218][ T5867] usb 1-1: config 0 has no interface number 0
[  127.253291][ T5867] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=72.17
[  127.264298][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.272468][ T5867] usb 1-1: Product: syz
[  127.276622][ T5867] usb 1-1: Manufacturer: syz
[  127.283434][ T5867] usb 1-1: SerialNumber: syz
[  127.288988][ T5867] usb 1-1: config 0 descriptor??
[  127.295869][ T5867] kvaser_usb 1-1:0.4: error -ENODEV: Cannot get usb endpoint(s)
[  127.353943][ T5867] usb 5-1: USB disconnect, device number 11
[  128.884465][ T7133] netlink: 56 bytes leftover after parsing attributes in process `syz.0.255'.
[  128.975896][ T7135] SELinux:  policydb string length 0 does not match expected length 8
[  128.978151][   T30] audit: type=1400 audit(1742925529.656:476): avc:  denied  { load_policy } for  pid=7134 comm="syz.4.260" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  129.013868][ T7135] SELinux: failed to load policy
[  129.065813][   T30] audit: type=1400 audit(1742925529.746:477): avc:  denied  { getopt } for  pid=7136 comm="syz.1.262" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.087479][ T7146] overlayfs: missing 'lowerdir'
[  129.091843][ T7142] openvswitch: netlink: Duplicate or invalid key (type 0).
[  129.111956][ T7142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.164162][ T7137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.262'.
[  129.181661][   T30] audit: type=1400 audit(1742925529.846:478): avc:  denied  { write } for  pid=7136 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  129.205762][   T30] audit: type=1400 audit(1742925529.846:479): avc:  denied  { nlmsg_write } for  pid=7136 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  129.206273][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'.
[  129.265029][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'.
[  129.319406][   T30] audit: type=1400 audit(1742925529.946:480): avc:  denied  { ioctl } for  pid=7150 comm="syz.2.265" path="socket:[12950]" dev="sockfs" ino=12950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  129.345126][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.379535][ T7152] hsr_slave_0: left promiscuous mode
[  129.385348][ T7152] hsr_slave_1: left promiscuous mode
[  129.839256][  T908] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  129.981299][ T5867] usb 1-1: USB disconnect, device number 10
[  130.011746][  T908] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.369191][  T908] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  130.390388][  T908] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  130.411911][  T908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.177596][  T908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  131.485928][  T908] usb 4-1: invalid MIDI out EP 0
[  131.552354][  T908] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  131.571447][ T7184] overlayfs: failed to verify upper root origin
[  131.587563][  T908] usb 4-1: USB disconnect, device number 9
[  131.660369][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.705893][ T7189] fuse: Bad value for 'fd'
[  131.862703][ T7195] FAULT_INJECTION: forcing a failure.
[  131.862703][ T7195] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  131.939563][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.4.279 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  131.939590][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  131.939606][ T7195] Call Trace:
[  131.939611][ T7195]  <TASK>
[  131.939617][ T7195]  dump_stack_lvl+0x16c/0x1f0
[  131.939649][ T7195]  should_fail_ex+0x50a/0x650
[  131.939670][ T7195]  _copy_from_user+0x2e/0xd0
[  131.939690][ T7195]  video_usercopy+0xefd/0x1650
[  131.939714][ T7195]  ? __pfx___video_do_ioctl+0x10/0x10
[  131.939734][ T7195]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  131.939753][ T7195]  ? __pfx_video_usercopy+0x10/0x10
[  131.939784][ T7195]  v4l2_ioctl+0x1ba/0x250
[  131.939803][ T7195]  ? __pfx_v4l2_ioctl+0x10/0x10
[  131.939823][ T7195]  __x64_sys_ioctl+0x190/0x200
[  131.939843][ T7195]  do_syscall_64+0xcd/0x250
[  131.939860][ T7195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.939882][ T7195] RIP: 0033:0x7f2de618d169
[  131.939895][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.939911][ T7195] RSP: 002b:00007f2de70b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  131.939927][ T7195] RAX: ffffffffffffffda RBX: 00007f2de63a5fa0 RCX: 00007f2de618d169
[  131.939938][ T7195] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003
[  131.939948][ T7195] RBP: 00007f2de70b4090 R08: 0000000000000000 R09: 0000000000000000
[  131.939958][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  131.939967][ T7195] R13: 0000000000000000 R14: 00007f2de63a5fa0 R15: 00007ffe1bb4d5b8
[  131.939986][ T7195]  </TASK>
[  132.667271][   T30] audit: type=1400 audit(1742925532.856:481): avc:  denied  { unmount } for  pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  132.673712][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  132.698823][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  132.759995][   T30] audit: type=1400 audit(1742925532.996:482): avc:  denied  { ioctl } for  pid=7204 comm="syz.0.282" path="pid:[4026532794]" dev="nsfs" ino=4026532794 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  133.580541][   T30] audit: type=1400 audit(1742925533.816:483): avc:  denied  { create } for  pid=7214 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  133.649811][   T30] audit: type=1400 audit(1742925533.836:484): avc:  denied  { ioctl } for  pid=7214 comm="syz.4.284" path="socket:[13085]" dev="sockfs" ino=13085 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  134.098119][   T30] audit: type=1400 audit(1742925534.226:485): avc:  denied  { ioctl } for  pid=7213 comm="syz.3.285" path="socket:[13090]" dev="sockfs" ino=13090 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  134.179242][ T5868] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  134.313927][   T30] audit: type=1400 audit(1742925534.226:486): avc:  denied  { ioctl } for  pid=7213 comm="syz.3.285" path="socket:[13092]" dev="sockfs" ino=13092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  134.354172][   T30] audit: type=1400 audit(1742925534.686:487): avc:  denied  { create } for  pid=7230 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.412793][   T30] audit: type=1400 audit(1742925534.686:488): avc:  denied  { connect } for  pid=7230 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.450802][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'.
[  134.469480][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[  134.482252][   T30] audit: type=1400 audit(1742925534.766:489): avc:  denied  { write } for  pid=7230 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.540745][   T30] audit: type=1400 audit(1742925534.886:490): avc:  denied  { setopt } for  pid=7238 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  134.622905][ T5868] usb 3-1: config index 0 descriptor too short (expected 8228, got 36)
[  134.634752][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.650400][ T7253] netlink: 332 bytes leftover after parsing attributes in process `syz.4.293'.
[  134.675796][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.707741][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.849883][ T5868] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01
[  134.870586][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.935104][ T5868] usb 3-1: config 0 descriptor??
[  135.619335][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  135.920062][ T7283] netlink: 52 bytes leftover after parsing attributes in process `syz.3.297'.
[  135.990944][ T5868] usbhid 3-1:0.0: can't add hid device: -71
[  135.996918][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  136.016413][ T5868] usb 3-1: USB disconnect, device number 15
[  136.023792][ T5869] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  136.063543][ T5869] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  136.090033][ T7287] xt_hashlimit: size too large, truncated to 1048576
[  136.099000][ T5869] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  136.121989][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.152883][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  136.170324][ T5869] usb 2-1: invalid MIDI out EP 0
[  136.208987][ T5869] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  136.210815][ T7290] veth0_to_bond: entered promiscuous mode
[  136.238514][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'.
[  136.268157][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.298744][ T7290] veth0_to_bond (unregistering): left promiscuous mode
[  136.335424][ T7290] bond0: (slave bond_slave_0): Releasing backup interface
[  137.022124][ T5827] usb 2-1: USB disconnect, device number 11
[  137.668284][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'.
[  137.677248][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'.
[  137.687256][ T7300] netlink: 'syz.4.302': attribute type 12 has an invalid length.
[  137.719199][ T5869] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  137.818552][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.306'.
[  137.872132][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  137.898804][ T5869] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  137.909373][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  137.918566][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.048507][ T7302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.694916][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  138.749565][ T7315] delete_channel: no stack
[  139.140029][ T5869] usb 4-1: USB disconnect, device number 10
[  139.790055][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  139.790071][   T30] audit: type=1400 audit(1742925540.476:499): avc:  denied  { ioctl } for  pid=7331 comm="syz.4.311" path="socket:[13302]" dev="sockfs" ino=13302 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  139.909436][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  140.039343][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  140.122812][ T5867] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.192847][ T5867] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.340054][ T5867] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.353213][ T5869] usb 1-1: Using ep0 maxpacket: 16
[  140.359018][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.377516][ T7336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  141.356913][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  141.398738][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  141.421403][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.736365][ T5869] usb 1-1: Product: syz
[  141.878425][ T5827] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  142.474672][ T5869] usb 1-1: Manufacturer: syz
[  142.624088][ T5869] usb 1-1: SerialNumber: syz
[  142.722376][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  142.809384][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.829415][ T5869] r8152-cfgselector 1-1: Unknown version 0x0000
[  142.963491][   T30] audit: type=1400 audit(1742925543.506:500): avc:  denied  { read write } for  pid=7360 comm="syz.4.316" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  142.986894][ T5869] r8152-cfgselector 1-1: config 0 descriptor??
[  142.989204][ T5869] r8152-cfgselector 1-1: can't set config #0, error -71
[  143.009504][ T5827] usb 4-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  143.030664][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.065536][   T30] audit: type=1400 audit(1742925543.506:501): avc:  denied  { open } for  pid=7360 comm="syz.4.316" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  143.074049][ T5869] r8152-cfgselector 1-1: USB disconnect, device number 11
[  143.108959][ T5827] usb 4-1: config 0 descriptor??
[  143.157244][   T30] audit: type=1400 audit(1742925543.746:502): avc:  denied  { setopt } for  pid=7360 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  143.215299][   T48] usb 3-1: USB disconnect, device number 16
[  143.241431][ T5827] usbhid 4-1:0.0: can't add hid device: -71
[  143.267976][ T5827] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  143.289306][ T5827] usb 4-1: USB disconnect, device number 11
[  143.382764][ T7371] mkiss: ax0: crc mode is auto.
