last executing test programs:

3m8.040661218s ago: executing program 3 (id=232):
r0 = memfd_create(&(0x7f0000000600)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9a2`]<\x8cR\xd69\x0fO\xbf\xc3+\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15l^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\x10\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\x9as\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\xa3jmW\x18\xa4K\xc1X&\x1e\x9bh\xf1H=\x800\x10\x9e\x996v\f\x7f\xb0W\xf2\xaa\xd5\xd6;\x81\x13\x8f\x06\xef\x91\xa5r\x17\r\xbc*\xbdY\xc3\x8f\xf8\x03U\x83\xa2am\x88\xe59(=\xcb\xb92\x9d\xfac[\x8f\x19?\xa8%\xa5\x8b\x8bz\\_xJIO\x02</\x16\xe8\xb9L\xfc\xd2\xed\xb8\xa0\xe4\xd2\x8a\xd3\xb2\x12y\xb1j\xfed\x10J\xb2@\x0f\xcc7\xf7\xfe*\xaf\xea\xd2\xcd\xd4M\\El\x90N3B8\xf8\x9d}\xea\xe7\x86A\x14B\xfe\x0fX\x9f5\x9d\xb4\xd9\x8d\xb2`\xcb8\x06=\xde)\x10\x13=\x1d8\xfd_65\xda\xa6l\xfc\xee\xbe\xf3\x8e\xf6\xcc\xf13C8\xa0dq\xfff\xa2V\xc1\xbf|\xa7\xac\xab\xbaa#\x86 x\xf3\xaa\a\x92\xf1V\xb2\\\x02E[\xfa:j\'\x9b\x85\x8b\xf6Z\xe4N\xa2;4\xa7\xf7\xb1)\xa2\xb8\x92}\xe6\xb9', 0x7)
fcntl$addseals(r0, 0x409, 0x4)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4d091, r0, 0x0)

3m7.992774992s ago: executing program 3 (id=234):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102377, 0x18fe9)
socket$alg(0x26, 0x5, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="fa"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c6313, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0})
socket$netlink(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0xc0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffbf}}]}, 0x3c}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

3m7.334778104s ago: executing program 3 (id=240):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000016000000b30000007e00000000000000", @ANYRES32, @ANYBLOB="00000395cf488bdd03672c83623d9d7be02adc37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffde3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)

3m5.959597898s ago: executing program 3 (id=247):
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0)
r2 = fsopen(&(0x7f0000000000)='udf\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket(0x10, 0x3, 0x0)
recvmmsg(r6, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}}], 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.opaque\x00')
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)

3m4.963515361s ago: executing program 3 (id=253):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0)
syz_emit_ethernet(0x84, &(0x7f0000000340)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x4a, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508759", 0x0, 0x0, 0x0, @private1, @private1, [], "43a90a201af8ba1bbe8d83c0e34bd2abf19ca45d3602b61785b2"}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = inotify_init1(0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000400))
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300))
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'hsr0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x40}}, 0x0)

3m4.55270765s ago: executing program 3 (id=255):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000"], 0x68}}, 0x0)

3m4.307862858s ago: executing program 32 (id=255):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000"], 0x68}}, 0x0)

7.689129573s ago: executing program 5 (id=951):
prctl$PR_SET_SECCOMP(0x44, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
pread64(r0, &(0x7f0000000000)=""/63, 0x3f, 0x7)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x11100}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0x80000000, 0xf8}}, {0x0, 0x10}}}, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0)
dup3(r2, r0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x200000000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c)
fanotify_init(0x0, 0x101000)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)

5.832510308s ago: executing program 0 (id=956):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x100000000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={<r2=>0x0, 0x81}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={r2, 0x1000}, &(0x7f00000004c0)=0x8)

5.79257521s ago: executing program 5 (id=958):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x6a, &(0x7f0000001600)=ANY=[@ANYBLOB="0180c200000eaaaaaaaa72a6fcef0b0089064508fd6100660000062f9078e0000001000000000c20880b0000000309000800080086dd080088be0000000417016a03010000000000ffff080022eb000000012a061bff0200000000000005007b80060800655800000003"], 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="042c1104c900ffffffffffff02090502000000f9dccb4bd3eb41575cd9464cf9db437ab00f53b918506e45b2e40f75662b47ce0d03de266a0d88ba70749ff761106093e390befaf67829db22c5d6942bd7589484c25395a9e2bbeccb"], 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r0, @ANYBLOB="010027bd7000fedbdf256d00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x400c000)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4.843024146s ago: executing program 1 (id=961):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgid(0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x4, [@datasec={0x9, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x80000001}, {0x5, 0x7fff}], "33f8d7"}, @float={0x5, 0x0, 0x0, 0x10, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000000)=""/37, 0x5c, 0x25, 0x1, 0x1, 0x10000, @value}, 0x28) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func={0x1, 0x0, 0x0, 0xc, 0x1}, @enum64={0xf, 0x2, 0x0, 0x13, 0x1, 0x1, [{0xd, 0xe0, 0xfffffff0}, {0x4, 0x7, 0x5}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x3b, 0x7}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000004c0)=""/102, 0x6b, 0x66, 0x0, 0x7fff, 0x0, @void, @value}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x2, 0x820c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @void, @value}, 0x50)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101e921ea9500090582020002000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0x9, 0x0, 0x1, 0x880, 0x3, 0x0, 0x1000, 0x800, 0x0, 0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000540)=""/15, 0x2}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0xb7b, 0x840)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x6, "746362ef834ae7c8d8845952d2d03a6e75520540744f9917a79a46a7cca5d84d", 0x3, 0x1, 0x81, 0x3, 0x10, 0x0, 0x9})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r10 = memfd_secret(0x80000)
ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000240)=r10)

4.791408565s ago: executing program 0 (id=962):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000003c0)={0xd59f80, @bt={0xe10, 0x870, 0x0, 0x3, 0x0, 0x4c3e, 0x2000, 0x19ef, 0x6, 0x3, 0x2803, 0x2800, 0x6, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0xa}})
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r1)
rmdir(&(0x7f0000000100)='./file0\x00')
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0])
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
unshare(0x20000400)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084)
pipe(&(0x7f0000000200))
socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x79, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x1000000010, 0x80002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x1, 0x80000000, &(0x7f00000000c0))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bind$packet(r3, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r3, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)

4.782427308s ago: executing program 5 (id=963):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x41, 0x0, 0x0, 0x3, 0x0})
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x501000, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000009140)={0xf, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095596c790198d6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x118480, 0x15c)
r5 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
r6 = fsmount(r5, 0x0, 0x0)
mknodat$loop(r6, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0, r7}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x101600, 0x8)
sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x3)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008ec0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000001840)=""/153, 0x99}, {&(0x7f0000001900)=""/165, 0xa5}], 0x9}, 0x380000}, {{&(0x7f0000001a80)=@can, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001b00)=""/147, 0x93}, {&(0x7f0000001bc0)=""/181, 0xb5}, {&(0x7f0000001c80)=""/153, 0x99}, {&(0x7f0000001d80)=""/179, 0xb3}, {&(0x7f0000001e40)=""/189, 0xbd}, {&(0x7f0000001f00)=""/182, 0xb6}, {&(0x7f0000001fc0)=""/193, 0xc1}, {&(0x7f00000020c0)=""/232, 0xe8}, {&(0x7f00000021c0)=""/226, 0xe2}, {&(0x7f00000022c0)=""/220, 0xdc}], 0xa}, 0x2}, {{&(0x7f0000002480)=@hci, 0x80, &(0x7f0000002500)}, 0x7}, {{&(0x7f0000002540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f00000025c0)=""/247, 0xf7}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/56, 0x38}, {&(0x7f0000003700)=""/186, 0xba}, {&(0x7f00000037c0)=""/87, 0x57}, {&(0x7f0000003840)=""/245, 0xf5}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/46, 0x2e}, {&(0x7f0000004980)=""/93, 0x5d}, {&(0x7f0000004a00)=""/137, 0x89}], 0xa, &(0x7f0000004b80)=""/156, 0x9c}, 0x9}, {{&(0x7f0000004c40)=@nl=@proc, 0x80, &(0x7f0000006040)=[{&(0x7f0000004cc0)=""/215, 0xd7}, {&(0x7f0000004dc0)=""/181, 0xb5}, {&(0x7f0000004e80)=""/249, 0xf9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/190, 0xbe}], 0x5, &(0x7f00000060c0)=""/86, 0x56}, 0x5}, {{&(0x7f0000006140)=@l2, 0x80, &(0x7f0000007340)=[{&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/131, 0x83}, {&(0x7f0000007280)=""/169, 0xa9}], 0x3, &(0x7f0000007380)=""/107, 0x6b}, 0xfff}, {{&(0x7f0000007400)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000007500)=[{&(0x7f0000007480)=""/72, 0x48}], 0x1, &(0x7f0000007540)=""/21, 0x15}, 0x4}, {{&(0x7f0000007580)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000008600)=[{&(0x7f0000007600)=""/4096, 0x1000}], 0x1, &(0x7f0000008640)=""/50, 0x32}, 0x3}, {{&(0x7f0000008680)=@generic, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/119, 0x77}, {&(0x7f0000008780)=""/226, 0xe2}, {&(0x7f0000008880)=""/245, 0xf5}, {&(0x7f0000008980)=""/119, 0x77}], 0x4, &(0x7f0000008a40)=""/5, 0x5}, 0x10000}, {{&(0x7f0000008a80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000008b00)=""/200, 0xc8}, {&(0x7f0000008c00)=""/163, 0xa3}, {&(0x7f0000008cc0)=""/67, 0x43}, {&(0x7f0000008d40)=""/8, 0x8}], 0x4, &(0x7f0000008dc0)=""/199, 0xc7}, 0x1}], 0xa, 0x2, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c800000000000000000000000700000000440ccd037f000001000000250706ac958e5b444cce11e000000200000002e0000002000004ddffffffff000000007f00000100000006ac1414bb000000080a0101000000810a010100ffffffff0a01010200000fffe000000100000003831ba6ac14143b640101027fea000000000000000000017f000001441cf593ffffffff00000001ac1414aa00000001e0000001fffffff201831fe0ac1414187f000001e000000100000000ac1e0101ac14143aac1414aa00001c00000000000000000000000800000000", @ANYBLOB], 0xe8}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r11=>0x0}, &(0x7f0000000180)=0xc)
setresuid(r11, r11, 0x0)

4.732377486s ago: executing program 2 (id=964):
r0 = io_uring_setup(0x30d3, &(0x7f00000000c0))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a44000010203010902e6fc02010000000904000001020d0000050b06000105240000000d240f010000000000"], 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

4.632345977s ago: executing program 0 (id=965):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 3)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x2004000)

4.117705957s ago: executing program 0 (id=967):
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x7}, {0x0, 0x0, 0x0, 0x81}]})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$netlink(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)={0x10, 0x1b, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}, {&(0x7f0000000580)={0x10, 0x3f, 0x24, 0x70bd2b, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x4c840}, 0x20000000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "4c8d5f21c4a3255200000000f64914767ae57ba48b15"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1, 0x1}, {@remote, 0x8000}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x9c, 0x3, 0x8}, @noop, @noop, @noop, @rr={0x7, 0xb, 0x0, [@dev={0xac, 0x14, 0x14, 0xfc}, @private=0xa010102]}]}}}}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
r7 = dup(r5)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x2}], 0x1, 0x7, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r8, 0xae9a)