[  143.397872][   T30] audit: type=1400 audit(1742925544.076:503): avc:  denied  { setopt } for  pid=7370 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  143.417778][ T7371] syz.1.319: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.436359][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.1.319 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  143.436388][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.436400][ T7371] Call Trace:
[  143.436405][ T7371]  <TASK>
[  143.436413][ T7371]  dump_stack_lvl+0x16c/0x1f0
[  143.436448][ T7371]  warn_alloc+0x24d/0x3a0
[  143.436475][ T7371]  ? __pfx_warn_alloc+0x10/0x10
[  143.436500][ T7371]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  143.436532][ T7371]  ? kasan_save_stack+0x42/0x60
[  143.436557][ T7371]  ? kasan_save_stack+0x33/0x60
[  143.436579][ T7371]  ? kasan_save_track+0x14/0x30
[  143.436602][ T7371]  ? __kasan_kmalloc+0xaa/0xb0
[  143.436623][ T7371]  ? xskq_create+0x52/0x1d0
[  143.436644][ T7371]  ? do_sock_setsockopt+0x222/0x480
[  143.436663][ T7371]  ? __sys_setsockopt+0x1a0/0x230
[  143.436688][ T7371]  ? __x64_sys_setsockopt+0xbd/0x160
[  143.436718][ T7371]  __vmalloc_node_range_noprof+0x10dc/0x1530
[  143.436746][ T7371]  ? xskq_create+0xfb/0x1d0
[  143.436771][ T7371]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.436797][ T7371]  ? xskq_create+0xfb/0x1d0
[  143.436817][ T7371]  vmalloc_user_noprof+0x6b/0x90
[  143.436838][ T7371]  ? xskq_create+0xfb/0x1d0
[  143.436858][ T7371]  xskq_create+0xfb/0x1d0
[  143.436879][ T7371]  xsk_setsockopt+0x64a/0x850
[  143.436900][ T7371]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.436918][ T7371]  ? __lock_acquire+0x5b6/0x1b80
[  143.436941][ T7371]  ? selinux_socket_setsockopt+0x6a/0x80
[  143.436968][ T7371]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.436987][ T7371]  do_sock_setsockopt+0x222/0x480
[  143.437006][ T7371]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  143.437034][ T7371]  __sys_setsockopt+0x1a0/0x230
[  143.437068][ T7371]  __x64_sys_setsockopt+0xbd/0x160
[  143.437094][ T7371]  ? do_syscall_64+0x91/0x250
[  143.437110][ T7371]  ? lockdep_hardirqs_on+0x7c/0x110
[  143.437144][ T7371]  do_syscall_64+0xcd/0x250
[  143.437163][ T7371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.437192][ T7371] RIP: 0033:0x7f3e37f8d169
[  143.437208][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.437228][ T7371] RSP: 002b:00007f3e38dd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.437247][ T7371] RAX: ffffffffffffffda RBX: 00007f3e381a5fa0 RCX: 00007f3e37f8d169
[  143.437259][ T7371] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  143.437269][ T7371] RBP: 00007f3e3800e2a0 R08: 0000000000000004 R09: 0000000000000000
[  143.437280][ T7371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.437290][ T7371] R13: 0000000000000000 R14: 00007f3e381a5fa0 R15: 00007fff126ce7b8
[  143.437309][ T7371]  </TASK>
[  143.437381][ T7371] Mem-Info:
[  143.710524][ T7371] active_anon:5802 inactive_anon:1 isolated_anon:0
[  143.710524][ T7371]  active_file:1977 inactive_file:38979 isolated_file:0
[  143.710524][ T7371]  unevictable:768 dirty:888 writeback:0
[  143.710524][ T7371]  slab_reclaimable:11056 slab_unreclaimable:99879
[  143.710524][ T7371]  mapped:30516 shmem:1619 pagetables:1028
[  143.710524][ T7371]  sec_pagetables:0 bounce:0
[  143.710524][ T7371]  kernel_misc_reclaimable:0
[  143.710524][ T7371]  free:1327404 free_pcp:2905 free_cma:0
[  143.755661][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.762001][ T7371] Node 0 active_anon:23608kB inactive_anon:4kB active_file:7884kB inactive_file:155840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122564kB dirty:3548kB writeback:0kB shmem:5340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11444kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no
[  143.794346][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.800620][ T7371] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  143.830763][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.862812][ T7371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.889914][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.906498][ T7371] lowmem_reserve[]: 0 2487 2487 2487 2487
[  143.912371][ T7371] Node 0 DMA32 free:1383912kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:32608kB inactive_anon:4kB active_file:7884kB inactive_file:155748kB unevictable:1536kB writepending:3548kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:3956kB local_pcp:2212kB free_cma:0kB
[  143.942703][    C1] vkms_vblank_simulate: vblank timer overrun
[  143.963440][ T7371] lowmem_reserve[]: 0 0 0 0 0
[  143.981700][ T7371] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  144.008365][    C1] vkms_vblank_simulate: vblank timer overrun
[  144.015342][ T5827] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  144.024366][ T7371] lowmem_reserve[]: 0 0 0 0 0
[  144.029969][ T7371] Node 1 Normal free:3901452kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6564kB local_pcp:112kB free_cma:0kB
[  144.059236][    C1] vkms_vblank_simulate: vblank timer overrun
[  144.160336][ T7371] lowmem_reserve[]: 0 0 0 0 0
[  144.165703][ T7371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  144.179826][ T5827] usb 4-1: Using ep0 maxpacket: 16
[  144.189889][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  144.189897][ T7371] Node 0 
[  144.200500][ T5827] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  144.774540][ T5827] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  144.780337][ T7371] DMA32: 354*4kB (UM) 273*8kB (UME) 203*16kB (UM) 184*32kB (UME) 103*64kB (UME) 57*128kB (ME) 27*256kB (UME) 12*512kB (M) 6*1024kB (ME) 3*2048kB (UME) 328*4096kB (M) = 1395456kB
[  144.953632][ T5827] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  145.047116][ T5827] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  145.069673][ T7371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  145.072940][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0
[  145.163177][ T5827] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  145.173114][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.217039][ T5827] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  145.275238][ T7371] Node 1 Normal: 3*4kB (UM) 2*8kB (UE) 6*16kB (UE) 78*32kB (UME) 96*64kB (UME) 26*128kB (UME) 14*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3901756kB
[  145.295393][ T7371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  145.311227][ T7371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  145.321742][ T7371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  145.333650][ T7371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  145.343232][ T7371] 42370 total pagecache pages
[  145.348356][ T7371] 1 pages in swap cache
[  145.358362][ T7371] Free swap  = 124748kB
[  145.364495][ T7371] Total swap = 124996kB
[  145.368817][ T7371] 2097051 pages RAM
[  145.369708][   T30] audit: type=1400 audit(1742925546.046:504): avc:  denied  { read } for  pid=7390 comm="syz.0.323" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.375033][ T7371] 0 pages HighMem/MovableOnly
[  145.402630][ T7371] 428567 pages reserved
[  145.406829][ T7371] 0 pages cma reserved
[  145.411635][   T30] audit: type=1400 audit(1742925546.076:505): avc:  denied  { open } for  pid=7390 comm="syz.0.323" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.441286][   T30] audit: type=1400 audit(1742925546.076:506): avc:  denied  { ioctl } for  pid=7390 comm="syz.0.323" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  145.469844][ T5827] scsi host1: usb-storage 4-1:1.0
[  145.477170][   T30] audit: type=1400 audit(1742925546.076:507): avc:  denied  { bind } for  pid=7390 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  145.505379][   T30] audit: type=1400 audit(1742925546.086:508): avc:  denied  { create } for  pid=7390 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  145.525371][    C1] vkms_vblank_simulate: vblank timer overrun
[  145.535297][   T30] audit: type=1400 audit(1742925546.116:509): avc:  denied  { write } for  pid=7390 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  145.751075][ T5868] usb 4-1: USB disconnect, device number 12
[  145.826617][ T5827] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  146.034499][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.050012][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  146.217391][ T5827] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  146.229211][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.247786][ T5827] usb 1-1: config 0 descriptor??
[  146.255225][ T5827] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  146.329268][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  146.572388][ T7399] delete_channel: no stack
[  146.920458][ T5869] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  146.934828][ T5869] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  146.946011][ T5869] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.955273][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.967899][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  146.975325][ T5869] usb 2-1: invalid MIDI out EP 0
[  146.993923][ T5869] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  147.023812][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.139202][ T5827] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  147.169182][  T908] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  147.323899][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.344086][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.357235][ T5827] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  147.368147][  T908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  147.433710][  T908] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  147.451691][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.508135][ T5827] usb 5-1: config 0 descriptor??
[  147.519954][  T908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  147.574972][  T908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.591140][  T908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  147.599516][   T48] usb 2-1: USB disconnect, device number 12
[  147.609420][  T908] usb 3-1: invalid MIDI out EP 0
[  147.625792][   T30] audit: type=1400 audit(1742925548.306:510): avc:  denied  { read append } for  pid=7416 comm="syz.3.330" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  147.637197][  T908] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  147.654008][   T30] audit: type=1400 audit(1742925548.306:511): avc:  denied  { open } for  pid=7416 comm="syz.3.330" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  147.718266][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.975884][ T5827] sony 0003:054C:1000.0007: unknown main item tag 0x0
[  147.983338][ T5827] sony 0003:054C:1000.0007: unknown main item tag 0x0
[  147.991613][ T5827] sony 0003:054C:1000.0007: unknown main item tag 0x0
[  147.998948][ T5827] sony 0003:054C:1000.0007: unknown main item tag 0x0
[  148.012777][ T5827] sony 0003:054C:1000.0007: unknown main item tag 0x0
[  148.012921][ T5869] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  148.020896][ T5827] sony 0003:054C:1000.0007: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.4-1/input0
[  148.043825][ T5827] sony 0003:054C:1000.0007: failed to claim input
[  148.229249][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  148.253667][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.274847][ T5869] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  148.292807][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.303666][ T5869] usb 4-1: config 0 descriptor??
[  148.306266][ T5827] usb 3-1: USB disconnect, device number 17
[  148.311747][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  148.603068][ T7421] FAULT_INJECTION: forcing a failure.
[  148.603068][ T7421] name failslab, interval 1, probability 0, space 0, times 0
[  148.628648][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.3.331 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  148.628673][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  148.628682][ T7421] Call Trace:
[  148.628687][ T7421]  <TASK>
[  148.628693][ T7421]  dump_stack_lvl+0x16c/0x1f0
[  148.628725][ T7421]  should_fail_ex+0x50a/0x650
[  148.628742][ T7421]  ? fs_reclaim_acquire+0xae/0x150
[  148.628766][ T7421]  ? tomoyo_realpath_from_path+0xb9/0x720
[  148.628780][ T7421]  should_failslab+0xc2/0x120
[  148.628805][ T7421]  __kmalloc_noprof+0xcb/0x510
[  148.628831][ T7421]  tomoyo_realpath_from_path+0xb9/0x720
[  148.628848][ T7421]  ? tomoyo_profile+0x47/0x60
[  148.628867][ T7421]  tomoyo_path_number_perm+0x248/0x590
[  148.628887][ T7421]  ? tomoyo_path_number_perm+0x235/0x590
[  148.628909][ T7421]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  148.628931][ T7421]  ? find_held_lock+0x2b/0x80
[  148.628967][ T7421]  ? find_held_lock+0x2b/0x80
[  148.628988][ T7421]  ? __fget_files+0x204/0x3b0
[  148.629011][ T7421]  ? __fget_files+0x20e/0x3b0
[  148.629033][ T7421]  security_file_ioctl+0x9b/0x240
[  148.629057][ T7421]  __x64_sys_ioctl+0xb7/0x200
[  148.629075][ T7421]  do_syscall_64+0xcd/0x250
[  148.629092][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.629114][ T7421] RIP: 0033:0x7f935938d169
[  148.629127][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.629142][ T7421] RSP: 002b:00007f935a108038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  148.629157][ T7421] RAX: ffffffffffffffda RBX: 00007f93595a5fa0 RCX: 00007f935938d169
[  148.629168][ T7421] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[  148.629177][ T7421] RBP: 00007f935a108090 R08: 0000000000000000 R09: 0000000000000000
[  148.629187][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.629196][ T7421] R13: 0000000000000000 R14: 00007f93595a5fa0 R15: 00007fff285d5998
[  148.629215][ T7421]  </TASK>
[  148.899833][ T7421] ERROR: Out of memory at tomoyo_realpath_from_path.
[  148.904757][   T48] usb 1-1: USB disconnect, device number 12
[  148.907260][ T7421] input: syz1 as /devices/virtual/input/input9
[  148.955238][ T5178] bcm5974 4-1:0.0: could not read from device
[  148.962043][ T5869] usb 4-1: USB disconnect, device number 13
[  148.971397][ T5836] bcm5974 4-1:0.0: could not read from device
[  149.239603][ T5819] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  149.283514][ T5827] usb 5-1: USB disconnect, device number 12
[  149.396727][   T30] audit: type=1400 audit(1742925550.076:512): avc:  denied  { create } for  pid=7445 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  149.437675][   T30] audit: type=1400 audit(1742925550.106:513): avc:  denied  { write } for  pid=7445 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  149.490323][ T5819] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  149.501572][ T5819] usb 2-1: config 179 has no interface number 0
[  149.509601][ T5819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  149.531739][ T5819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  149.550142][ T5819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  149.575481][ T5819] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  149.606328][ T5819] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  149.747790][ T5819] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  149.757141][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.768156][ T7431] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  149.784124][ T5819] xpad 2-1:179.65: probe with driver xpad failed with error -5
[  150.638500][ T7431] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.937348][ T5869] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  150.939836][ T7487] veth0_vlan: entered allmulticast mode
[  150.986973][ T7487] veth0_vlan: left promiscuous mode
[  150.995748][ T7487] veth0_vlan: entered promiscuous mode
[  151.559208][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  151.577951][ T5869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  151.600444][ T5869] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  151.632926][ T5869] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  151.643242][ T5869] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  151.653438][ T5869] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  151.676943][ T5869] usb 4-1: config 1 interface 0 has no altsetting 0
[  151.694436][ T5869] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  151.734336][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.868426][ T5869] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  152.209253][ T5819] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  152.359629][ T5869] scsi host1: usb-storage 4-1:1.0
[  152.367430][ T5869] usb 4-1: USB disconnect, device number 14
[  152.379616][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  152.379631][   T30] audit: type=1400 audit(1742925553.066:515): avc:  denied  { watch } for  pid=7501 comm="syz.2.348" path="/80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  152.441081][ T5827] usb 2-1: USB disconnect, device number 13
[  152.449597][   T30] audit: type=1400 audit(1742925553.116:516): avc:  denied  { watch_sb watch_reads } for  pid=7501 comm="syz.2.348" path="/80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  152.516542][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  152.543283][ T5819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.569133][ T5819] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  152.578380][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.600052][ T5819] usb 5-1: config 0 descriptor??
[  153.013955][ T5819] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  153.022004][ T5819] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  153.039302][ T5819] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  153.051347][ T5819] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  153.066527][ T5819] sony 0003:054C:1000.0008: unknown main item tag 0x0
[  153.087234][ T5819] sony 0003:054C:1000.0008: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.4-1/input0
[  153.137948][ T5819] sony 0003:054C:1000.0008: failed to claim input
[  153.528956][   T30] audit: type=1400 audit(1742925554.206:517): avc:  denied  { create } for  pid=7521 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  154.307564][   T30] audit: type=1400 audit(1742925554.986:518): avc:  denied  { create } for  pid=7531 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  154.548528][   T30] audit: type=1400 audit(1742925555.226:519): avc:  denied  { mount } for  pid=7534 comm="syz.1.357" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  154.617030][   T30] audit: type=1400 audit(1742925555.256:520): avc:  denied  { mounton } for  pid=7534 comm="syz.1.357" path="/60/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  154.638703][    C1] vkms_vblank_simulate: vblank timer overrun
[  154.696998][   T30] audit: type=1400 audit(1742925555.376:521): avc:  denied  { unmount } for  pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  154.801963][ T5869] usb 5-1: USB disconnect, device number 13
[  154.848430][   T30] audit: type=1400 audit(1742925555.526:522): avc:  denied  { read } for  pid=7540 comm="syz.4.359" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  154.894263][   T30] audit: type=1400 audit(1742925555.556:523): avc:  denied  { open } for  pid=7540 comm="syz.4.359" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  154.957318][   T30] audit: type=1400 audit(1742925555.566:524): avc:  denied  { ioctl } for  pid=7540 comm="syz.4.359" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  155.132934][ T3487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.292683][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'.
[  155.358677][ T3487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.434791][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'.
[  155.498611][ T3487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.623901][ T3487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.850445][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.946812][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.957632][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.969770][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.981875][ T5817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.991436][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.114306][   T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  156.122349][   T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  156.132332][   T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  156.141437][   T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  156.156983][   T56] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  156.165219][   T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.245312][ T3487] bridge_slave_1: left allmulticast mode
[  156.282169][ T3487] bridge_slave_1: left promiscuous mode
[  156.320081][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.352854][ T3487] bridge_slave_0: left allmulticast mode
[  156.358678][ T3487] bridge_slave_0: left promiscuous mode
[  156.365643][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.681903][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.691963][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.702312][ T3487] bond0 (unregistering): Released all slaves
[  156.709332][ T5870] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  156.829910][ T5827] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  156.889767][ T5870] usb 1-1: Using ep0 maxpacket: 16
[  156.906748][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  156.930016][ T5870] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  156.941074][ T5870] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  156.960009][ T5870] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  156.987402][ T5870] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  156.997955][ T5870] usb 1-1: config 1 interface 0 has no altsetting 0
[  157.009224][ T5870] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  157.031329][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.036248][ T5827] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  157.149673][ T5870] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  157.165608][ T5827] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  157.287589][ T5827] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  157.351692][ T5870] scsi host1: usb-storage 1-1:1.0
[  157.385834][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.404876][ T7572] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  157.415486][ T5827] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  157.540334][ T3487] hsr_slave_0: left promiscuous mode
[  157.566648][ T3487] hsr_slave_1: left promiscuous mode
[  157.582069][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.596708][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.619170][ T5869] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  157.619882][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.649551][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.660393][ T5868] usb 1-1: USB disconnect, device number 13
[  157.822691][ T5869] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  158.031461][ T5869] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  158.087408][ T5869] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  158.096623][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.102899][ T3487] veth1_macvtap: left promiscuous mode
[  158.126071][ T3487] veth0_macvtap: left promiscuous mode
[  158.127690][ T5869] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  158.165341][ T3487] veth1_vlan: left promiscuous mode
[  158.198262][ T5869] usb 4-1: invalid MIDI out EP 0
[  158.199164][ T3487] veth0_vlan: left promiscuous mode
[  158.270234][   T56] Bluetooth: hci4: command tx timeout
[  158.324537][ T5869] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  158.713370][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  158.833635][ T5868] usb 4-1: USB disconnect, device number 15
[  158.902473][ T5869] usb 3-1: USB disconnect, device number 18
[  159.063752][ T3487] team0 (unregistering): Port device team_slave_1 removed
[  159.091549][ T3487] team0 (unregistering): Port device team_slave_0 removed
[  159.316422][ T7554] chnl_net:caif_netlink_parms(): no params data found
[  159.599297][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.678520][ T5827] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  159.846461][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.860666][ T7554] bridge_slave_0: entered allmulticast mode
[  159.908537][ T7622] netlink: 'syz.2.375': attribute type 3 has an invalid length.
[  159.923346][ T7554] bridge_slave_0: entered promiscuous mode
[  159.957387][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.976705][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.984704][ T7554] bridge_slave_1: entered allmulticast mode
[  160.000822][ T5827] usb 4-1: Using ep0 maxpacket: 32
[  160.045037][ T7554] bridge_slave_1: entered promiscuous mode
[  160.053323][ T5827] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.067953][ T5827] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  160.107728][ T5827] usb 4-1: config 0 interface 0 has no altsetting 0
[  160.114631][ T5827] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  160.124492][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.150761][ T5827] usb 4-1: config 0 descriptor??
[  160.160863][ T7554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.212972][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.258870][ T7554] team0: Port device team_slave_0 added
[  160.277920][ T7554] team0: Port device team_slave_1 added
[  160.320385][   T56] Bluetooth: hci4: command tx timeout
[  160.388806][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.407973][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.441722][ T7554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.454195][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.461514][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.487655][ T7554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.611675][ T5827] corsair-cpro 0003:1B1C:0C10.0009: item fetching failed at offset 4/5
[  160.635826][ T5827] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -22
[  161.163358][ T7613] program syz.3.373 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.230402][ T7554] hsr_slave_0: entered promiscuous mode
[  161.236460][ T7554] hsr_slave_1: entered promiscuous mode
[  161.273351][ T5869] usb 4-1: USB disconnect, device number 16
[  161.335483][ T7647] delete_channel: no stack
[  161.526716][ T7554] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  161.755276][ T7554] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  161.766538][ T7554] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  161.804388][ T7554] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  161.872627][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.879409][ T5870] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  161.907474][ T7554] 8021q: adding VLAN 0 to HW filter on device team0
[  161.941488][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.949459][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.015323][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.022462][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.051032][ T5870] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  162.083560][ T5870] usb 5-1: config 179 has no interface number 0
[  162.092960][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  162.120595][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  162.138051][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  162.154426][ T5870] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  162.166822][ T5870] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  162.184919][ T5870] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  162.194424][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.207826][ T7663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  162.216805][ T5870] xpad 5-1:179.65: probe with driver xpad failed with error -5
[  162.335171][ T7554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.399273][   T56] Bluetooth: hci4: command tx timeout
[  162.472689][ T7663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  162.629148][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  162.690399][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.759184][ T5867] usb 4-1: device descriptor read/64, error -71
[  163.049804][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  163.454593][ T5867] usb 4-1: device descriptor read/64, error -71
[  163.524495][ T7554] veth0_vlan: entered promiscuous mode
[  163.570458][ T5867] usb usb4-port1: attempt power cycle
[  163.598253][ T7554] veth1_vlan: entered promiscuous mode
[  163.629721][ T7554] veth0_macvtap: entered promiscuous mode
[  163.638048][ T7554] veth1_macvtap: entered promiscuous mode
[  163.654692][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.666339][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.676792][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.995355][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.006301][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.017815][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.294091][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  164.691781][   T56] Bluetooth: hci4: command tx timeout
[  164.698909][ T7729] delete_channel: no stack
[  164.747422][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.790471][ T5867] usb 4-1: device descriptor read/8, error -71
[  164.818257][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.969867][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.070807][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.085342][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.095552][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.106300][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.116356][ T5867] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  165.119132][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.138351][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.148313][ T7554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.158938][ T7554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.169405][ T5867] usb 4-1: device descriptor read/8, error -71
[  165.170332][ T5826] usb 5-1: USB disconnect, device number 14
[  165.176359][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.240018][ T7554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.260604][ T7554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.269830][ T7554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.278540][ T7554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.287698][ T5867] usb usb4-port1: unable to enumerate USB device
[  165.904473][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.938309][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.040349][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.048673][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.080022][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  166.080038][   T30] audit: type=1400 audit(1742925566.756:528): avc:  denied  { mounton } for  pid=7554 comm="syz-executor" path="/root/syzkaller.t9iK3e/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  166.560946][   T30] audit: type=1400 audit(1742925566.826:529): avc:  denied  { mount } for  pid=7554 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  166.625777][   T30] audit: type=1400 audit(1742925567.186:530): avc:  denied  { mounton } for  pid=7554 comm="syz-executor" path="/root/syzkaller.t9iK3e/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  167.183804][   T30] audit: type=1400 audit(1742925567.186:531): avc:  denied  { mounton } for  pid=7554 comm="syz-executor" path="/root/syzkaller.t9iK3e/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  167.663170][   T30] audit: type=1400 audit(1742925567.236:532): avc:  denied  { mounton } for  pid=7554 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  167.855364][   T30] audit: type=1400 audit(1742925567.286:533): avc:  denied  { mounton } for  pid=7554 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  169.305910][ T7802] delete_channel: no stack
[  169.933899][ T7819] netlink: 180 bytes leftover after parsing attributes in process `syz.5.407'.