3.576372864s ago: executing program 4 (id=968):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
creat(&(0x7f0000000080)='./file0\x00', 0x1de)

3.132577461s ago: executing program 1 (id=969):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x81}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x3}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
chdir(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0))
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000002c0)={0x10000, "421ae3753785259249154c944122ad063ff47d3b4c879afae6889cba3ab4c981", <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc)
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"e50d1af889b4ea0700000000000000f3c49e4906eddfecd83634e4a37ef94add", r5})

3.041678456s ago: executing program 1 (id=970):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010000001040000ff0000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
read$msr(r0, &(0x7f0000002fc0)=""/102400, 0x19000)
add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
wait4(0x0, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095000000000000005b343f100624b3de7926e22e7edb1497bf3991011242f785f0d596bb538ff72ed469b954afb2361cd3c59f04b57ebf2a29c94ea39c171264f6a088721d3a80495e3ed97583c8bf335cba5f728965fed3d22dd59ee0d06124c3aeb14cb61a877b1382c2489060f66d2018d74d1cd2c729541b0885f7a78a423a83f15537e7ef488da890f5cf403719b04057766ee017e7220e68a7ea43c069da2d0b05dd3567487d73dd363920cd575b2419179af731a6b1bd8c462df0f949c3a16ff977cddb2e84614a492c3d3ec65b1335bc6949473b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000640)={0x8, @output={0x1000, 0x1, {0x8, 0xfffffffa}, 0x3, 0x81}})

2.920201231s ago: executing program 5 (id=971):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x2004000)

2.592170105s ago: executing program 0 (id=972):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x100000000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={<r2=>0x0, 0x81}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={r2, 0x1000}, &(0x7f00000004c0)=0x8)

2.582950357s ago: executing program 2 (id=973):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7)
ioctl$TCFLSH(r0, 0x8926, 0xbffffffffffffffb)
open(&(0x7f0000000080)='.\x00', 0x90a00, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095", @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="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", @ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_io_uring_setup(0x681f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x0, 0x21b, 0x0, r2}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x45, @remote, @remote}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.522816556s ago: executing program 1 (id=974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioprio_set$pid(0x1, 0x0, 0x4000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0)
sendfile(r1, r1, 0x0, 0xc3)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioprio_set$pid(0x1, 0x0, 0x4000) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) (async)
sendfile(r1, r1, 0x0, 0xc3) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async)

2.416507804s ago: executing program 4 (id=975):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000000)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0xffffffffffffff35, 0x1, r2}, {0xffffffffffffff7f, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xc3}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

2.416195696s ago: executing program 1 (id=976):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80800)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340))
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x8, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f00000058c0)=ANY=[], 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000c91200000000000100000024000300a000004f6c9c8e3853e2fd3a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x0)

2.395950167s ago: executing program 4 (id=977):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

2.364689812s ago: executing program 2 (id=978):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21002}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x38}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
r4 = inotify_init()
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x5452, &(0x7f0000000000)={'sit0\x00', 0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x81, {{0x2, 0x6, @empty}}}, 0x88)
getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, r1, 0x17510000)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d3d, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbb8, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)

1.988865337s ago: executing program 4 (id=979):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000840)="f400020000203300fe011bfbef4b4e9c744547ee19aea6f48323e6556608fa0505bc009bc2122d94", 0x28}], 0x1}, 0xc41bb53f7b6a552e)

1.884620832s ago: executing program 1 (id=980):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x40044103, 0xf0ff1f00000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x1000a)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)

1.869008367s ago: executing program 2 (id=981):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18)
io_uring_enter(0xffffffffffffffff, 0x2a94, 0x91ec, 0x18, &(0x7f00000000c0)={[0x2]}, 0x8)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x3)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f000000c000/0x2000)=nil, 0x2000, 0xc)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2)
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r5, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c)
r6 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.784495152s ago: executing program 4 (id=982):
set_mempolicy(0x3, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1.272624984s ago: executing program 5 (id=983):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x200048c0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_load(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)=""/198, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r10}, 0x38)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r7, 0x0, 0x20000000)

1.25887761s ago: executing program 0 (id=984):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x40044103, 0xf0ff1f00000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0x1000a)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)

1.132943411s ago: executing program 4 (id=985):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0xa06, @empty, 0x2}, 0x1c)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103000000090587", @ANYRES16], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002ab8a84", 0x8)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)
keyctl$reject(0x13, 0x0, 0x0, 0x201, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="ebeac58bc844efc260de368abde6703106642c26f6df02a639a532849d479528fc498f7b976c0c8b481e8e", @ANYRESDEC=0x0])
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x1000000, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, &(0x7f0000000440))
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x80000000}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

688.605643ms ago: executing program 2 (id=986):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async, rerun: 64)
pipe(&(0x7f0000001200)={<r2=>0xffffffffffffffff}) (rerun: 64)
fcntl$getflags(r2, 0x11)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) (async)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000ac0)='sched_switch\x00'}, 0x18) (async, rerun: 64)
r3 = getpid() (rerun: 64)
sched_setaffinity(r3, 0x2e, &(0x7f00000002c0)=0x400)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r6 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x444081, 0x0) (async)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, @bcast, @netrom={'nr', 0x0}, 0xfffffffe, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x40000000, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async)
sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x3f, 0x0}}], 0x62, 0x7ffffff7)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0)
r8 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r8, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$printer(r8, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000189f23b2f6c5e534130a030069f7cc00000000000004090002007375643000"], 0x20}}, 0x20000000)

290.414014ms ago: executing program 5 (id=987):
syz_emit_ethernet(0x23a, &(0x7f0000000000)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x204, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x19, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac01"}]}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
iopl(0x3)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000000000000000001d000000f2ffffffffffffff00000000ac00f3f388d2946c728429c8ddf1bd829bdc8c01186b0128c31e307daf94e7b49419fb56f1ba5bbf2acfed882bd2335320c5728ed1e067dedf2f0a5fc7292676d2833026aab3bec27b778a8f339799a850fa9e62c97c016a1ec319bb668ad7ccf23c763909d192d20f3d176bc8aa7bfaea777eae8fc0713fae9129308f53c499659f"], 0x48)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044583, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x3)
accept4(r4, 0x0, &(0x7f0000000040), 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)

0s ago: executing program 2 (id=988):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffff86aa}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c1d3}, 0x0)

kernel console output (not intermixed with test programs):