[  170.527185][ T7815] delete_channel: no stack
[  171.205715][ T7847] netlink: 'syz.0.409': attribute type 3 has an invalid length.
[  172.704381][   T30] audit: type=1400 audit(1742925573.366:534): avc:  denied  { create } for  pid=7865 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  172.849368][   T30] audit: type=1400 audit(1742925573.366:535): avc:  denied  { shutdown } for  pid=7865 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  172.877404][ T7883] netlink: 'syz.5.416': attribute type 3 has an invalid length.
[  172.899221][   T30] audit: type=1400 audit(1742925573.486:536): avc:  denied  { sys_chroot } for  pid=7879 comm="dhcpcd" capability=18  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  172.923699][   T30] audit: type=1400 audit(1742925573.486:537): avc:  denied  { setgid } for  pid=7879 comm="dhcpcd" capability=6  scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1
[  172.969158][   T30] audit: type=1400 audit(1742925573.486:538): avc:  denied  { setrlimit } for  pid=7879 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1
[  173.286689][ T7894] input: syz0 as /devices/virtual/input/input11
[  173.315228][   T30] audit: type=1400 audit(1742925573.996:539): avc:  denied  { map } for  pid=7891 comm="syz.3.419" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  174.488869][ T7918] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.498027][ T7918] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.506854][ T7918] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.515576][ T7918] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.533176][   T30] audit: type=1400 audit(1742925575.206:540): avc:  denied  { shutdown } for  pid=7904 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.578315][   T30] audit: type=1400 audit(1742925575.216:541): avc:  denied  { listen } for  pid=7904 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.597636][    C0] vkms_vblank_simulate: vblank timer overrun
[  174.646994][   T30] audit: type=1400 audit(1742925575.286:542): avc:  denied  { accept } for  pid=7904 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  174.740240][ T7918] sctp: failed to load transform for md5: -2
[  174.997283][ T5867] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  175.189204][ T5867] usb 1-1: Using ep0 maxpacket: 16
[  175.209644][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  175.263573][ T5867] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  175.631419][ T5867] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  175.709840][ T5867] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  175.721064][ T5867] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  175.732844][ T5867] usb 1-1: config 1 interface 0 has no altsetting 0
[  175.744771][ T5867] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  175.768847][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.801348][ T5867] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  176.271024][ T5867] scsi host1: usb-storage 1-1:1.0
[  176.789351][ T5867] usb 1-1: USB disconnect, device number 14
[  177.229220][ T5868] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  177.771242][ T5868] usb 6-1: too many configurations: 23, using maximum allowed: 8
[  177.787555][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  177.797217][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.805596][ T5868] usb 6-1: Product: syz
[  178.039286][ T5868] usb 6-1: Manufacturer: syz
[  178.060346][ T5868] usb 6-1: SerialNumber: syz
[  178.280839][ T5868] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  178.337508][ T5867] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  179.856105][  T908] usb 6-1: USB disconnect, device number 2
[  180.325593][ T5867] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  180.626839][ T5867] ath9k_htc: Failed to initialize the device
[  180.649546][  T908] usb 6-1: ath9k_htc: USB layer deinitialized
[  180.684506][ T8009] netlink: 'syz.5.441': attribute type 3 has an invalid length.
[  180.875030][ T8015] fuse: Bad value for 'group_id'
[  180.898150][ T8015] fuse: Bad value for 'group_id'
[  180.998819][ T8019] netlink: 'syz.4.445': attribute type 3 has an invalid length.
[  181.346701][   T30] audit: type=1400 audit(1742925582.026:543): avc:  denied  { append } for  pid=8026 comm="syz.0.449" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  181.520921][ T8029] ubi31: attaching mtd0
[  181.552141][ T8029] ubi31: scanning is finished
[  181.556894][ T8029] ubi31: empty MTD device detected
[  181.894436][   T30] audit: type=1400 audit(1742925582.276:544): avc:  denied  { write } for  pid=8026 comm="syz.0.449" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  181.917557][   T30] audit: type=1400 audit(1742925582.366:545): avc:  denied  { write } for  pid=8026 comm="syz.0.449" path="socket:[17619]" dev="sockfs" ino=17619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  182.167828][ T8029] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  182.175807][ T8029] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  182.304166][ T8029] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  182.312359][ T8029] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  182.321456][ T8029] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  182.830028][ T8029] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  182.862167][ T8029] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1780876726
[  182.918535][ T8029] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  182.929001][  T908] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  183.561435][ T8041] ubi31: background thread "ubi_bgt31d" started, PID 8041
[  183.741713][  T908] usb 1-1: unable to get BOS descriptor or descriptor too short
[  183.830215][  T908] usb 1-1: not running at top speed; connect to a high speed hub
[  183.840727][  T908] usb 1-1: config 8 has an invalid interface number: 24 but max is 0
[  183.849141][  T908] usb 1-1: config 8 has no interface number 0
[  183.859245][  T908] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  183.859260][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  184.009352][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  184.046798][  T908] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  184.068351][  T908] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  184.077858][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  184.091731][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  184.115836][  T908] usb 1-1: config 8 interface 24 has no altsetting 0
[  185.059528][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  185.069389][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  185.079157][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  185.088904][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0
[  185.117743][  T908] usb 1-1: string descriptor 0 read error: -71
[  185.123949][ T5870] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  185.123974][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.131168][ T5870] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  185.323059][  T908] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  185.332829][  T908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.343022][  T908] usb 1-1: can't set config #8, error -71
[  185.351703][  T908] usb 1-1: USB disconnect, device number 15
[  185.362094][ T5870] scsi host1: usb-storage 4-1:1.0
[  185.652155][ T5870] usb 4-1: USB disconnect, device number 21
[  187.311553][ T5868] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  187.529228][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  187.549114][ T5868] usb 1-1: Using ep0 maxpacket: 16
[  187.561007][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  187.584660][ T5868] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  187.615323][ T5868] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  187.644018][ T5868] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  187.674844][ T5868] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  187.686295][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  187.726794][ T5870] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.738797][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0
[  187.754966][ T5868] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  188.234913][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  188.278205][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.291973][ T8136] netlink: 'syz.2.465': attribute type 3 has an invalid length.
[  188.303328][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.325112][ T5868] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  188.413436][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  188.427049][ T5870] usb 5-1: invalid MIDI out EP 0
[  188.506636][ T5870] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  188.522326][   T30] audit: type=1326 audit(1742925589.206:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f935938d169 code=0x0
[  188.584823][ T5868] scsi host1: usb-storage 1-1:1.0
[  188.645506][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.717296][   T30] audit: type=1400 audit(1742925589.256:547): avc:  denied  { read } for  pid=8143 comm="syz.3.466" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  189.119743][ T5826] usb 1-1: USB disconnect, device number 16
[  189.177706][ T5868] usb 5-1: USB disconnect, device number 15
[  189.339372][ T5827] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  189.762807][ T5827] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  189.777831][ T5827] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  189.797883][ T5827] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  189.825709][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.290439][ T8152] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  190.300769][ T5827] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  190.991656][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  191.083335][ T5868] usb 6-1: USB disconnect, device number 3
[  191.350501][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  191.376242][    T9] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  191.852058][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  191.861474][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.884659][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  191.893750][    T9] usb 1-1: invalid MIDI out EP 0
[  191.930826][    T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  192.051945][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.767514][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  193.777410][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  193.984213][  T908] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  194.210641][  T908] usb 5-1: Using ep0 maxpacket: 16
[  194.294285][  T908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  194.344440][  T908] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  194.398182][  T908] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  194.500573][  T908] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  194.561371][ T5827] usb 1-1: USB disconnect, device number 17
[  194.570692][  T908] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  194.613446][  T908] usb 5-1: config 1 interface 0 has no altsetting 0
[  194.649396][  T908] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  194.772219][  T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.966954][  T908] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  195.025291][   T30] audit: type=1400 audit(1742925595.706:548): avc:  denied  { name_connect } for  pid=8247 comm="syz.2.482" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  195.197871][  T908] scsi host1: usb-storage 5-1:1.0
[  195.205655][   T30] audit: type=1400 audit(1742925595.876:549): avc:  denied  { write } for  pid=8247 comm="syz.2.482" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  195.715792][  T908] usb 5-1: USB disconnect, device number 16
[  195.831946][   T30] audit: type=1400 audit(1742925596.506:550): avc:  denied  { append } for  pid=8263 comm="syz.0.485" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  196.009313][   T30] audit: type=1400 audit(1742925596.526:551): avc:  denied  { ioctl } for  pid=8263 comm="syz.0.485" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  197.359598][  T908] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  197.712034][  T908] usb 5-1: config index 0 descriptor too short (expected 8228, got 36)
[  197.739100][  T908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.770691][  T908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.019139][  T908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  198.062020][  T908] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01
[  198.115540][  T908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.249234][ T8307] netlink: 64 bytes leftover after parsing attributes in process `syz.5.493'.
[  198.309271][ T5827] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  198.395981][  T908] usb 5-1: config 0 descriptor??
[  198.411719][ T8320] netlink: 'syz.3.494': attribute type 3 has an invalid length.
[  198.540736][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.592976][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.768589][ T5827] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  198.939230][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.959867][  T908] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0
[  199.448120][  T908] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0
[  199.455708][ T5827] usb 3-1: config 0 descriptor??
[  199.461545][  T908] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0
[  199.514687][  T908] hid-rmi 0003:1532:011D.000A: unknown main item tag 0x0
[  199.528048][  T908] hid-rmi 0003:1532:011D.000A: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  199.554834][  T908] usb 5-1: USB disconnect, device number 17
[  199.946389][ T5827] sony 0003:054C:1000.000B: unknown main item tag 0x0
[  199.975979][ T5827] sony 0003:054C:1000.000B: unknown main item tag 0x0
[  200.008242][ T5827] sony 0003:054C:1000.000B: unknown main item tag 0x0
[  200.082554][ T5827] sony 0003:054C:1000.000B: unknown main item tag 0x0
[  200.108202][ T5827] sony 0003:054C:1000.000B: unknown main item tag 0x0
[  200.634179][ T5827] sony 0003:054C:1000.000B: hidraw0: USB HID v0.00 Device [HID 054c:1000] on usb-dummy_hcd.2-1/input0
[  200.678372][ T5827] sony 0003:054C:1000.000B: failed to claim input
[  200.969161][ T5868] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  201.209735][ T5827] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  201.241003][ T5868] usb 1-1: Using ep0 maxpacket: 16
[  201.299117][ T5868] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  201.339159][ T5868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.364429][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.384349][ T5868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.402527][ T5827] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  201.405206][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.438657][ T5827] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  201.448781][ T5868] usb 1-1: Product: syz
[  201.453414][ T5868] usb 1-1: Manufacturer: syz
[  201.463240][ T5868] usb 1-1: SerialNumber: syz
[  201.474399][ T5827] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  201.485787][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.541268][ T8363] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  201.716978][ T5867] usb 3-1: USB disconnect, device number 19
[  201.990269][ T5868] usb 1-1: 0:2 : does not exist
[  202.422167][ T8388] kvm: emulating exchange as write
[  202.440001][   T30] audit: type=1400 audit(1742925603.116:552): avc:  denied  { read } for  pid=8386 comm="syz.2.507" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  202.473889][   T30] audit: type=1400 audit(1742925603.116:553): avc:  denied  { open } for  pid=8386 comm="syz.2.507" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  202.605865][   T30] audit: type=1400 audit(1742925603.116:554): avc:  denied  { open } for  pid=8386 comm="syz.2.507" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  202.783625][ T5868] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  202.808020][   T30] audit: type=1400 audit(1742925603.146:555): avc:  denied  { ioctl } for  pid=8386 comm="syz.2.507" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  202.888189][ T5868] usb 1-1: USB disconnect, device number 18
[  202.888277][ T5827] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  203.184508][ T6366] udevd[6366]: setting mode of /dev/bus/usb/001/018 to 020664 failed: No such file or directory
[  203.198829][ T8397] netlink: 64 bytes leftover after parsing attributes in process `syz.4.509'.
[  203.250023][ T5827] usb 5-1: USB disconnect, device number 18
[  204.140421][ T6366] udevd[6366]: setting owner of /dev/bus/usb/001/018 to uid=0, gid=0 failed: No such file or directory
[  204.160021][ T6366] udevd[6366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.298973][ T8412] fuse: Bad value for 'fd'
[  204.476570][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  205.245339][ T8430] overlayfs: failed to resolve './file1': -2
[  205.378171][ T8433] ALSA: seq fatal error: cannot create timer (-22)
[  205.744678][ T5867] IPVS: starting estimator thread 0...
[  205.849467][ T8443] IPVS: using max 42 ests per chain, 100800 per kthread
[  205.858666][   T30] audit: type=1400 audit(1742925606.516:556): avc:  denied  { append } for  pid=8450 comm="syz.3.522" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  205.892717][ T8451] mkiss: ax0: crc mode is auto.
[  205.941868][ T5868] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  205.958559][ T8451] mkiss: ax0: crc mode is auto.
[  205.967514][   T30] audit: type=1400 audit(1742925606.586:557): avc:  denied  { sqpoll } for  pid=8452 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  206.119174][ T5868] usb 3-1: device descriptor read/64, error -71
[  206.239320][ T5827] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  206.358996][ T8521] FAULT_INJECTION: forcing a failure.
[  206.358996][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.375092][ T5868] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  206.397948][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.3.525 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  206.397976][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  206.397986][ T8521] Call Trace:
[  206.397991][ T8521]  <TASK>
[  206.397998][ T8521]  dump_stack_lvl+0x16c/0x1f0
[  206.398030][ T8521]  should_fail_ex+0x50a/0x650
[  206.398050][ T8521]  _copy_to_user+0x32/0xd0
[  206.398071][ T8521]  simple_read_from_buffer+0xe0/0x170
[  206.398094][ T8521]  proc_fail_nth_read+0x198/0x270
[  206.398116][ T8521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  206.398138][ T8521]  ? rw_verify_area+0xcf/0x680
[  206.398157][ T8521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  206.398185][ T8521]  vfs_read+0x1df/0xbf0
[  206.398207][ T8521]  ? __pfx___mutex_lock+0x10/0x10
[  206.398223][ T8521]  ? __pfx_vfs_read+0x10/0x10
[  206.398249][ T8521]  ? __fget_files+0x20e/0x3b0
[  206.398276][ T8521]  ksys_read+0x12b/0x250
[  206.398296][ T8521]  ? __pfx_ksys_read+0x10/0x10
[  206.398316][ T8521]  ? rcu_is_watching+0x12/0xc0
[  206.398344][ T8521]  do_syscall_64+0xcd/0x250
[  206.398361][ T8521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.398384][ T8521] RIP: 0033:0x7f935938bb7c
[  206.398398][ T8521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  206.398415][ T8521] RSP: 002b:00007f935a108030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  206.398431][ T8521] RAX: ffffffffffffffda RBX: 00007f93595a5fa0 RCX: 00007f935938bb7c
[  206.398442][ T8521] RDX: 000000000000000f RSI: 00007f935a1080a0 RDI: 0000000000000005
[  206.398453][ T8521] RBP: 00007f935a108090 R08: 0000000000000000 R09: 0000000000000000
[  206.398462][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.398472][ T8521] R13: 0000000000000000 R14: 00007f93595a5fa0 R15: 00007fff285d5998
[  206.398490][ T8521]  </TASK>
[  206.787448][ T5868] usb 3-1: device descriptor read/64, error -71
[  207.029118][ T5827] usb 1-1: Using ep0 maxpacket: 8
[  207.035730][ T8535] fuse: Bad value for 'fd'
[  207.044573][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  207.077767][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.141064][ T5868] usb usb3-port1: attempt power cycle
[  207.161204][ T5827] usb 1-1: Product: syz
[  207.175596][ T5827] usb 1-1: Manufacturer: syz
[  207.190103][ T5827] usb 1-1: SerialNumber: syz
[  207.199584][ T5827] usb 1-1: config 0 descriptor??
[  207.337227][   T30] audit: type=1400 audit(1742925608.016:558): avc:  denied  { create } for  pid=8546 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  207.423919][ T5827] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  207.466045][   T30] audit: type=1400 audit(1742925608.146:559): avc:  denied  { listen } for  pid=8546 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  207.519274][  T908] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  207.751059][  T908] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  207.793593][  T908] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  207.815103][  T908] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  207.835700][  T908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.843092][ T5868] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  207.849441][ T8544] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  207.861256][  T908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  207.874491][   T30] audit: type=1400 audit(1742925608.146:560): avc:  denied  { read } for  pid=8546 comm="syz.4.531" path="socket:[19039]" dev="sockfs" ino=19039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  207.898243][   T30] audit: type=1400 audit(1742925608.146:561): avc:  denied  { append } for  pid=8546 comm="syz.4.531" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  207.930315][ T5868] usb 3-1: device descriptor read/8, error -71
[  208.249895][ T5868] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  208.501348][ T5868] usb 3-1: device descriptor read/8, error -71
[  208.620925][ T5868] usb usb3-port1: unable to enumerate USB device
[  208.651100][    T9] usb 6-1: USB disconnect, device number 4
[  209.674578][ T8564] netlink: 52 bytes leftover after parsing attributes in process `syz.2.533'.
[  209.748053][ T5827] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  209.843479][ T5827] usb 1-1: USB disconnect, device number 19
[  210.042653][ T8573] fuse: Bad value for 'fd'
[  210.635328][   T48] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  210.870500][   T48] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  210.881846][   T48] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  210.893098][   T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  210.902255][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.072433][ T8574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  211.085101][   T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  212.640240][ T8609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.548'.
[  212.939304][  T908] usb 3-1: USB disconnect, device number 24
[  213.010580][ T8612] FAULT_INJECTION: forcing a failure.
[  213.010580][ T8612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.028910][ T8612] CPU: 0 UID: 0 PID: 8612 Comm: syz.3.549 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  213.028936][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.028946][ T8612] Call Trace:
[  213.028952][ T8612]  <TASK>
[  213.028958][ T8612]  dump_stack_lvl+0x16c/0x1f0
[  213.028988][ T8612]  should_fail_ex+0x50a/0x650
[  213.029008][ T8612]  _copy_to_user+0x32/0xd0
[  213.029028][ T8612]  simple_read_from_buffer+0xe0/0x170
[  213.029052][ T8612]  proc_fail_nth_read+0x198/0x270
[  213.029073][ T8612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  213.029093][ T8612]  ? rw_verify_area+0xcf/0x680
[  213.029112][ T8612]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  213.029131][ T8612]  vfs_read+0x1df/0xbf0
[  213.029160][ T8612]  ? __pfx___mutex_lock+0x10/0x10
[  213.029175][ T8612]  ? __pfx_vfs_read+0x10/0x10
[  213.029199][ T8612]  ? __fget_files+0x20e/0x3b0
[  213.029225][ T8612]  ksys_read+0x12b/0x250
[  213.029244][ T8612]  ? __pfx_ksys_read+0x10/0x10
[  213.029263][ T8612]  ? rcu_is_watching+0x12/0xc0
[  213.029289][ T8612]  do_syscall_64+0xcd/0x250
[  213.029306][ T8612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.029328][ T8612] RIP: 0033:0x7f935938bb7c
[  213.029341][ T8612] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  213.029357][ T8612] RSP: 002b:00007f935a108030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  213.029373][ T8612] RAX: ffffffffffffffda RBX: 00007f93595a5fa0 RCX: 00007f935938bb7c
[  213.029383][ T8612] RDX: 000000000000000f RSI: 00007f935a1080a0 RDI: 0000000000000003
[  213.029392][ T8612] RBP: 00007f935a108090 R08: 0000000000000000 R09: 0000000000000000
[  213.029400][ T8612] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001
[  213.029409][ T8612] R13: 0000000000000001 R14: 00007f93595a5fa0 R15: 00007fff285d5998
[  213.029426][ T8612]  </TASK>
[  213.619384][   T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  213.866574][   T48] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  213.887935][   T48] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  214.005054][   T48] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  214.018627][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.529353][ T8616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.574692][   T48] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  214.670148][   T30] audit: type=1400 audit(1742925615.356:562): avc:  denied  { write } for  pid=8629 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  214.689622][    C1] vkms_vblank_simulate: vblank timer overrun
[  215.059192][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  215.072372][ T5826] usb 4-1: USB disconnect, device number 22
[  215.219175][ T5870] usb 5-1: Using ep0 maxpacket: 32
[  215.227846][ T5870] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.254931][ T5870] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  215.268965][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0
[  215.276307][ T5870] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  215.285822][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.302050][ T5870] usb 5-1: config 0 descriptor??