 205.434047][ T8318] [U] 
[  205.436731][ T8318] [U] 
[  205.439426][ T8318] [U] 
[  205.443856][ T8318] [U] 
[  205.446570][ T8318] [U] 
[  205.449269][ T8318] [U] 
[  205.451954][ T8318] [U] 
[  205.460442][ T8318] [U] 
[  205.463137][ T8318] [U] 
[  205.465822][ T8318] [U] 
[  205.468511][ T8318] [U] 
[  205.473130][ T8318] [U] 
[  205.475831][ T8318] [U] 
[  205.478529][ T8318] [U] 
[  205.481207][ T8318] [U] 
[  205.487616][ T8318] [U] 
[  205.490334][ T8318] [U] 
[  205.493013][ T8318] [U] 
[  205.495693][ T8318] [U] 
[  205.499162][ T8318] [U] 
[  205.501851][ T8318] [U] 
[  205.504516][ T8318] [U] 
[  205.507204][ T8318] [U] 
[  205.510854][ T8318] [U] 
[  205.513541][ T8318] [U] 
[  205.516203][ T8318] [U] 
[  205.518891][ T8318] [U] 
[  205.521812][ T8318] [U] 
[  205.524510][ T8318] [U] 
[  205.527206][ T8318] [U] 
[  205.529880][ T8318] [U] 
[  205.535755][ T8318] [U] 
[  205.538454][ T8318] [U] 
[  205.541127][ T8318] [U] 
[  205.543826][ T8318] [U] 
[  205.547176][ T8318] [U] 
[  205.549874][ T8318] [U] 
[  205.552561][ T8318] [U] 
[  205.555225][ T8318] [U] 
[  205.559856][ T8318] [U] 
[  205.562557][ T8318] [U] 
[  205.565238][ T8318] [U] 
[  205.567903][ T8318] [U] 
[  205.571217][ T8318] [U] 
[  205.573913][ T8318] [U] 
[  205.576600][ T8318] [U] 
[  205.579261][ T8318] [U] 
[  205.583436][ T8318] [U] 
[  205.586126][ T8318] [U] 
[  205.588794][ T8318] [U] 
[  205.591458][ T8318] [U] 
[  205.594865][ T8318] [U] 
[  205.597643][ T8318] [U] 
[  205.600305][ T8318] [U] 
[  205.602961][ T8318] [U] 
[  205.607162][ T8318] [U] 
[  205.609855][ T8318] [U] 
[  205.612518][ T8318] [U] 
[  205.615180][ T8318] [U] 
[  205.618916][ T8318] [U] 
[  205.621622][ T8318] [U] 
[  205.624318][ T8318] [U] 
[  205.626983][ T8318] [U] 
[  205.632465][ T8318] [U] 
[  205.635172][ T8318] [U] 
[  205.637841][ T8318] [U] 
[  205.640499][ T8318] [U] 
[  205.643716][ T8318] [U] 
[  205.646400][ T8318] [U] 
[  205.649058][ T8318] [U] 
[  205.651739][ T8318] [U] 
[  205.655114][ T8318] [U] 
[  205.657804][ T8318] [U] 
[  205.660476][ T8318] [U] 
[  205.663142][ T8318] [U] 
[  205.666317][ T8318] [U] 
[  205.669009][ T8318] [U] 
[  205.671677][ T8318] [U] 
[  205.674336][ T8318] [U] 
[  205.678055][ T8318] [U] 
[  205.680739][ T8318] [U] 
[  205.683436][ T8318] [U] 
[  205.686124][ T8318] [U] 
[  205.689646][ T8318] [U] 
[  205.692346][ T8318] [U] 
[  205.695006][ T8318] [U] 
[  205.697687][ T8318] [U] 
[  205.701775][ T8318] [U] 
[  205.704467][ T8318] [U] 
[  205.707129][ T8318] [U] 
[  205.709791][ T8318] [U] 
[  205.713253][ T8318] [U] 
[  205.715940][ T8318] [U] 
[  205.718605][ T8318] [U] 
[  205.721277][ T8318] [U] 
[  205.725757][ T8318] [U] 
[  205.728482][ T8318] [U] 
[  205.731170][ T8318] [U] 
[  205.733830][ T8318] [U] 
[  205.738313][ T8318] [U] 
[  205.741004][ T8318] [U] 
[  205.743665][ T8318] [U] 
[  205.746349][ T8318] [U] 
[  205.750151][ T8318] [U] 
[  205.752843][ T8318] [U] 
[  205.755513][ T8318] [U] 
[  205.758173][ T8318] [U] 
[  205.761561][ T8318] [U] 
[  205.764248][ T8318] [U] 
[  205.766925][ T8318] [U] 
[  205.769618][ T8318] [U] 
[  205.773435][ T8318] [U] 
[  205.776129][ T8318] [U] 
[  205.778806][ T8318] [U] 
[  205.781497][ T8318] [U] 
[  205.784749][ T8318] [U] 
[  205.787437][ T8318] [U] 
[  205.790120][ T8318] [U] 
[  205.792791][ T8318] [U] 
[  205.796823][ T8318] [U] 
[  205.799522][ T8318] [U] 
[  205.802192][ T8318] [U] 
[  205.804866][ T8318] [U] 
[  205.808006][ T8318] [U] 
[  205.810703][ T8318] [U] 
[  205.813391][ T8318] [U] 
[  206.100383][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00
[  206.110556][ T5902] pwc: recv_control_msg error -32 req 02 val 2700
[  206.123868][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00
[  206.141155][ T5902] pwc: recv_control_msg error -32 req 04 val 1000
[  206.149038][ T5902] pwc: recv_control_msg error -32 req 04 val 1300
[  206.160849][ T5902] pwc: recv_control_msg error -32 req 04 val 1400
[  206.211505][ T8316] [U] 
[  206.293511][ T2137] razer 0003:1532:010E.0009: failed to enable macro keys: -71
[  206.306165][ T2137] razer 0003:1532:010E.0009: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0
[  206.332129][ T2137] usb 1-1: USB disconnect, device number 19
[  206.421036][   T29] audit: type=1400 audit(1731558558.684:563): avc:  denied  { mounton } for  pid=8329 comm="syz.0.589" path="/134/file1/bus/bus" dev="autofs" ino=17390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1
[  206.454997][ T8330] overlayfs: upper fs does not support tmpfile.
[  206.530873][ T5902] pwc: recv_control_msg error -71 req 02 val 2100
[  206.537916][ T5902] pwc: recv_control_msg error -71 req 04 val 1500
[  206.545009][ T5902] pwc: recv_control_msg error -71 req 02 val 2500
[  206.552583][ T5902] pwc: recv_control_msg error -71 req 02 val 2400
[  206.560562][ T5902] pwc: recv_control_msg error -71 req 02 val 2600
[  206.567525][ T5902] pwc: recv_control_msg error -71 req 02 val 2900
[  206.601973][ T5902] pwc: recv_control_msg error -71 req 02 val 2800
[  206.622497][ T5902] pwc: recv_control_msg error -71 req 04 val 1100
[  206.640967][ T5902] pwc: recv_control_msg error -71 req 04 val 1200
[  206.838134][ T5902] pwc: Registered as video103.
[  206.850578][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15
[  206.888310][ T8332] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  206.915187][ T5902] usb 2-1: USB disconnect, device number 28
[  206.984100][   T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  207.022516][ T8337] tmpfs: Unknown parameter 'nrinodes'
[  207.130944][ T5873] libceph: connect (1)[c::]:6789 error -101
[  207.137581][ T5873] libceph: mon0 (1)[c::]:6789 connect error
[  207.173545][   T25] usb 5-1: Using ep0 maxpacket: 16
[  207.187655][   T25] usb 5-1: config index 0 descriptor too short (expected 64742, got 92)
[  207.202923][   T25] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  207.217606][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.232873][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  207.265938][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  207.301759][ T8346] netlink: 'syz.2.591': attribute type 10 has an invalid length.
[  207.320432][ T8340] ceph: No mds server is up or the cluster is laggy
[  207.343837][ T8346] bond0: (slave netdevsim0): Releasing backup interface
[  207.357363][ T8346] team0: Port device netdevsim0 added
[  207.370946][   T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.380347][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.388453][   T25] usb 5-1: Product: syz
[  207.392620][   T25] usb 5-1: Manufacturer: syz
[  207.397398][   T25] usb 5-1: SerialNumber: syz
[  207.399864][ T8349] netlink: 60 bytes leftover after parsing attributes in process `syz.5.592'.
[  207.420304][ T2137] libceph: connect (1)[c::]:6789 error -101
[  207.426972][ T2137] libceph: mon0 (1)[c::]:6789 connect error
[  207.441146][   T25] cdc_ncm 5-1:1.0: skipping garbage
[  207.448497][   T25] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  207.456105][   T25] cdc_ncm 5-1:1.0: bind() failure
[  207.487745][ T8349] unsupported nlmsg_type 40
[  207.499019][   T29] audit: type=1326 audit(1731558559.764:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.5.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a2277e719 code=0x0
[  207.661521][   T25] usb 5-1: USB disconnect, device number 18
[  207.673447][ T5824] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  207.814161][ T5824] usb 2-1: device descriptor read/64, error -71
[  208.008812][   T29] audit: type=1400 audit(1731558560.274:565): avc:  denied  { validate_trans } for  pid=8360 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  208.054067][ T5824] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  208.183841][ T5824] usb 2-1: device descriptor read/64, error -71
[  208.336400][ T5824] usb usb2-port1: attempt power cycle
[  208.635791][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.596'.
[  208.833625][   T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  208.834918][ T5824] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  208.898705][ T5824] usb 2-1: device descriptor read/8, error -71
[  208.980990][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.602'.
[  209.004602][   T25] usb 1-1: Using ep0 maxpacket: 32
[  209.019414][   T25] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  209.034783][   T25] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.045004][   T25] usb 1-1: config 0 interface 0 has no altsetting 0
[  209.051641][   T25] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  209.061228][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.077961][   T25] usb 1-1: config 0 descriptor??
[  209.154185][ T5824] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  209.182273][ T5824] usb 2-1: device descriptor read/8, error -71
[  209.243486][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  209.303741][ T5824] usb usb2-port1: unable to enumerate USB device
[  209.418209][   T29] audit: type=1400 audit(1731558561.684:566): avc:  denied  { setopt } for  pid=8396 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  209.440057][ T5873] usb 6-1: config 0 has an invalid interface number: 29 but max is 0
[  209.448423][ T5873] usb 6-1: config 0 has no interface number 0
[  209.455082][ T5873] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  209.483008][ T5873] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=30.74
[  209.493010][ T5873] usb 6-1: New USB device strings: Mfr=32, Product=2, SerialNumber=3
[  209.517621][ T5873] usb 6-1: Product: syz
[  209.521910][ T5873] usb 6-1: Manufacturer: syz
[  209.527089][ T5873] usb 6-1: SerialNumber: syz
[  209.539534][ T5873] usb 6-1: config 0 descriptor??
[  209.546953][ T8387] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  209.575929][ T5873] as10x_usb: device has been detected
[  209.587504][ T5873] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  209.621991][ T5873] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  209.635002][ T5873] as10x_usb: error during firmware upload part1
[  209.649063][ T5873] Registered device PCTV Systems picoStick (74e)
[  209.798530][ T5141] Bluetooth: hci4: command 0x0405 tx timeout
[  210.043514][ T5838] Bluetooth: hci1: command 0x0405 tx timeout
[  210.732622][    T9] usb 6-1: USB disconnect, device number 10
[  210.947630][    T9] Unregistered device PCTV Systems picoStick (74e)
[  210.949583][    T9] as10x_usb: device has been disconnected
[  210.969427][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  210.975490][   T29] audit: type=1400 audit(1731558563.234:567): avc:  denied  { bind } for  pid=8411 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  210.996534][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  211.031587][   T25] usb 1-1: USB disconnect, device number 20
[  211.104485][ T8423] syz.1.614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  211.109883][ T8421] netlink: 'syz.4.616': attribute type 4 has an invalid length.
[  211.476083][ T8431] cgroup: noprefix used incorrectly
[  212.133613][ T8438] netlink: 'syz.1.622': attribute type 10 has an invalid length.
[  212.380580][ T8438] syz_tun: entered promiscuous mode
[  212.486876][ T8452] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.252081][ T8438] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  213.616294][ T8463] binder: BINDER_SET_CONTEXT_MGR already set
[  213.622375][ T8463] binder: 8462:8463 ioctl 4018620d 20000040 returned -16
[  213.662250][   T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  214.428391][   T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  214.439510][   T25] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  214.485311][   T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  214.489294][ T8476] cgroup: noprefix used incorrectly
[  214.803440][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  215.035526][   T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  215.183567][ T5921] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  215.191236][ T5824] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  216.043642][ T5921] usb 6-1: Using ep0 maxpacket: 32
[  216.051355][ T5921] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  216.064982][ T5921] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.076035][ T5921] usb 6-1: config 0 interface 0 has no altsetting 0
[  216.083175][ T5921] usb 6-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  216.092544][ T5824] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.103685][ T5824] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.113704][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0
[  216.116901][   T25] usb 2-1: string descriptor 0 read error: -71
[  216.120402][ T5824] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  216.148290][   T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  216.157451][   T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  216.194902][   T25] usb 2-1: can't set config #1, error -71
[  216.232612][   T25] usb 2-1: USB disconnect, device number 33
[  216.520254][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'.
[  216.531795][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.540475][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.550502][ T5921] usb 6-1: config 0 descriptor??
[  216.556505][ T5824] usb 1-1: config 0 descriptor??
[  216.576322][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.602168][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.698322][   T29] audit: type=1326 audit(1731558568.964:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.1.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x0
[  216.993438][   T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  217.062463][ T5921] wacom 0003:056A:00C4.000B: unknown main item tag 0x0
[  217.070196][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.083757][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.090970][ T5921] wacom 0003:056A:00C4.000B: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.5-1/input0
[  217.104869][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.111847][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.119383][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.126624][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.133957][ T5824] elecom 0003:056E:00FE.000A: unknown main item tag 0x0
[  217.152397][ T5824] elecom 0003:056E:00FE.000A: hidraw1: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0
[  217.199328][   T25] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96
[  217.219786][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.219906][ T5824] usb 1-1: USB disconnect, device number 21