[  216.151281][ T5870] corsair-cpro 0003:1B1C:0C10.000C: item fetching failed at offset 1/5
[  216.181836][ T5870] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -22
[  216.615658][ T5826] usb 5-1: USB disconnect, device number 19
[  216.725990][ T8655] netlink: 'syz.0.561': attribute type 3 has an invalid length.
[  217.495943][   T30] audit: type=1400 audit(1742925618.176:563): avc:  denied  { shutdown } for  pid=8666 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  217.519225][ T5868] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  217.530726][   T48] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  217.812112][   T48] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.840404][ T5868] usb 1-1: Using ep0 maxpacket: 16
[  217.873582][   T48] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  217.943025][   T48] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  217.990913][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.054171][ T8665] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  218.083945][   T48] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  218.895133][ T5868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  218.904851][ T5868] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  218.916681][ T5868] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  218.927580][ T5868] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  218.938437][ T5868] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  218.948659][ T5868] usb 1-1: config 1 interface 0 has no altsetting 0
[  218.956232][ T5868] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  218.965961][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.985636][ T5868] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  219.237487][ T5868] scsi host1: usb-storage 1-1:1.0
[  219.344008][   T30] audit: type=1400 audit(1742925620.026:564): avc:  denied  { ioctl } for  pid=8690 comm="syz.4.570" path="socket:[19658]" dev="sockfs" ino=19658 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  219.422971][ T5868] usb 1-1: USB disconnect, device number 20
[  219.449490][   T30] audit: type=1326 audit(1742925620.136:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de618d169 code=0x7ffc0000
[  219.488789][   T30] audit: type=1326 audit(1742925620.136:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de618d169 code=0x7ffc0000
[  219.678420][   T30] audit: type=1326 audit(1742925620.276:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2de618d169 code=0x7ffc0000
[  219.705207][   T30] audit: type=1326 audit(1742925620.286:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de618d169 code=0x7ffc0000
[  219.754662][   T30] audit: type=1326 audit(1742925620.286:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8690 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de618d169 code=0x7ffc0000
[  220.443047][ T8707] netlink: 'syz.0.573': attribute type 39 has an invalid length.
[  220.497713][ T5868] usb 6-1: USB disconnect, device number 5
[  220.528991][ T8705] fuse: Unknown parameter 'group_id00000000000000000000'
[  220.568784][ T8707] bond0: (slave syz_tun): Releasing backup interface
[  220.722986][ T8714] netlink: 'syz.2.575': attribute type 3 has an invalid length.
[  221.329265][   T48] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  221.940064][ T5867] libceph: connect (1)[c::]:6789 error -101
[  221.950105][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  221.965603][ T5867] libceph: connect (1)[c::]:6789 error -101
[  221.979618][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  222.040476][   T48] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  222.310991][   T48] usb 5-1: config 179 has no interface number 0
[  222.317781][ T8740] ceph: No mds server is up or the cluster is laggy
[  222.318619][ T5867] libceph: connect (1)[c::]:6789 error -101
[  222.349626][   T48] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  222.351935][ T8752] input: syz0 as /devices/virtual/input/input12
[  222.379375][   T48] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  222.413372][   T48] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  222.413445][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  222.451088][   T48] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  222.473716][   T48] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  222.511193][   T30] audit: type=1400 audit(1742925623.156:570): avc:  denied  { append } for  pid=8753 comm="syz.3.583" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  222.541825][   T48] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  222.551873][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.584155][ T8720] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  222.679849][   T48] xpad 5-1:179.65: probe with driver xpad failed with error -5
[  222.909149][ T5868] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  223.411893][ T8720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.539306][ T5868] usb 1-1: Using ep0 maxpacket: 16
[  223.551256][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.563511][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.573549][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  223.586423][ T5827] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  223.598780][ T5868] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  223.609144][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.623079][ T5868] usb 1-1: config 0 descriptor??
[  223.769155][ T5827] usb 4-1: Using ep0 maxpacket: 32
[  223.775894][ T5827] usb 4-1: config 0 has no interfaces?
[  223.782949][ T5827] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[  223.794520][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.805875][ T5827] usb 4-1: Product: syz
[  224.367073][ T5827] usb 4-1: Manufacturer: syz
[  224.378410][ T5827] usb 4-1: SerialNumber: syz
[  224.396813][ T5827] usb 4-1: config 0 descriptor??
[  224.489645][ T8778] delete_channel: no stack
[  224.864245][ T5868] microsoft 0003:045E:07DA.000D: report is too long
[  224.882885][  T908] usb 5-1: USB disconnect, device number 20
[  224.884859][ T5868] microsoft 0003:045E:07DA.000D: item 0 4 0 8 parsing failed
[  224.906803][ T5868] microsoft 0003:045E:07DA.000D: parse failed
[  224.939308][ T5868] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22
[  225.285807][ T5868] usb 1-1: USB disconnect, device number 21
[  225.531023][ T8803] netlink: 64 bytes leftover after parsing attributes in process `syz.5.592'.
[  226.354505][ T5868] usb 4-1: USB disconnect, device number 23
[  228.132529][ T8824] delete_channel: no stack
[  230.411325][ T5867] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  230.659257][   T48] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  230.710433][ T5867] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  230.747400][ T5867] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  230.780474][ T5867] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  230.805035][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.875328][   T48] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  230.876459][ T8857] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  230.890713][   T48] usb 4-1: config 179 has no interface number 0
[  230.890749][   T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  230.905011][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  230.960464][   T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  231.015582][   T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  231.097850][   T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  231.205651][   T48] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  231.376422][   T48] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  231.760506][ T5827] usb 3-1: USB disconnect, device number 25
[  231.806523][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.951952][ T8864] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  232.028506][   T48] xpad 4-1:179.65: probe with driver xpad failed with error -5
[  232.221986][ T8864] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.173189][ T8895] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  233.449332][   T30] audit: type=1400 audit(1742925634.106:571): avc:  denied  { bind } for  pid=8896 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  233.515861][ T5827] usb 4-1: USB disconnect, device number 24
[  234.456447][ T8912] syz.2.621: attempt to access beyond end of device
[  234.456447][ T8912] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  234.501152][ T8912] (syz.2.621,8912,0):ocfs2_get_sector:1714 ERROR: status = -5
[  234.514047][ T8912] (syz.2.621,8912,0):ocfs2_sb_probe:753 ERROR: status = -5
[  234.521089][ T8918] input: syz1 as /devices/virtual/input/input13
[  234.531444][ T8912] (syz.2.621,8912,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  234.546104][ T8918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  234.547469][ T8912] (syz.2.621,8912,0):ocfs2_fill_super:1177 ERROR: status = -5
[  234.555564][ T8918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  234.608678][ T8912] SELinux:  Context : is not valid (left unmapped).
[  234.617856][   T30] audit: type=1400 audit(1742925635.296:572): avc:  denied  { relabelto } for  pid=8911 comm="syz.2.621" name="rdma.current" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  234.643773][   T30] audit: type=1400 audit(1742925635.296:573): avc:  denied  { associate } for  pid=8911 comm="syz.2.621" name="rdma.current" dev="tmpfs" ino=765 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":"
[  234.669193][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  234.819195][ T5870] usb 6-1: Using ep0 maxpacket: 16
[  234.836519][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  234.863851][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  234.871846][ T5870] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  234.887480][ T5870] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  234.898775][ T5870] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  234.909006][ T5870] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  234.919179][ T5870] usb 6-1: config 1 interface 0 has no altsetting 0
[  234.926197][ T5870] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  234.937555][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.052547][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  235.077702][ T5870] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  235.094202][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.124372][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  235.139342][ T5867] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  235.149906][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.163396][ T5867] usb 3-1: config 0 descriptor??
[  235.348105][ T5870] scsi host1: usb-storage 6-1:1.0
[  236.097677][  T908] usb 6-1: USB disconnect, device number 6
[  236.240868][   T30] audit: type=1400 audit(1742925636.926:574): avc:  denied  { create } for  pid=8942 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  236.252352][   T48] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  236.268134][   T30] audit: type=1400 audit(1742925636.946:575): avc:  denied  { read } for  pid=8942 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  236.287292][    C0] vkms_vblank_simulate: vblank timer overrun
[  236.539359][   T48] usb 5-1: Using ep0 maxpacket: 16
[  236.615363][   T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  236.706519][   T48] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  236.781601][   T48] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  236.781814][ T5867] usb 3-1: string descriptor 0 read error: -71
[  236.866080][   T48] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  236.898456][   T30] audit: type=1400 audit(1742925637.476:576): avc:  denied  { unlink } for  pid=5821 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":"
[  236.979778][   T48] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  237.028771][   T48] usb 5-1: config 1 interface 0 has no altsetting 0
[  237.045950][   T30] audit: type=1400 audit(1742925637.726:577): avc:  denied  { bind } for  pid=8948 comm="syz.2.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  237.076000][   T48] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  237.175622][ T5867] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  237.198318][ T5867] usb 3-1: USB disconnect, device number 26
[  237.200082][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.259808][ T8956] syz.0.633: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.284203][   T48] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  237.291856][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.0.633 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  237.291874][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  237.291881][ T8956] Call Trace:
[  237.291885][ T8956]  <TASK>
[  237.291889][ T8956]  dump_stack_lvl+0x16c/0x1f0
[  237.291912][ T8956]  warn_alloc+0x24d/0x3a0
[  237.291929][ T8956]  ? __pfx_warn_alloc+0x10/0x10
[  237.291943][ T8956]  ? __pfx_stack_trace_save+0x10/0x10
[  237.291965][ T8956]  ? kasan_save_stack+0x42/0x60
[  237.291979][ T8956]  ? kasan_save_stack+0x33/0x60
[  237.291992][ T8956]  ? kasan_save_track+0x14/0x30
[  237.292006][ T8956]  ? __kasan_kmalloc+0xaa/0xb0
[  237.292020][ T8956]  ? xskq_create+0x52/0x1d0
[  237.292032][ T8956]  ? do_sock_setsockopt+0x222/0x480
[  237.292044][ T8956]  ? __sys_setsockopt+0x1a0/0x230
[  237.292059][ T8956]  ? __x64_sys_setsockopt+0xbd/0x160
[  237.292076][ T8956]  __vmalloc_node_range_noprof+0x10dc/0x1530
[  237.292093][ T8956]  ? xskq_create+0xfb/0x1d0
[  237.292107][ T8956]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  237.292123][ T8956]  ? xskq_create+0xfb/0x1d0
[  237.292135][ T8956]  vmalloc_user_noprof+0x6b/0x90
[  237.292148][ T8956]  ? xskq_create+0xfb/0x1d0
[  237.292160][ T8956]  xskq_create+0xfb/0x1d0
[  237.292173][ T8956]  xsk_setsockopt+0x64a/0x850
[  237.292185][ T8956]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.292196][ T8956]  ? __lock_acquire+0x5b6/0x1b80
[  237.292209][ T8956]  ? selinux_socket_setsockopt+0x6a/0x80
[  237.292225][ T8956]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.292237][ T8956]  do_sock_setsockopt+0x222/0x480
[  237.292249][ T8956]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  237.292266][ T8956]  __sys_setsockopt+0x1a0/0x230
[  237.292283][ T8956]  __x64_sys_setsockopt+0xbd/0x160
[  237.292299][ T8956]  ? do_syscall_64+0x91/0x250
[  237.292309][ T8956]  ? lockdep_hardirqs_on+0x7c/0x110
[  237.292324][ T8956]  do_syscall_64+0xcd/0x250
[  237.292334][ T8956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.292350][ T8956] RIP: 0033:0x7f26eb58d169
[  237.292359][ T8956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.292369][ T8956] RSP: 002b:00007f26ec3c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.292380][ T8956] RAX: ffffffffffffffda RBX: 00007f26eb7a5fa0 RCX: 00007f26eb58d169
[  237.292387][ T8956] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  237.292393][ T8956] RBP: 00007f26eb60e2a0 R08: 0000000000000004 R09: 0000000000000000
[  237.292399][ T8956] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.292405][ T8956] R13: 0000000000000000 R14: 00007f26eb7a5fa0 R15: 00007ffd8d839db8
[  237.292416][ T8956]  </TASK>
[  237.292420][ T8956] Mem-Info:
[  237.560075][ T8956] active_anon:6152 inactive_anon:2 isolated_anon:0
[  237.560075][ T8956]  active_file:8703 inactive_file:39019 isolated_file:0
[  237.560075][ T8956]  unevictable:768 dirty:675 writeback:0
[  237.560075][ T8956]  slab_reclaimable:11479 slab_unreclaimable:101594
[  237.560075][ T8956]  mapped:30623 shmem:1410 pagetables:1143
[  237.560075][ T8956]  sec_pagetables:0 bounce:0
[  237.560075][ T8956]  kernel_misc_reclaimable:0
[  237.560075][ T8956]  free:1320727 free_pcp:348 free_cma:0
[  237.605958][ T8956] Node 0 active_anon:29708kB inactive_anon:8kB active_file:34788kB inactive_file:156000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127568kB dirty:2696kB writeback:0kB shmem:9104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13472kB pagetables:4572kB sec_pagetables:0kB all_unreclaimable? no
[  237.656085][ T5867] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  237.674712][ T8956] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  237.677618][   T48] scsi host1: usb-storage 5-1:1.0
[  237.744895][ T8956] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  237.775595][ T8956] lowmem_reserve[]: 0 2487 2487 2487 2487
[  237.787758][ T8956] Node 0 DMA32 free:1346728kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:36208kB inactive_anon:8kB active_file:34788kB inactive_file:155908kB unevictable:1536kB writepending:2696kB present:3129332kB managed:2547304kB mlocked:0kB bounce:0kB free_pcp:1424kB local_pcp:636kB free_cma:0kB
[  237.819857][ T8956] lowmem_reserve[]: 0 0 0 0 0
[  237.824888][ T8956] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  237.941034][ T8956] lowmem_reserve[]: 0 0 0 0 0
[  238.057887][ T8956] Node 1 Normal free:3908420kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:0kB free_cma:0kB
[  238.059768][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.099196][   T48] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  238.155421][ T8956] lowmem_reserve[]: 0 0 0 0 0
[  238.164997][ T8956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  238.180043][ T8956] Node 0 DMA32: 32*4kB (UME) 103*8kB (UME) 34*16kB (U) 272*32kB (UME) 280*64kB (UME) 68*128kB (UME) 16*256kB (UM) 7*512kB (M) 2*1024kB (M) 3*2048kB (ME) 316*4096kB (UM) = 1347032kB
[  238.194002][ T5868] usb 5-1: USB disconnect, device number 21
[  238.199798][ T8956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  238.215675][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.229156][ T5867] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  238.241384][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.251945][ T8956] Node 1 Normal: 152*4kB (UM) 59*8kB (UE) 46*16kB (UE) 233*32kB (UME) 97*64kB (UME) 26*128kB (UME) 14*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3908472kB
[  238.281295][ T8956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  238.296930][ T5867] usb 3-1: config 0 descriptor??
[  238.302478][ T8956] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.350809][   T48] usb 1-1: Using ep0 maxpacket: 16
[  238.370373][ T8956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  238.381051][ T8956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  238.405779][   T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.405911][ T8956] 49482 total pagecache pages
[  238.429442][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.443151][ T8956] 2 pages in swap cache
[  238.447331][ T8956] Free swap  = 124924kB
[  238.469271][ T8956] Total swap = 124996kB
[  238.473637][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  238.489222][ T8956] 2097051 pages RAM
[  238.493572][ T8956] 0 pages HighMem/MovableOnly
[  238.498340][   T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  238.519236][ T8956] 428567 pages reserved
[  238.523415][ T8956] 0 pages cma reserved
[  238.535325][ T8958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.552256][   T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  238.569183][   T48] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  238.578085][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.597226][   T48] usb 1-1: Manufacturer: syz
[  238.603345][ T8958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.620684][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.635706][   T48] usb 1-1: config 0 descriptor??
[  239.064128][ T5867] usbhid 3-1:0.0: can't add hid device: -71
[  239.133948][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  239.152782][ T5867] usb 3-1: USB disconnect, device number 27
[  239.189985][   T48] usb 1-1: USB disconnect, device number 22
[  239.314570][ T8975] delete_channel: no stack
[  239.760563][ T8997] overlayfs: failed to resolve './file1': -2
[  240.455254][ T9011] netlink: 64 bytes leftover after parsing attributes in process `syz.5.647'.
[  240.458089][ T9012] fuse: Unknown parameter 'group_id00000000000000000000'
[  240.775601][   T30] audit: type=1400 audit(1742925641.456:578): avc:  denied  { mount } for  pid=9014 comm="syz.0.649" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  240.851296][   T30] audit: type=1400 audit(1742925641.496:579): avc:  denied  { mounton } for  pid=9014 comm="syz.0.649" path="/116/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  240.935948][   T30] audit: type=1400 audit(1742925641.506:580): avc:  denied  { read } for  pid=9014 comm="syz.0.649" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  241.512064][   T30] audit: type=1400 audit(1742925641.506:581): avc:  denied  { open } for  pid=9014 comm="syz.0.649" path="/116/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  241.687821][ T9019] delete_channel: no stack
[  241.889538][   T30] audit: type=1400 audit(1742925641.696:582): avc:  denied  { write } for  pid=9023 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  242.144212][ T9047] netlink: 64 bytes leftover after parsing attributes in process `syz.5.656'.
[  242.313444][   T30] audit: type=1400 audit(1742925642.276:583): avc:  denied  { getopt } for  pid=9029 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  242.333770][   T30] audit: type=1400 audit(1742925642.716:584): avc:  denied  { unmount } for  pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  242.401224][   T30] audit: type=1400 audit(1742925643.076:585): avc:  denied  { mount } for  pid=9051 comm="syz.4.655" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  242.994832][ T9061] fuse: Bad value for 'fd'
[  243.523395][ T9090] could not allocate digest TFM handle hmac(sha384-arm)
[  243.563569][ T9086] could not allocate digest TFM handle hmac(sha384-arm)
[  244.219176][ T9083] delete_channel: no stack
[  244.259875][  T908] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  244.504090][ T9116] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  244.526982][  T908] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  244.545734][ T9116] audit: out of memory in audit_log_start
[  244.554413][  T908] usb 6-1: config 179 has no interface number 0
[  244.627578][  T908] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  244.686157][  T908] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  244.849122][  T908] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  244.862681][ T9129] veth1_macvtap: left promiscuous mode
[  244.904891][  T908] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  244.933606][  T908] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  245.806773][  T908] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  245.859179][  T908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.917377][ T9098] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  245.967536][  T908] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  246.307757][ T9098] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  246.980516][ T9166] cgroup: subsys name conflicts with all
[  247.031818][   T30] audit: type=1400 audit(1742925647.706:586): avc:  denied  { ioctl } for  pid=9165 comm="syz.0.681" path="socket:[21106]" dev="sockfs" ino=21106 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  247.895049][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  247.973060][ T9167] delete_channel: no stack