[  217.229516][   T25] usb 5-1: Product: syz
[  217.258780][   T25] usb 5-1: Manufacturer: syz
[  217.267558][   T25] usb 5-1: SerialNumber: syz
[  217.283052][   T25] usb 5-1: config 0 descriptor??
[  217.629349][ T5921] usb 6-1: USB disconnect, device number 11
[  217.674890][ T8490] kAFS: No cell specified
[  217.681574][   T25] usb 5-1: USB disconnect, device number 19
[  218.014165][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  218.101097][ T5902] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  218.204754][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.215079][    T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  218.226216][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.236609][    T8] usb 3-1: config 0 descriptor??
[  218.244726][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  218.257902][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.269310][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.279735][ T5902] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  218.307150][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  218.315279][ T5902] usb 2-1: SerialNumber: syz
[  218.399315][   T29] audit: type=1400 audit(1731558826.660:569): avc:  denied  { ioctl } for  pid=8519 comm="syz.4.650" path="socket:[18787]" dev="sockfs" ino=18787 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  218.446342][ T8525] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.649'.
[  218.455560][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.649'.
[  218.544769][ T8514] input: syz1 as /devices/virtual/input/input19
[  218.615370][ T5902] usb 2-1: 0:2 : does not exist
[  218.620290][ T5902] usb 2-1: unit 255 not found!
[  218.629287][ T5902] usb 2-1: USB disconnect, device number 34
[  218.653221][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[  218.674447][    T8] pwc: recv_control_msg error -32 req 02 val 2700
[  218.692763][    T8] pwc: recv_control_msg error -32 req 02 val 2c00
[  218.718975][    T8] pwc: recv_control_msg error -32 req 04 val 1000
[  218.730341][    T8] pwc: recv_control_msg error -32 req 04 val 1300
[  218.740003][    T8] pwc: recv_control_msg error -32 req 04 val 1400
[  218.795546][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.051859][    T8] pwc: recv_control_msg error -71 req 02 val 2100
[  219.059316][    T8] pwc: recv_control_msg error -71 req 04 val 1500
[  219.066307][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[  219.072962][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[  219.079796][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[  219.086675][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[  219.093511][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[  219.615688][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[  219.622522][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[  219.631053][    T8] pwc: Registered as video103.
[  219.636684][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  219.657689][    T8] usb 3-1: USB disconnect, device number 20
[  219.749274][ T8547] netlink: 'syz.5.654': attribute type 10 has an invalid length.
[  219.760554][ T8547] bond0: (slave netdevsim0): Releasing backup interface
[  219.787127][ T8547] team0: Port device netdevsim0 added
[  220.975396][ T8559] overlayfs: failed to resolve './file1': -2
[  221.065758][   T29] audit: type=1400 audit(1731558829.330:570): avc:  denied  { read } for  pid=8561 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  221.087660][   T29] audit: type=1326 audit(1731558829.350:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.1.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32b57e719 code=0x0
[  221.697262][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'.
[  221.733483][ T5902] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  221.753490][    T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  221.882414][ T8566] syz.2.659 (8566) used greatest stack depth: 21088 bytes left
[  221.897258][ T5902] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  221.907683][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 33
[  221.916754][    T8] usb 1-1: Using ep0 maxpacket: 32
[  221.931145][    T8] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  221.947306][ T5902] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5
[  221.956552][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  221.970573][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.983400][    T8] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.007466][ T5902] usb 2-1: Product: syz
[  222.021169][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  222.031676][ T5902] usb 2-1: Manufacturer: syz
[  222.043765][ T5902] usb 2-1: SerialNumber: syz
[  222.048445][    T8] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  222.060828][ T5902] usb 2-1: config 0 descriptor??
[  222.065852][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.091584][ T5902] comedi comedi0: Wrong number of endpoints
[  222.099094][    T9] usb 5-1: device descriptor read/64, error -71
[  222.107671][ T5902] ni6501 2-1:0.0: driver 'ni6501' failed to auto-configure device.
[  222.128571][    T8] usb 1-1: config 0 descriptor??
[  222.162264][ T8581] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.171254][ T8581] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.180007][ T8581] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.188760][ T8581] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.353571][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  222.528687][    T9] usb 5-1: device descriptor read/64, error -71
[  222.692554][ T8571] netlink: 'syz.1.661': attribute type 4 has an invalid length.
[  222.731032][   T29] audit: type=1400 audit(1731558830.990:572): avc:  denied  { ioctl } for  pid=8570 comm="syz.1.661" path="socket:[18162]" dev="sockfs" ino=18162 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  222.775681][    T9] usb usb5-port1: attempt power cycle
[  222.804483][    T8] wacom 0003:056A:00C4.000C: unknown main item tag 0x0
[  222.821907][ T5824] usb 2-1: USB disconnect, device number 35
[  222.835443][    T8] wacom 0003:056A:00C4.000C: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0
[  223.296805][ T5873] usb 1-1: USB disconnect, device number 22
[  223.377092][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  223.425385][    T9] usb 5-1: device descriptor read/8, error -71
[  223.663739][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  223.780413][   T29] audit: type=1400 audit(1731558831.960:573): avc:  denied  { watch } for  pid=8587 comm="syz.2.665" path="/proc/488" dev="proc" ino=18876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  224.084680][    T9] usb 5-1: device descriptor read/8, error -71
[  224.361609][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'.
[  224.888871][    T9] usb usb5-port1: unable to enumerate USB device
[  225.416903][ T8617] overlayfs: failed to resolve './file1': -2
[  225.939042][ T5921] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  225.969652][   T29] audit: type=1400 audit(1731558833.960:574): avc:  denied  { connect } for  pid=8612 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  226.244893][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.244928][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.244959][ T5921] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  226.244981][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.303570][ T5873] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  226.387529][   T29] audit: type=1400 audit(1731558834.610:575): avc:  denied  { read } for  pid=8609 comm="syz.5.671" path="socket:[18237]" dev="sockfs" ino=18237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  226.446932][ T5873] usb 2-1: device descriptor read/64, error -71
[  226.539811][ T5921] usb 3-1: config 0 descriptor??
[  226.774351][ T5873] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  226.873969][   T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  226.914009][ T5873] usb 2-1: device descriptor read/64, error -71
[  227.028866][ T5873] usb usb2-port1: attempt power cycle
[  227.523400][   T25] usb 1-1: Using ep0 maxpacket: 16
[  227.529920][   T25] usb 1-1: config index 0 descriptor too short (expected 64742, got 92)
[  227.542045][   T25] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  227.563415][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.574335][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  227.583224][   T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  227.599004][   T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.608270][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.616886][   T25] usb 1-1: Product: syz
[  227.621808][   T25] usb 1-1: Manufacturer: syz
[  227.626603][   T25] usb 1-1: SerialNumber: syz
[  227.653236][   T25] cdc_ncm 1-1:1.0: skipping garbage
[  227.660260][   T25] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  227.670906][   T25] cdc_ncm 1-1:1.0: bind() failure
[  227.697244][   T29] audit: type=1326 audit(1731558835.960:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3db57e719 code=0x7fc00000
[  227.753206][ T8604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  227.853518][ T5873] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  227.884315][ T5873] usb 2-1: device descriptor read/8, error -71
[  227.919060][ T5824] usb 1-1: USB disconnect, device number 23
[  227.973782][ T5921] usbhid 3-1:0.0: can't add hid device: -32
[  228.002689][ T5921] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  228.162038][    T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  228.192673][ T5921] usb 3-1: USB disconnect, device number 21
[  228.571455][    T8] usb 6-1: Using ep0 maxpacket: 32
[  228.588767][    T8] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  228.616370][    T8] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.632106][    T8] usb 6-1: config 0 interface 0 has no altsetting 0
[  228.640220][    T8] usb 6-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  228.654718][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.675294][    T8] usb 6-1: config 0 descriptor??
[  228.839178][ T8662] input: syz0 as /devices/virtual/input/input24
[  229.025636][ T8670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.130690][    T8] wacom 0003:056A:00C4.000D: unknown main item tag 0x0
[  229.172495][    T8] wacom 0003:056A:00C4.000D: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.5-1/input0
[  229.688270][   T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  230.123425][ T5873] usb 6-1: USB disconnect, device number 12
[  230.215055][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.225442][   T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  230.243531][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.254110][   T25] usb 3-1: config 0 descriptor??
[  230.261200][   T25] pwc: Askey VC010 type 2 USB webcam detected.
[  230.517135][ T8692] Bluetooth: MGMT ver 1.23
[  231.248270][   T29] audit: type=1400 audit(1731559094.795:577): avc:  denied  { ioctl } for  pid=8688 comm="syz.4.691" path="uts:[4026533106]" dev="nsfs" ino=4026533106 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  231.484167][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'.
[  231.521636][ T8700] Cannot find del_set index 2 as target
[  231.674191][   T25] pwc: recv_control_msg error -32 req 02 val 2b00
[  231.682117][   T25] pwc: recv_control_msg error -32 req 02 val 2700
[  231.746706][   T25] pwc: recv_control_msg error -32 req 02 val 2c00
[  232.084177][ T5921] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  232.268426][ T5921] usb 5-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  232.316015][ T5921] usb 5-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.318325][   T25] pwc: recv_control_msg error -32 req 04 val 1000
[  232.349664][ T5921] usb 5-1: config 1 interface 0 has no altsetting 0
[  232.369964][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  232.380475][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.395717][ T5921] usb 5-1: Product: syz
[  232.399965][ T5921] usb 5-1: Manufacturer: syz
[  232.408290][ T5921] usb 5-1: SerialNumber: syz
[  232.418495][ T8710] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  232.419208][   T25] pwc: recv_control_msg error -32 req 04 val 1300
[  232.432826][ T5873] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  232.441421][   T25] pwc: recv_control_msg error -32 req 04 val 1400
[  232.450921][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[  232.459076][   T25] pwc: recv_control_msg error -32 req 02 val 2000
[  232.466068][   T25] pwc: recv_control_msg error -71 req 02 val 2100
[  232.472779][   T25] pwc: recv_control_msg error -71 req 04 val 1500
[  232.479554][   T25] pwc: recv_control_msg error -71 req 02 val 2500
[  232.486717][   T25] pwc: recv_control_msg error -71 req 02 val 2400
[  232.496168][   T25] pwc: recv_control_msg error -71 req 02 val 2600
[  232.502984][   T25] pwc: recv_control_msg error -71 req 02 val 2900
[  232.512695][   T25] pwc: recv_control_msg error -71 req 02 val 2800
[  232.521582][   T25] pwc: recv_control_msg error -71 req 04 val 1100
[  232.528478][   T25] pwc: recv_control_msg error -71 req 04 val 1200
[  232.540081][   T25] pwc: Registered as video103.
[  232.548040][   T25] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28
[  232.562988][   T25] usb 3-1: USB disconnect, device number 22
[  232.606560][ T5873] usb 6-1: too many configurations: 239, using maximum allowed: 8
[  232.639757][ T5873] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  232.667480][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.687214][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input29
[  232.697788][ T5873] usb 6-1: Product: syz
[  232.701969][ T5873] usb 6-1: Manufacturer: syz
[  232.738952][ T5873] usb 6-1: SerialNumber: syz
[  232.768447][ T5873] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  232.792034][ T2137] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  233.858739][ T5824] usb 6-1: USB disconnect, device number 13
[  233.864115][ T2137] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  233.875124][ T2137] ath9k_htc: Failed to initialize the device
[  234.010087][ T5824] usb 6-1: ath9k_htc: USB layer deinitialized
[  234.405069][   T29] audit: type=1400 audit(1731559098.675:578): avc:  denied  { append } for  pid=8743 comm="syz.2.707" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  234.533758][ T5871] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  234.618458][ T5185] bcm5974 5-1:1.0: could not write to device
[  234.740857][ T8752] =======================================================
[  234.740857][ T8752] WARNING: The mand mount option has been deprecated and
[  234.740857][ T8752]          and is ignored by this kernel. Remove the mand
[  234.740857][ T8752]          option from the mount to silence this warning.
[  234.740857][ T8752] =======================================================
[  234.816650][ T5824] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  234.851008][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  234.902020][ T5921] usb 5-1: USB disconnect, device number 24
[  234.903894][ T5871] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  234.953774][ T5871] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.003397][ T5824] usb 3-1: Using ep0 maxpacket: 32
[  235.011243][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0
[  235.081008][ T5871] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  235.327152][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.414317][ T5871] usb 1-1: config 0 descriptor??
[  235.416180][ T5824] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[  235.433634][ T5824] usb 3-1: config 0 has no interface number 0
[  235.442525][ T5824] usb 3-1: config 0 interface 107 altsetting 128 endpoint 0xB has an invalid bInterval 57, changing to 9
[  235.453902][ T5824] usb 3-1: config 0 interface 107 has no altsetting 0
[  235.493933][ T8752] mkiss: ax0: crc mode is auto.
[  235.524273][ T5824] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=f6.e4
[  235.533830][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.542090][ T5824] usb 3-1: Product: syz
[  235.546401][ T5824] usb 3-1: Manufacturer: syz
[  235.551018][ T5824] usb 3-1: SerialNumber: syz
[  235.585015][ T5824] usb 3-1: config 0 descriptor??
[  236.130484][ T5824] HFC-S_USB 3-1:0.107: probe with driver HFC-S_USB failed with error -5
[  236.139538][ T5824] usbhid 3-1:0.107: couldn't find an input interrupt endpoint
[  236.151787][ T5871] wacom 0003:056A:00C4.000E: unknown main item tag 0x0
[  236.165128][ T5871] wacom 0003:056A:00C4.000E: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0
[  236.172622][ T5824] usb 3-1: USB disconnect, device number 23
[  236.965424][ T5824] usb 1-1: USB disconnect, device number 24
[  237.097179][   T29] audit: type=1400 audit(1731559101.265:579): avc:  denied  { name_bind } for  pid=8777 comm="syz.1.719" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  238.196755][ T8796] FAULT_INJECTION: forcing a failure.
[  238.196755][ T8796] name failslab, interval 1, probability 0, space 0, times 0
[  238.234815][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.0.725 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  238.245441][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  238.255502][ T8796] Call Trace:
[  238.258772][ T8796]  <TASK>
[  238.261679][ T8796]  dump_stack_lvl+0x16c/0x1f0
[  238.266353][ T8796]  should_fail_ex+0x497/0x5b0
[  238.271005][ T8796]  ? fs_reclaim_acquire+0xae/0x150
[  238.276090][ T8796]  should_failslab+0xc2/0x120
[  238.280739][ T8796]  __kmalloc_noprof+0xcb/0x400
[  238.285491][ T8796]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  238.291137][ T8796]  tomoyo_realpath_from_path+0xb9/0x720
[  238.296663][ T8796]  ? tomoyo_path_number_perm+0x232/0x590
[  238.302271][ T8796]  tomoyo_path_number_perm+0x245/0x590
[  238.307701][ T8796]  ? tomoyo_path_number_perm+0x232/0x590
[  238.313303][ T8796]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  238.319265][ T8796]  ? trace_lock_acquire+0x14a/0x1d0
[  238.324440][ T8796]  ? lock_acquire+0x2f/0xb0
[  238.328913][ T8796]  ? __fget_files+0x40/0x3f0
[  238.333493][ T8796]  ? __fget_files+0x244/0x3f0
[  238.338167][ T8796]  security_file_ioctl+0x9b/0x240
[  238.343163][ T8796]  __x64_sys_ioctl+0xbb/0x220
[  238.347817][ T8796]  do_syscall_64+0xcd/0x250
[  238.352294][ T8796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.358179][ T8796] RIP: 0033:0x7f2c2a97e719
[  238.362566][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.382155][ T8796] RSP: 002b:00007f2c2b7b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.390539][ T8796] RAX: ffffffffffffffda RBX: 00007f2c2ab35f80 RCX: 00007f2c2a97e719
[  238.398487][ T8796] RDX: 0000000000000000 RSI: 00000000400454da RDI: 0000000000000003
[  238.406442][ T8796] RBP: 00007f2c2b7b6090 R08: 0000000000000000 R09: 0000000000000000
[  238.414396][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.422339][ T8796] R13: 0000000000000000 R14: 00007f2c2ab35f80 R15: 00007ffcde461038
[  238.430291][ T8796]  </TASK>
[  238.440261][ T8796] ERROR: Out of memory at tomoyo_realpath_from_path.
[  239.054698][   T29] audit: type=1400 audit(1731559103.325:580): avc:  denied  { sqpoll } for  pid=8807 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  239.118013][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  239.293033][ T5873] usb 5-1: unable to get BOS descriptor or descriptor too short
[  239.302482][ T5873] usb 5-1: too many configurations: 255, using maximum allowed: 8
[  239.331331][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  239.389520][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  239.449877][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  239.504366][ T5873] usb 5-1: config 66 has no interface number 1
[  239.533548][ T5871] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  239.573977][ T5873] usb 5-1: config 66 has no interface number 2
[  239.589712][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  239.603295][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  239.733520][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  239.740304][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  239.747198][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  239.793387][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  239.805635][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  239.813974][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  239.822283][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  239.831520][ T5873] usb 5-1: config 66 has no interface number 1
[  239.837867][ T5873] usb 5-1: config 66 has no interface number 2
[  239.844274][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  239.857482][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  239.870681][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  239.877536][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  239.884358][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  239.893749][ T5871] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  239.905184][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  239.913257][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  239.921659][ T5871] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.931524][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0
[  239.938346][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  239.950975][ T5871] usb 6-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  239.960233][ T8833] cgroup: noprefix used incorrectly
[  239.966370][ T5873] usb 5-1: config 66 has no interface number 1
[  239.972638][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.980707][ T5873] usb 5-1: config 66 has no interface number 2
[  239.987622][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  240.000751][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  240.013881][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  240.020580][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  240.027375][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  240.041862][ T5871] usb 6-1: config 0 descriptor??
[  240.043547][ T5921] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  240.071620][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  240.080070][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  240.088468][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  240.097780][ T5873] usb 5-1: config 66 has no interface number 1
[  240.104120][ T5873] usb 5-1: config 66 has no interface number 2
[  240.110310][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  240.126055][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  240.137472][   T29] audit: type=1400 audit(1731559360.364:581): avc:  denied  { setopt } for  pid=8834 comm=2321200A scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  240.139377][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  240.165195][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  240.172595][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  240.193577][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  240.201683][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  240.204933][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.209997][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  240.224354][ T5921] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  240.229083][ T5873] usb 5-1: config 66 has no interface number 1
[  240.249458][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.263470][ T5873] usb 5-1: config 66 has no interface number 2
[  240.269656][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  240.274356][ T5921] usb 3-1: config 0 descriptor??
[  240.282717][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  240.303591][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  240.312832][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  240.319084][ T5921] pwc: Askey VC010 type 2 USB webcam detected.
[  240.330264][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  240.357249][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  240.371292][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  240.387397][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  240.403317][ T5873] usb 5-1: config 66 has no interface number 1
[  240.419134][ T5873] usb 5-1: config 66 has no interface number 2
[  240.431583][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  240.466400][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  240.523048][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  240.542933][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  240.557364][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  240.575731][ T8841] FAULT_INJECTION: forcing a failure.
[  240.575731][ T8841] name failslab, interval 1, probability 0, space 0, times 0
[  240.592476][ T8841] CPU: 0 UID: 0 PID: 8841 Comm: syz.0.741 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  240.603086][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  240.613138][ T8841] Call Trace:
[  240.616407][ T8841]  <TASK>
[  240.619326][ T8841]  dump_stack_lvl+0x16c/0x1f0
[  240.623994][ T8841]  should_fail_ex+0x497/0x5b0
[  240.628671][ T8841]  ? fs_reclaim_acquire+0xae/0x150
[  240.633770][ T8841]  should_failslab+0xc2/0x120
[  240.638436][ T8841]  kmem_cache_alloc_noprof+0x6e/0x2f0
[  240.643798][ T8841]  ? alloc_empty_file+0x73/0x1e0
[  240.648722][ T8841]  alloc_empty_file+0x73/0x1e0
[  240.653479][ T8841]  path_openat+0xe1/0x2d60
[  240.657881][ T8841]  ? hlock_class+0x4e/0x130
[  240.662366][ T8841]  ? __lock_acquire+0x163e/0x3ce0
[  240.667379][ T8841]  ? __pfx_path_openat+0x10/0x10
[  240.672300][ T8841]  ? __pfx___lock_acquire+0x10/0x10
[  240.677482][ T8841]  do_filp_open+0x1dc/0x430
[  240.681967][ T8841]  ? __pfx_do_filp_open+0x10/0x10
[  240.686974][ T8841]  ? find_held_lock+0x2d/0x110
[  240.691731][ T8841]  ? _raw_spin_unlock+0x28/0x50
[  240.696593][ T8841]  ? alloc_fd+0x2d7/0x6c0
[  240.700912][ T8841]  do_sys_openat2+0x17a/0x1e0
[  240.705578][ T8841]  ? __pfx_do_sys_openat2+0x10/0x10
[  240.710777][ T8841]  ? __fget_files+0x244/0x3f0
[  240.715452][ T8841]  __x64_sys_openat+0x175/0x210
[  240.720303][ T8841]  ? __pfx___x64_sys_openat+0x10/0x10
[  240.725660][ T8841]  ? ksys_write+0x1ad/0x260
[  240.730149][ T8841]  do_syscall_64+0xcd/0x250
[  240.734741][ T8841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.740650][ T8841] RIP: 0033:0x7f2c2a97e719
[  240.745066][ T8841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.764679][ T8841] RSP: 002b:00007f2c2b7b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  240.773078][ T8841] RAX: ffffffffffffffda RBX: 00007f2c2ab35f80 RCX: 00007f2c2a97e719
[  240.781034][ T8841] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c
[  240.788991][ T8841] RBP: 00007f2c2b7b6090 R08: 0000000000000000 R09: 0000000000000000
[  240.796955][ T8841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.804926][ T8841] R13: 0000000000000000 R14: 00007f2c2ab35f80 R15: 00007ffcde461038
[  240.812904][ T8841]  </TASK>
[  240.863408][ T5873] usb 5-1: config 66 has an invalid interface number: 7 but max is 1
[  240.863657][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00
[  240.876205][ T5871] wacom 0003:056A:00C4.000F: unknown main item tag 0x0
[  240.883970][ T5921] pwc: recv_control_msg error -32 req 02 val 2700
[  240.891446][ T5873] usb 5-1: config 66 has an invalid interface number: 174 but max is 1
[  240.896792][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00
[  240.918875][ T5921] pwc: recv_control_msg error -32 req 04 val 1000
[  240.925738][ T5921] pwc: recv_control_msg error -32 req 04 val 1300
[  240.932682][ T5921] pwc: recv_control_msg error -32 req 04 val 1400
[  240.943427][ T5873] usb 5-1: config 66 has 3 interfaces, different from the descriptor's value: 2
[  240.952725][ T5871] wacom 0003:056A:00C4.000F: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.5-1/input0
[  240.953146][ T5921] pwc: recv_control_msg error -71 req 02 val 2000
[  240.972792][ T5873] usb 5-1: config 66 has no interface number 1
[  240.991223][ T5873] usb 5-1: config 66 has no interface number 2
[  241.001496][ T5873] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  241.016499][ T5921] pwc: recv_control_msg error -71 req 02 val 2100
[  241.041373][ T5921] pwc: recv_control_msg error -71 req 04 val 1500
[  241.051434][ T5921] pwc: recv_control_msg error -71 req 02 val 2500
[  241.053773][ T5873] usb 5-1: config 66 interface 7 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  241.062041][ T5921] pwc: recv_control_msg error -71 req 02 val 2400
[  241.077059][ T5873] usb 5-1: config 66 interface 0 has no altsetting 0
[  241.168516][ T5873] usb 5-1: config 66 interface 7 has no altsetting 0
[  241.308171][ T5873] usb 5-1: config 66 interface 174 has no altsetting 0
[  241.477384][ T5873] usb 5-1: unable to read config index 7 descriptor/start: -71
[  241.488410][ T5921] pwc: recv_control_msg error -71 req 02 val 2600
[  241.495406][ T5921] pwc: recv_control_msg error -71 req 02 val 2900
[  241.505000][ T5873] usb 5-1: can't read configurations, error -71