[  249.202148][ T5870] usb 5-1: Using ep0 maxpacket: 16
[  249.386886][ T5870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11
[  249.655949][ T5870] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  249.686209][ T5870] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  249.697709][ T5867] usb 6-1: USB disconnect, device number 7
[  249.728296][ T5870] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  249.746755][ T5870] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  249.765203][ T5870] usb 5-1: config 1 interface 0 has no altsetting 0
[  249.773095][ T5870] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  249.782596][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.824119][ T5870] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  251.233654][ T5870] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22
[  251.410651][ T5870] usb 5-1: USB disconnect, device number 22
[  356.429000][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  356.435970][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5870/1:b..l
[  356.444267][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=22885, q=367 ncpus=2)
[  356.451978][    C1] task:kworker/0:6     state:R  running task     stack:23608 pid:5870  tgid:5870  ppid:2      task_flags:0x4288060 flags:0x00004000
[  356.465866][    C1] Workqueue: usb_hub_wq hub_event
[  356.471336][    C1] Call Trace:
[  356.474607][    C1]  <TASK>
[  356.477534][    C1]  __schedule+0x112e/0x5b80
[  356.482044][    C1]  ? find_held_lock+0x2b/0x80
[  356.486730][    C1]  ? __pfx___schedule+0x10/0x10
[  356.491574][    C1]  ? do_raw_read_unlock+0x44/0xe0
[  356.496595][    C1]  ? _raw_read_unlock_irqrestore+0x3b/0x80
[  356.502419][    C1]  ? __pfx_ep_poll_callback+0x10/0x10
[  356.507810][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[  356.513187][    C1]  preempt_schedule_common+0x44/0xc0
[  356.518475][    C1]  preempt_schedule_thunk+0x1a/0x30
[  356.523672][    C1]  _raw_spin_unlock_irqrestore+0x61/0x80
[  356.529300][    C1]  sock_def_readable+0x15f/0x610
[  356.534236][    C1]  netlink_broadcast_filtered+0x96a/0xef0
[  356.539963][    C1]  ? __pfx_netlink_broadcast_filtered+0x10/0x10
[  356.546204][    C1]  ? netlink_has_listeners+0x20f/0x430
[  356.551659][    C1]  netlink_broadcast+0x39/0x50
[  356.556420][    C1]  kobject_uevent_env+0xc69/0x1870
[  356.561528][    C1]  ? kobject_put+0xab/0x5a0
[  356.566026][    C1]  device_del+0x623/0x9f0
[  356.570355][    C1]  ? __pfx_device_del+0x10/0x10
[  356.575201][    C1]  ? kobject_put+0x210/0x5a0
[  356.579785][    C1]  usb_disable_device+0x36c/0x7f0
[  356.584810][    C1]  usb_disconnect+0x2e1/0x920
[  356.589484][    C1]  hub_event+0x1c51/0x4f80
[  356.594077][    C1]  ? psi_task_switch+0x4b1/0x8e0
[  356.599016][    C1]  ? __lock_acquire+0xa92/0x1b80
[  356.603951][    C1]  ? __pfx_hub_event+0x10/0x10
[  356.608711][    C1]  ? assoc_array_insert+0xc10/0x3140
[  356.613994][    C1]  ? rcu_is_watching+0x12/0xc0
[  356.618757][    C1]  process_one_work+0x9c5/0x1ba0
[  356.623695][    C1]  ? __pfx_hub_event+0x10/0x10
[  356.628452][    C1]  ? __pfx_process_one_work+0x10/0x10
[  356.633847][    C1]  ? assign_work+0x1a0/0x250
[  356.638445][    C1]  worker_thread+0x6c8/0xf00
[  356.643041][    C1]  ? __kthread_parkme+0x148/0x220
[  356.648059][    C1]  ? __pfx_worker_thread+0x10/0x10
[  356.653166][    C1]  kthread+0x3af/0x750
[  356.657227][    C1]  ? __pfx_kthread+0x10/0x10
[  356.661814][    C1]  ? rcu_is_watching+0x12/0xc0
[  356.666573][    C1]  ? __pfx_kthread+0x10/0x10
[  356.671159][    C1]  ret_from_fork+0x45/0x80
[  356.675584][    C1]  ? __pfx_kthread+0x10/0x10
[  356.680200][    C1]  ret_from_fork_asm+0x1a/0x30
[  356.684986][    C1]  </TASK>
[  356.687999][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g22885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  356.700313][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=17471
[  356.708185][    C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g22885 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  356.719542][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  356.729496][    C1] rcu: RCU grace-period kthread stack dump:
[  356.735369][    C1] task:rcu_preempt     state:I stack:26856 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  356.747281][    C1] Call Trace:
[  356.750550][    C1]  <TASK>
[  356.753472][    C1]  __schedule+0x112e/0x5b80
[  356.757979][    C1]  ? __lock_acquire+0x5b6/0x1b80
[  356.762915][    C1]  ? __pfx___schedule+0x10/0x10
[  356.767769][    C1]  ? schedule+0x2d7/0x3a0
[  356.772097][    C1]  schedule+0xe7/0x3a0
[  356.776163][    C1]  schedule_timeout+0x124/0x280
[  356.781014][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  356.786381][    C1]  ? __pfx_process_timeout+0x10/0x10
[  356.791667][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  356.797469][    C1]  ? prepare_to_swait_event+0xf3/0x470
[  356.802923][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[  356.807681][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  356.812960][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  356.818158][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  356.823966][    C1]  rcu_gp_kthread+0x271/0x380
[  356.828636][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  356.833828][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  356.839198][    C1]  ? __kthread_parkme+0x148/0x220
[  356.844225][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  356.849417][    C1]  kthread+0x3af/0x750
[  356.853482][    C1]  ? __pfx_kthread+0x10/0x10
[  356.858066][    C1]  ? rcu_is_watching+0x12/0xc0
[  356.862825][    C1]  ? __pfx_kthread+0x10/0x10
[  356.867408][    C1]  ret_from_fork+0x45/0x80
[  356.871829][    C1]  ? __pfx_kthread+0x10/0x10
[  356.876415][    C1]  ret_from_fork_asm+0x1a/0x30
[  356.881187][    C1]  </TASK>
[  356.884210][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  356.890518][    C1] Sending NMI from CPU 1 to CPUs 0:
[  356.895715][    C0] NMI backtrace for cpu 0
[  356.895728][    C0] CPU: 0 UID: 0 PID: 9201 Comm: syz.2.691 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  356.895744][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  356.895752][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70
[  356.895770][    C0] Code: 82 10 16 00 00 83 f8 02 75 20 48 8b 8a 18 16 00 00 8b 92 14 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 <c3> cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90
[  356.895782][    C0] RSP: 0018:ffffc90000007df8 EFLAGS: 00000046
[  356.895793][    C0] RAX: 0000000080010001 RBX: ffff8880b8628900 RCX: ffffffff81a7a10d
[  356.895801][    C0] RDX: ffff88802affa440 RSI: ffffffff81a7a11c RDI: 0000000000000005
[  356.895810][    C0] RBP: ffff88805c0ba340 R08: 0000000000000005 R09: 0000000000000007
[  356.895818][    C0] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000
[  356.895825][    C0] R13: 0000000000000000 R14: ffff8880b8628800 R15: ffffffff896bf3a0
[  356.895834][    C0] FS:  00007f75f76a56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  356.895848][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.895856][    C0] CR2: 0000555570abc608 CR3: 0000000021310000 CR4: 00000000003526f0
[  356.895865][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.895872][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.895880][    C0] Call Trace:
[  356.895885][    C0]  <NMI>
[  356.895889][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[  356.895907][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  356.895923][    C0]  ? nmi_handle+0x1ac/0x5d0
[  356.895942][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[  356.895961][    C0]  ? default_do_nmi+0x6a/0x160
[  356.895976][    C0]  ? exc_nmi+0x170/0x1e0
[  356.895990][    C0]  ? end_repeat_nmi+0xf/0x53
[  356.896008][    C0]  ? __pfx_advance_sched+0x10/0x10
[  356.896024][    C0]  ? enqueue_hrtimer+0x4d/0x3c0
[  356.896039][    C0]  ? enqueue_hrtimer+0x5c/0x3c0
[  356.896055][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[  356.896070][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[  356.896086][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[  356.896101][    C0]  </NMI>
[  356.896105][    C0]  <IRQ>
[  356.896109][    C0]  enqueue_hrtimer+0x5c/0x3c0
[  356.896125][    C0]  __hrtimer_run_queues+0x903/0xae0
[  356.896143][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  356.896159][    C0]  ? read_tsc+0x9/0x20
[  356.896175][    C0]  hrtimer_interrupt+0x392/0x8e0
[  356.896194][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[  356.896215][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  356.896233][    C0]  </IRQ>
[  356.896238][    C0]  <TASK>
[  356.896242][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  356.896260][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x20
[  356.896276][    C0] Code: bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <40> 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 86 fe ff ff 66 0f 1f 44
[  356.896287][    C0] RSP: 0018:ffffc9000f8d73c0 EFLAGS: 00000202
[  356.896297][    C0] RAX: dffffc0000000000 RBX: ffffea00016bc480 RCX: ffffffff81fb1717
[  356.896306][    C0] RDX: 1ffffd40002d7890 RSI: 0000000000000001 RDI: 0000000000000000
[  356.896314][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff940002d7890
[  356.896321][    C0] R10: ffffea00016bc487 R11: 0000000000000001 R12: ffff888069cf3e68
[  356.896329][    C0] R13: 0000000000000129 R14: 0000000000000001 R15: 0000000000000000
[  356.896340][    C0]  ? shmem_add_to_page_cache+0x517/0x9b0
[  356.896361][    C0]  shmem_add_to_page_cache+0x517/0x9b0
[  356.896379][    C0]  ? rcu_watching_snap_stopped_since+0x60/0x110
[  356.896399][    C0]  ? __pfx_shmem_add_to_page_cache+0x10/0x10
[  356.896417][    C0]  ? find_held_lock+0x2b/0x80
[  356.896437][    C0]  shmem_alloc_and_add_folio+0x662/0xc10
[  356.896452][    C0]  ? shmem_huge_global_enabled+0x72/0x6b0
[  356.896470][    C0]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  356.896484][    C0]  ? shmem_allowable_huge_orders+0xd0/0x410
[  356.896499][    C0]  shmem_get_folio_gfp+0x689/0x1530
[  356.896514][    C0]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  356.896528][    C0]  ? filemap_map_pages+0xf92/0x16b0
[  356.896543][    C0]  shmem_fault+0x200/0xaf0
[  356.896556][    C0]  ? __pfx_shmem_fault+0x10/0x10
[  356.896570][    C0]  ? __pfx_filemap_map_pages+0x10/0x10
[  356.896584][    C0]  ? find_held_lock+0x2b/0x80
[  356.896601][    C0]  __do_fault+0x10a/0x490
[  356.896615][    C0]  do_pte_missing+0xecf/0x3e10
[  356.896632][    C0]  ? __handle_mm_fault+0x100f/0x2a40
[  356.896649][    C0]  __handle_mm_fault+0x103c/0x2a40
[  356.896668][    C0]  ? __pfx___handle_mm_fault+0x10/0x10
[  356.896683][    C0]  ? __pte_offset_map_lock+0x156/0x300
[  356.896697][    C0]  ? find_held_lock+0x2b/0x80
[  356.896718][    C0]  handle_mm_fault+0x3fa/0xaa0
[  356.896736][    C0]  __get_user_pages+0x773/0x36f0
[  356.896753][    C0]  ? __pfx_mt_find+0x10/0x10
[  356.896766][    C0]  ? __pfx___get_user_pages+0x10/0x10
[  356.896785][    C0]  populate_vma_page_range+0x27f/0x3a0
[  356.896802][    C0]  ? __pfx_populate_vma_page_range+0x10/0x10
[  356.896818][    C0]  ? __pfx_find_vma_intersection+0x10/0x10
[  356.896834][    C0]  ? do_mmap+0x6a1/0x11b0
[  356.896849][    C0]  __mm_populate+0x1d6/0x380
[  356.896865][    C0]  ? __pfx___mm_populate+0x10/0x10
[  356.896882][    C0]  ? up_write+0x1b2/0x520
[  356.896897][    C0]  vm_mmap_pgoff+0x352/0x440
[  356.896913][    C0]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  356.896928][    C0]  ? do_user_addr_fault+0xdc7/0x13f0
[  356.896946][    C0]  ? __up_read+0x1fb/0x760
[  356.896966][    C0]  ? find_held_lock+0x2b/0x80
[  356.896983][    C0]  ksys_mmap_pgoff+0x7d/0x5c0
[  356.896998][    C0]  __x64_sys_mmap+0x125/0x190
[  356.897016][    C0]  do_syscall_64+0xcd/0x250
[  356.897029][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.897046][    C0] RIP: 0033:0x7f75f678d169
[  356.897057][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.897069][    C0] RSP: 002b:00007f75f76a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  356.897081][    C0] RAX: ffffffffffffffda RBX: 00007f75f69a5fa0 RCX: 00007f75f678d169
[  356.897089][    C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  356.897097][    C0] RBP: 00007f75f680e2a0 R08: ffffffffffffffff R09: 0000000000000000
[  356.897106][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  356.897113][    C0] R13: 0000000000000001 R14: 00007f75f69a5fa0 R15: 00007ffeabea1678
[  356.897125][    C0]  </TASK>