[  241.545945][    T8] usb 6-1: USB disconnect, device number 14
[  241.556526][ T5921] pwc: recv_control_msg error -71 req 02 val 2800
[  241.620837][ T5921] pwc: recv_control_msg error -71 req 04 val 1100
[  241.652851][ T5921] pwc: recv_control_msg error -71 req 04 val 1200
[  241.731738][ T5921] pwc: Registered as video103.
[  242.108757][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  242.114888][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  242.139446][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36
[  242.156481][ T5921] usb 3-1: USB disconnect, device number 24
[  242.179171][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.750'.
[  242.188153][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[  242.345863][ T8869] cgroup: noprefix used incorrectly
[  242.464592][ T8871] netlink: 80 bytes leftover after parsing attributes in process `syz.5.753'.
[  242.556765][ T5838] Bluetooth: Unexpected continuation frame (len 12)
[  242.668559][    T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  244.596381][   T29] audit: type=1400 audit(1731559364.394:582): avc:  denied  { bind } for  pid=8870 comm="syz.5.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  244.804397][    T8] usb 1-1: Using ep0 maxpacket: 32
[  244.811109][    T8] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  244.830787][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.862866][    T8] usb 1-1: config 0 descriptor??
[  244.879344][    T8] as10x_usb: device has been detected
[  244.890977][    T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  245.442745][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  245.697041][ T5873] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  245.813429][ T2137] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  245.892248][ T8900] can0: slcan on ttyS3.
[  245.913574][ T5873] usb 2-1: Using ep0 maxpacket: 8
[  245.923688][ T5873] usb 2-1: config 0 has no interfaces?
[  245.929833][ T5873] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  245.954101][    T8] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  245.964365][    T8] as10x_usb: error during firmware upload part1
[  245.970937][    T8] Registered device nBox DVB-T Dongle
[  246.021149][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.109274][ T2137] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.120358][ T2137] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  246.129469][ T2137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.167609][ T8903] syzkaller1: entered promiscuous mode
[  246.173242][ T8903] syzkaller1: entered allmulticast mode
[  246.358885][ T5873] usb 2-1: config 0 descriptor??
[  246.379710][ T2137] usb 6-1: config 0 descriptor??
[  246.389823][ T2137] pwc: Askey VC010 type 2 USB webcam detected.
[  246.436933][    T8] usb 1-1: USB disconnect, device number 25
[  246.522645][    T8] Unregistered device nBox DVB-T Dongle
[  246.530741][    T8] as10x_usb: device has been disconnected
[  246.584212][   T29] audit: type=1400 audit(1731559622.729:583): avc:  denied  { write } for  pid=8908 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  246.610285][ T8900] can0 (unregistered): slcan off ttyS3.
[  246.652883][   T29] audit: type=1400 audit(1731559622.909:584): avc:  denied  { getopt } for  pid=8884 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  246.686771][ T5824] usb 2-1: USB disconnect, device number 40
[  246.713514][   T29] audit: type=1400 audit(1731559622.909:585): avc:  denied  { getopt } for  pid=8884 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  246.758051][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.765'.
[  246.828085][ T2137] pwc: recv_control_msg error -32 req 02 val 2b00
[  246.835920][ T2137] pwc: recv_control_msg error -32 req 02 val 2700
[  246.842972][ T2137] pwc: recv_control_msg error -32 req 02 val 2c00
[  246.855974][ T2137] pwc: recv_control_msg error -32 req 04 val 1000
[  246.865981][ T5921] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  246.869482][ T2137] pwc: recv_control_msg error -32 req 04 val 1300
[  246.909435][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  246.918433][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'.
[  246.932370][ T8921] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48549 - 0
[  246.941615][ T8921] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48549 - 0
[  246.951287][ T8921] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48549 - 0
[  246.962262][ T8921] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48549 - 0
[  246.973992][ T8921] geneve2: entered promiscuous mode
[  246.979295][ T8921] geneve2: entered allmulticast mode
[  247.029240][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  247.037595][ T5921] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  247.052800][ T5921] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.062119][   T29] audit: type=1400 audit(1731559623.319:586): avc:  denied  { map } for  pid=8926 comm="syz.0.771" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  247.062814][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0
[  247.093230][ T5921] usb 3-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  247.102668][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.222058][ T5921] usb 3-1: config 0 descriptor??
[  247.229740][ T2137] pwc: recv_control_msg error -71 req 02 val 2000
[  247.257543][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.771'.
[  247.769914][ T2137] pwc: recv_control_msg error -71 req 02 val 2100
[  247.777147][ T2137] pwc: recv_control_msg error -71 req 04 val 1500
[  247.787142][ T2137] pwc: recv_control_msg error -71 req 02 val 2500
[  247.798254][ T2137] pwc: recv_control_msg error -71 req 02 val 2400
[  247.805975][ T2137] pwc: recv_control_msg error -71 req 02 val 2600
[  247.813261][ T2137] pwc: recv_control_msg error -71 req 02 val 2900
[  247.839813][ T2137] pwc: recv_control_msg error -71 req 02 val 2800
[  247.958420][ T2137] pwc: recv_control_msg error -71 req 04 val 1100
[  247.992822][ T2137] pwc: recv_control_msg error -71 req 04 val 1200
[  248.150522][ T2137] pwc: Registered as video103.
[  248.229298][ T2137] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37
[  248.246216][ T2137] usb 6-1: USB disconnect, device number 15
[  248.346424][   T29] audit: type=1400 audit(1731559624.609:587): avc:  denied  { watch watch_reads } for  pid=8940 comm="syz.1.773" path="pipe:[20545]" dev="pipefs" ino=20545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  248.577789][ T5921] wacom 0003:056A:00C4.0010: unknown main item tag 0x0
[  248.596723][ T5921] wacom 0003:056A:00C4.0010: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.2-1/input0
[  249.453978][ T8951] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  250.470273][ T5921] usb 3-1: USB disconnect, device number 25
[  250.496161][ T8937] infiniband syz2: set active
[  250.501035][ T8937] infiniband syz2: added team_slave_1
[  250.598290][ T8937] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  250.601616][ T8937] infiniband syz2: Couldn't open port 1
[  250.703447][ T8937] RDS/IB: syz2: added
[  250.709911][ T8937] smc: adding ib device syz2 with port count 1
[  250.717562][ T8937] smc:    ib device syz2 port 1 has pnetid 
[  251.038726][   T29] audit: type=1400 audit(1731559627.099:588): avc:  denied  { write } for  pid=8957 comm="syz.5.777" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  251.463490][ T5873] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  251.483629][ T2137] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  251.656589][ T5873] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  251.689183][ T2137] usb 2-1: unable to get BOS descriptor or descriptor too short
[  252.163633][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.186771][ T2137] usb 2-1: not running at top speed; connect to a high speed hub
[  252.203704][ T5873] usb 5-1: config 0 descriptor??
[  252.211885][ T2137] usb 2-1: config 2 has an invalid interface number: 212 but max is 1
[  252.226322][ T5873] cp210x 5-1:0.0: cp210x converter detected
[  252.239483][ T2137] usb 2-1: config 2 has an invalid interface number: 226 but max is 1
[  252.266594][ T2137] usb 2-1: config 2 has no interface number 0
[  252.284500][ T2137] usb 2-1: config 2 has no interface number 1
[  252.304327][ T2137] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  252.315414][ T2137] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  252.326491][ T2137] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  252.337721][ T2137] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  252.394357][ T2137] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  252.408137][ T2137] usb 2-1: config 2 interface 212 has no altsetting 0
[  252.417051][ T2137] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  252.442581][ T2137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.471743][ T2137] usb 2-1: Product: syz
[  252.493394][ T2137] usb 2-1: Manufacturer: syz
[  252.498024][ T2137] usb 2-1: SerialNumber: syz
[  252.598317][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'.
[  252.634732][ T5873] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  252.730014][   T29] audit: type=1326 audit(1731559884.998:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.753308][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  252.753521][    T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  252.763920][   T29] audit: type=1326 audit(1731559885.018:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.773642][ T5921] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  252.793137][   T29] audit: type=1326 audit(1731559885.018:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824245][   T29] audit: type=1326 audit(1731559885.018:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824310][   T29] audit: type=1326 audit(1731559885.018:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824341][   T29] audit: type=1326 audit(1731559885.018:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824368][   T29] audit: type=1326 audit(1731559885.018:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824396][   T29] audit: type=1326 audit(1731559885.018:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.824445][   T29] audit: type=1326 audit(1731559885.018:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8993 comm="syz.0.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c2a97e719 code=0x7ffc0000
[  252.981648][ T5873] usb 5-1: cp210x converter now attached to ttyUSB0
[  252.993178][ T8996] loop7: detected capacity change from 0 to 16384
[  252.999598][ T2137] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input41
[  253.010376][ T2137] usb 2-1: USB disconnect, device number 41
[  253.021921][    T8] usb 6-1: Using ep0 maxpacket: 8
[  253.041181][    T8] usb 6-1: config 0 has no interfaces?
[  253.048884][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.059303][ T5921] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  253.068481][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.107735][ T5921] usb 3-1: config 0 descriptor??
[  253.118721][ T5921] pwc: Askey VC010 type 2 USB webcam detected.
[  253.128872][    T8] usb 6-1: New USB device found, idVendor=1199, idProduct=9007, bcdDevice=b4.f5
[  253.138099][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.146325][    T8] usb 6-1: Product: syz
[  253.150465][    T8] usb 6-1: Manufacturer: syz
[  253.155369][    T8] usb 6-1: SerialNumber: syz
[  253.162054][    T8] usb 6-1: config 0 descriptor??
[  253.163780][ T8997] Invalid logical block size (1)
[  256.367677][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  256.374343][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  256.442212][ T5921] pwc: recv_control_msg error -71 req 02 val 2b00
[  256.450490][ T5921] pwc: recv_control_msg error -71 req 02 val 2700
[  256.469687][ T5921] pwc: recv_control_msg error -71 req 02 val 2c00
[  256.514712][ T5902] usb 6-1: USB disconnect, device number 16
[  256.552936][ T5921] pwc: recv_control_msg error -71 req 04 val 1000
[  256.589705][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.600548][    T9] usb 5-1: USB disconnect, device number 27
[  256.613892][ T5921] pwc: recv_control_msg error -71 req 04 val 1300
[  256.645885][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.696341][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.577776][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  257.577815][   T29] audit: type=1400 audit(1731559889.848:610): avc:  denied  { setattr } for  pid=9011 comm="syz.5.790" name="NETLINK" dev="sockfs" ino=20469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  257.627001][ T5921] pwc: recv_control_msg error -71 req 04 val 1400
[  257.636000][ T5921] pwc: recv_control_msg error -71 req 02 val 2000
[  257.642719][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  257.693707][ T5921] pwc: recv_control_msg error -71 req 02 val 2100
[  257.709347][ T5921] pwc: recv_control_msg error -71 req 04 val 1500
[  257.858128][ T5921] pwc: recv_control_msg error -71 req 02 val 2500
[  257.868557][    T9] cp210x 5-1:0.0: device disconnected
[  258.473520][ T5921] pwc: recv_control_msg error -71 req 02 val 2400
[  259.112100][ T5921] pwc: recv_control_msg error -71 req 02 val 2600
[  259.143800][ T5921] pwc: recv_control_msg error -71 req 02 val 2900
[  259.176820][ T5921] pwc: recv_control_msg error -71 req 02 val 2800
[  259.202795][ T5921] pwc: recv_control_msg error -71 req 04 val 1100
[  259.222619][ T5921] pwc: recv_control_msg error -71 req 04 val 1200
[  259.240619][ T5921] pwc: Registered as video103.
[  259.246473][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42
[  259.417416][ T5921] usb 3-1: USB disconnect, device number 26
[  260.419700][ T2137] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  260.444794][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'.
[  260.453780][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'.
[  260.733489][ T2137] usb 1-1: Using ep0 maxpacket: 8
[  260.773991][ T2137] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  260.782511][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  260.843503][ T5838] Bluetooth: Unexpected continuation frame (len 12)
[  260.871161][ T2137] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  260.966791][ T9053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.373164][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  261.420514][ T5838] Bluetooth: hci4: ACL packet for unknown connection handle 1480
[  261.471544][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  261.482770][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  261.495324][ T2137] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  261.502754][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  261.543285][ T2137] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  261.607326][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  261.621415][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  261.882371][ T2137] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  261.891470][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  261.902882][ T2137] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  261.914860][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  261.927213][ T2137] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  261.959960][ T2137] usb 1-1: string descriptor 0 read error: -22
[  261.967213][ T2137] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  262.016478][ T2137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.096365][ T2137] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  262.195806][ T2137] usb 1-1: USB disconnect, device number 26
[  262.217572][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.811'.
[  262.576724][   T29] audit: type=1326 audit(1731559894.788:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.600362][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.653125][   T29] audit: type=1326 audit(1731559894.788:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.676776][   T29] audit: type=1326 audit(1731559894.788:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.700791][   T29] audit: type=1326 audit(1731559894.788:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.724248][   T29] audit: type=1326 audit(1731559894.808:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.747679][   T29] audit: type=1326 audit(1731559894.848:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.771290][   T29] audit: type=1326 audit(1731559894.848:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.794953][   T29] audit: type=1326 audit(1731559894.848:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.818491][   T29] audit: type=1326 audit(1731559894.848:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.841857][   T29] audit: type=1326 audit(1731559894.848:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.865249][   T29] audit: type=1326 audit(1731559894.848:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8e37e719 code=0x7fc00000
[  262.934795][    T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  263.013511][    T9] usb 5-1: new low-speed USB device number 28 using dummy_hcd
[  263.094385][    T8] usb 6-1: Using ep0 maxpacket: 16
[  263.102782][    T8] usb 6-1: config index 0 descriptor too short (expected 64742, got 92)
[  263.116670][    T8] usb 6-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  263.127731][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.141500][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  263.151614][    T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  263.164860][    T9] usb 5-1: device descriptor read/64, error -71
[  263.179339][    T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  263.190489][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.206005][    T8] usb 6-1: Product: syz
[  263.210293][    T8] usb 6-1: Manufacturer: syz
[  263.215105][    T8] usb 6-1: SerialNumber: syz
[  263.229821][    T8] cdc_ncm 6-1:1.0: skipping garbage
[  263.235481][    T8] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  263.242374][    T8] cdc_ncm 6-1:1.0: bind() failure
[  263.403552][    T9] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  263.445899][    T8] usb 6-1: USB disconnect, device number 17
[  263.543493][    T9] usb 5-1: device descriptor read/64, error -71
[  263.654516][    T9] usb usb5-port1: attempt power cycle
[  264.024038][    T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  264.523512][    T9] usb 5-1: device descriptor read/8, error -71
[  264.538535][ T9107] CUSE: unknown device info "KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  264.601333][ T9107] CUSE: unknown device info "3�ܟ�,��̘�"
[  264.607340][ T9107] CUSE: DEVNAME unspecified
[  264.689354][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'.
[  264.731217][ T9110] bridge: RTM_NEWNEIGH bridge2 with NTF_USE is not supported
[  264.763446][    T9] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  264.783891][    T9] usb 5-1: device descriptor read/8, error -71
[  264.865131][ T9117] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.888153][ T9117] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.898962][    T9] usb usb5-port1: unable to enumerate USB device
[  265.023965][ T9117] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.050904][ T9117] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.180118][ T9117] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.190846][ T9117] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.300836][ T2137] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  265.380223][ T9134] tipc: Enabled bearer <udp:syz2>, priority 10
[  265.386913][ T9135] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  265.512397][ T9117] team0: Port device netdevsim0 removed
[  265.527769][ T2137] usb 1-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad
[  265.558598][ T2137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.626114][ T9117] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.637613][ T9117] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.649283][ T2137] usb 1-1: config 0 descriptor??
[  265.656575][ T2137] gspca_main: tv8532-2.14.0 probing 0545:808b
[  265.801240][ T9117] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  265.815708][ T9117] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.834947][ T9117] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.849243][ T9117] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.863615][ T9117] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.881152][ T9117] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.921817][ T9117] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.935495][ T9117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.144690][ T5921] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  266.145959][ T2137] usb 1-1: USB disconnect, device number 27
[  268.019938][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'.
[  268.028842][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'.
[  268.343487][ T5921] usb 5-1: Using ep0 maxpacket: 16
[  268.349961][ T5921] usb 5-1: config index 0 descriptor too short (expected 64742, got 92)
[  268.368725][ T9170] ALSA: mixer_oss: invalid OSS volume ''
[  268.373656][ T5921] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  268.379518][   T29] kauditd_printk_skb: 45 callbacks suppressed
[  268.379529][   T29] audit: type=1400 audit(1731559900.648:667): avc:  denied  { ioctl } for  pid=9169 comm="syz.2.840" path="socket:[21105]" dev="sockfs" ino=21105 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  268.407841][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.496330][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  268.506337][ T5921] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  268.549119][ T5921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  268.564083][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.572731][ T5921] usb 5-1: Product: syz
[  268.586018][ T5921] usb 5-1: Manufacturer: syz
[  268.590635][ T5921] usb 5-1: SerialNumber: syz
[  268.602344][ T5921] cdc_ncm 5-1:1.0: skipping garbage
[  268.607742][ T5921] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  268.614905][ T5921] cdc_ncm 5-1:1.0: bind() failure
[  268.876325][ T5921] usb 5-1: USB disconnect, device number 32
[  270.823631][ T9197] FAULT_INJECTION: forcing a failure.
[  270.823631][ T9197] name failslab, interval 1, probability 0, space 0, times 0
[  270.836701][ T9197] CPU: 0 UID: 0 PID: 9197 Comm: syz.0.846 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  270.847292][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  270.857346][ T9197] Call Trace:
[  270.860617][ T9197]  <TASK>
[  270.863549][ T9197]  dump_stack_lvl+0x16c/0x1f0
[  270.868228][ T9197]  should_fail_ex+0x497/0x5b0
[  270.872910][ T9197]  ? fs_reclaim_acquire+0xae/0x150
[  270.878022][ T9197]  should_failslab+0xc2/0x120
[  270.882708][ T9197]  __kmalloc_noprof+0xcb/0x400
[  270.887477][ T9197]  ? rcu_is_watching+0x12/0xc0
[  270.892244][ T9197]  lsm_blob_alloc+0x68/0x90
[  270.896755][ T9197]  security_prepare_creds+0x30/0x270
[  270.902045][ T9197]  prepare_creds+0x540/0x750
[  270.906643][ T9197]  prepare_exec_creds+0x10/0x240
[  270.911584][ T9197]  bprm_execve+0xc2/0x1960
[  270.916005][ T9197]  ? __pfx_get_arg_page+0x10/0x10
[  270.921036][ T9197]  ? up_write+0x1b2/0x520
[  270.925363][ T9197]  ? __pfx_bprm_execve+0x10/0x10
[  270.930306][ T9197]  ? put_page+0xdb/0x280
[  270.934554][ T9197]  ? copy_string_kernel+0x20b/0x240
[  270.939759][ T9197]  do_execveat_common.isra.0+0x4f1/0x630
[  270.945402][ T9197]  __x64_sys_execveat+0xda/0x120
[  270.950340][ T9197]  do_syscall_64+0xcd/0x250
[  270.954846][ T9197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.960744][ T9197] RIP: 0033:0x7f2c2a97e719
[  270.965157][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.984762][ T9197] RSP: 002b:00007f2c2b7b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  270.993174][ T9197] RAX: ffffffffffffffda RBX: 00007f2c2ab35f80 RCX: 00007f2c2a97e719
[  271.001139][ T9197] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[  271.009112][ T9197] RBP: 00007f2c2b7b6090 R08: 0000000000001000 R09: 0000000000000000
[  271.017081][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  271.025051][ T9197] R13: 0000000000000000 R14: 00007f2c2ab35f80 R15: 00007ffcde461038
[  271.033032][ T9197]  </TASK>
[  271.036128][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.123182][   T29] audit: type=1326 audit(1731559903.788:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3db57e719 code=0x7ffc0000
[  272.259504][ T9212] netlink: 'syz.2.849': attribute type 1 has an invalid length.
[  272.304521][ T9212] netlink: 'syz.2.849': attribute type 4 has an invalid length.
[  272.312260][ T9212] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.849'.
[  272.348266][   T29] audit: type=1326 audit(1731559903.788:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3db57d0b0 code=0x7ffc0000
[  272.368592][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.5.847'.
[  272.371479][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.393043][ T9220] netlink: 56 bytes leftover after parsing attributes in process `syz.5.847'.
[  272.570498][   T29] audit: type=1326 audit(1731559903.788:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd3db57ff47 code=0x7ffc0000
[  272.607637][    T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  272.768390][   T29] audit: type=1326 audit(1731559903.788:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3db57e719 code=0x7ffc0000
[  272.885632][   T29] audit: type=1326 audit(1731559903.788:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd3db57ff47 code=0x7ffc0000
[  272.909265][   T29] audit: type=1326 audit(1731559903.788:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd3db57d3aa code=0x7ffc0000
[  272.932893][   T29] audit: type=1326 audit(1731559903.788:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3db57e719 code=0x7ffc0000
[  272.956090][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.962519][   T29] audit: type=1326 audit(1731559903.788:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9205 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd3db57e719 code=0x7ffc0000
[  272.985616][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.991727][   T29] audit: type=1400 audit(1731559903.788:676): avc:  denied  { bind } for  pid=9205 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  273.376318][    T9] usb 2-1: device descriptor read/64, error -71
[  273.509030][ T9241] FAULT_INJECTION: forcing a failure.
[  273.509030][ T9241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.525143][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.2.858 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  273.535742][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  273.545775][ T9241] Call Trace:
[  273.549031][ T9241]  <TASK>
[  273.551946][ T9241]  dump_stack_lvl+0x16c/0x1f0
[  273.556603][ T9241]  should_fail_ex+0x497/0x5b0
[  273.561261][ T9241]  _copy_to_user+0x32/0xd0
[  273.565671][ T9241]  rng_dev_read+0x25d/0x720
[  273.570179][ T9241]  ? __pfx_virtio_read+0x10/0x10
[  273.575113][ T9241]  ? __pfx_rng_dev_read+0x10/0x10
[  273.580120][ T9241]  ? bpf_lsm_file_permission+0x9/0x10
[  273.585465][ T9241]  ? security_file_permission+0x71/0x210
[  273.591089][ T9241]  ? __pfx_rng_dev_read+0x10/0x10
[  273.596091][ T9241]  vfs_readv+0x6bf/0x890
[  273.600313][ T9241]  ? find_held_lock+0x2d/0x110
[  273.605056][ T9241]  ? __pfx_vfs_readv+0x10/0x10
[  273.609800][ T9241]  ? find_held_lock+0x2d/0x110
[  273.614541][ T9241]  ? __pfx_lock_release+0x10/0x10
[  273.619539][ T9241]  ? trace_lock_acquire+0x14a/0x1d0
[  273.624813][ T9241]  ? __fget_files+0x244/0x3f0
[  273.629729][ T9241]  ? __x64_sys_preadv+0x22d/0x310
[  273.634725][ T9241]  __x64_sys_preadv+0x22d/0x310
[  273.639547][ T9241]  ? __pfx___x64_sys_preadv+0x10/0x10
[  273.644904][ T9241]  do_syscall_64+0xcd/0x250
[  273.649378][ T9241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.655256][ T9241] RIP: 0033:0x7fbe8e37e719
[  273.659652][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.679230][ T9241] RSP: 002b:00007fbe8f23d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  273.687615][ T9241] RAX: ffffffffffffffda RBX: 00007fbe8e535f80 RCX: 00007fbe8e37e719
[  273.695560][ T9241] RDX: 0000000000000001 RSI: 0000000020001880 RDI: 0000000000000003
[  273.703503][ T9241] RBP: 00007fbe8f23d090 R08: 0000000000000000 R09: 0000000000000000
[  273.711444][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.719385][ T9241] R13: 0000000000000000 R14: 00007fbe8e535f80 R15: 00007ffee288e2d8
[  273.727345][ T9241]  </TASK>
[  273.730423][    C0] vkms_vblank_simulate: vblank timer overrun
[  273.828143][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  273.828157][   T29] audit: type=1400 audit(1731559906.098:697): avc:  denied  { bind } for  pid=9243 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  273.854161][    T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  273.861923][    T9] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  273.870072][ T5902] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  273.877839][ T5921] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  274.014123][    T9] usb 2-1: device descriptor read/64, error -71
[  274.034471][    T8] usb 6-1: Using ep0 maxpacket: 16
[  274.040035][ T5921] usb 5-1: Using ep0 maxpacket: 32
[  274.046072][ T5902] usb 1-1: config 253 has an invalid interface number: 109 but max is 0
[  274.054690][ T5902] usb 1-1: config 253 has no interface number 0
[  274.061066][ T5902] usb 1-1: config 253 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  274.072324][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.083435][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.093237][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  274.108213][ T5921] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  274.116834][ T5921] usb 5-1: config 0 has no interface number 0
[  274.123085][ T5902] usb 1-1: New USB device found, idVendor=5a57, idProduct=0284, bcdDevice=3d.d3
[  274.133845][    T9] usb usb2-port1: attempt power cycle
[  274.139431][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.148401][    T8] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  274.157616][ T5902] usb 1-1: Product: syz
[  274.161948][ T5921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  274.171176][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.182456][ T5902] usb 1-1: Manufacturer: syz
[  274.187201][ T5902] usb 1-1: SerialNumber: syz
[  274.192315][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.200556][ T5921] usb 5-1: Product: syz
[  274.205657][ T5921] usb 5-1: Manufacturer: syz
[  274.214671][ T5921] usb 5-1: SerialNumber: syz
[  274.220232][    T8] usb 6-1: config 0 descriptor??
[  274.227303][ T5921] usb 5-1: config 0 descriptor??
[  274.239209][ T5921] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  274.273482][ T5871] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  274.423495][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  274.430134][ T5871] usb 3-1: config index 0 descriptor too short (expected 64742, got 92)
[  274.439024][ T5871] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  274.449305][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.457142][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.5.857'.
[  274.468806][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  274.478255][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  274.478580][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  274.493075][ T5871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  274.504623][    T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  274.510617][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.5.857'.
[  274.526885][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  274.527071][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.544307][ T5871] usb 3-1: Product: syz
[  274.544832][    T9] usb 2-1: device descriptor read/8, error -71
[  274.548580][ T5871] usb 3-1: Manufacturer: syz
[  274.548598][ T5871] usb 3-1: SerialNumber: syz
[  274.587888][ T5871] cdc_ncm 3-1:1.0: skipping garbage
[  274.593169][ T5871] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  274.600374][ T5871] cdc_ncm 3-1:1.0: bind() failure
[  274.699095][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.707801][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.803444][    T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  274.822945][    T8] usbhid 6-1:0.0: can't add hid device: -71
[  274.829768][    T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  274.840922][    T9] usb 2-1: device descriptor read/8, error -71
[  274.849838][    T8] usb 6-1: USB disconnect, device number 18
[  274.860916][ T5871] usb 3-1: USB disconnect, device number 27
[  274.919701][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  274.919910][ T2137] usb 5-1: USB disconnect, device number 33
[  274.952804][ T2137] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  274.963634][    T9] usb usb2-port1: unable to enumerate USB device
[  274.970744][ T2137] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  274.982577][ T2137] quatech2 5-1:0.51: device disconnected
[  275.736078][   T29] audit: type=1400 audit(1731559907.958:698): avc:  denied  { getopt } for  pid=9260 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  276.168983][ T2137] usb 1-1: USB disconnect, device number 28
[  276.263073][   T29] audit: type=1400 audit(1731559908.528:699): avc:  denied  { unmount } for  pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  276.323634][ T5871] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  276.359995][   T29] audit: type=1326 audit(1731559908.628:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9266 comm="syz.0.865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a97e719 code=0x0
[  276.504094][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  276.529133][ T5871] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  276.608968][ T5871] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  276.676580][ T5871] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  276.699460][ T5871] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024
[  276.722293][ T5871] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  276.736589][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0
[  276.745477][ T5871] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  276.755272][ T5871] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  276.763816][ T5871] usb 6-1: Product: syz
[  276.768206][ T5871] usb 6-1: Manufacturer: syz
[  276.772902][ T5871] usb 6-1: SerialNumber: syz
[  276.818650][ T5871] usb 6-1: config 0 descriptor??
[  276.831829][ T9256] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  276.845028][ T5871] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  276.867006][ T5871] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  277.596019][ T9285] befs: Invalid gid -1, using default
[  277.615669][ T9285] befs: (nullb0): No write support. Marking filesystem read-only
[  277.623941][   T29] audit: type=1400 audit(1731559909.798:701): avc:  denied  { nlmsg_write } for  pid=9284 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  277.672611][ T9285] befs: (nullb0): invalid magic header
[  277.728160][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.774698][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.843700][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.5.862'.
[  277.879266][   T25] usb 6-1: USB disconnect, device number 19
[  277.901457][   T25] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  277.902577][ T9305] openvswitch: netlink: Missing key (keys=40040, expected=2000)
[  277.908159][ T2137] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  278.093680][ T2137] usb 2-1: Using ep0 maxpacket: 8
[  278.106802][ T2137] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.121482][ T2137] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  278.131635][ T2137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  278.139981][ T2137] usb 2-1: SerialNumber: syz
[  278.158675][ T2137] usb 2-1: config 0 descriptor??
[  278.203533][ T5871] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  278.221872][ T2137] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  278.241705][ T2137] usb 2-1: No valid video chain found.
[  278.366334][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  278.417896][ T5871] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  278.427828][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.435835][   T29] audit: type=1400 audit(1731559910.698:702): avc:  denied  { execute } for  pid=9287 comm="syz.1.870" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  278.483024][ T5871] usb 1-1: config 0 descriptor??
[  278.493549][ T9288] netlink: 76 bytes leftover after parsing attributes in process `syz.1.870'.
[  278.524616][ T5871] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  278.540692][   T25] usb 2-1: USB disconnect, device number 46
[  278.541039][   T29] audit: type=1400 audit(1731559910.808:703): avc:  denied  { getopt } for  pid=9316 comm="syz.5.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  278.754096][ T5871] gspca_vc032x: reg_r err -71
[  278.758897][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.765104][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.779066][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.807297][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.833444][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.848950][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.864268][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.869659][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.882343][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.887965][ T5838] Bluetooth: Unexpected continuation frame (len 12)
[  278.900923][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.913802][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.919193][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.929295][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.934781][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.943391][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.954729][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.960107][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.974418][ T5871] gspca_vc032x: I2c Bus Busy Wait 00
[  278.988616][ T5871] gspca_vc032x: Unknown sensor...
[  279.010496][ T9330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.033239][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  279.041157][ T5838] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  279.187196][ T5871] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  279.387416][ T5871] usb 1-1: USB disconnect, device number 29
[  279.488951][   T29] audit: type=1326 audit(1731559911.758:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.574357][   T29] audit: type=1326 audit(1731559911.758:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.597788][   T29] audit: type=1326 audit(1731559911.758:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.621163][   T29] audit: type=1326 audit(1731559911.758:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.644979][   T29] audit: type=1326 audit(1731559911.758:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.668483][   T29] audit: type=1326 audit(1731559911.758:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.668784][ T9335] netlink: 80 bytes leftover after parsing attributes in process `syz.5.884'.
[  279.692169][   T29] audit: type=1326 audit(1731559911.758:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.759915][   T29] audit: type=1326 audit(1731559911.758:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.783560][   T29] audit: type=1326 audit(1731559911.758:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  279.807092][   T29] audit: type=1326 audit(1731559911.758:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2277e719 code=0x7fc00000
[  280.080456][ T9352] 9pnet_fd: Insufficient options for proto=fd
[  280.163701][    T8] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  280.334945][    T8] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  280.344291][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.473475][    T8] usb 5-1: config 0 descriptor??
[  281.273623][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.283613][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.488504][    T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  281.494161][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'.
[  281.497445][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  281.520868][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  282.054652][ T9379] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232
[  282.078360][    T8] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  282.108414][    T8] [drm] Initialized udl on minor 2
[  282.131197][    T8] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  282.232318][    T8] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  282.247627][ T5921] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  282.258619][    T8] usb 5-1: USB disconnect, device number 34
[  282.270770][ T5921] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  282.540122][ T9390] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.437501][ T9400] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  284.011598][ T9400] CUSE: unknown device info "3�ܟ�,��̘�"
[  284.021544][ T9400] CUSE: DEVNAME unspecified
[  284.113890][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  284.343632][    T9] usb 3-1: Using ep0 maxpacket: 8
[  284.360291][    T9] usb 3-1: config 16 has no interfaces?
[  284.379450][    T9] usb 3-1: New USB device found, idVendor=0830, idProduct=0003, bcdDevice=99.41
[  284.396541][ T9409] No such timeout policy "syz0"
[  284.421667][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.848588][   T29] kauditd_printk_skb: 53 callbacks suppressed
[  284.848602][   T29] audit: type=1400 audit(1731559917.118:767): avc:  denied  { map } for  pid=9421 comm="syz.5.908" path="socket:[22234]" dev="sockfs" ino=22234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  284.900294][   T29] audit: type=1400 audit(1731559917.148:768): avc:  denied  { read } for  pid=9421 comm="syz.5.908" path="socket:[22234]" dev="sockfs" ino=22234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  285.613576][ T5902] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  285.726437][   T25] usb 3-1: USB disconnect, device number 28
[  285.920938][ T5902] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.044888][ T9459] kvm: emulating exchange as write
[  286.057994][ T5902] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.122931][ T5902] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.162779][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.326834][   T29] audit: type=1326 audit(1731559918.598:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9431 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3db57e719 code=0x7fc00000
[  286.404775][ T5902] usb 6-1: usb_control_msg returned -32
[  286.434832][ T5902] usbtmc 6-1:16.0: can't read capabilities
[  286.493654][   T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  286.713727][   T25] usb 2-1: Using ep0 maxpacket: 16
[  286.813400][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  286.828085][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  286.905563][   T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  286.916420][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.943655][   T25] usb 2-1: Product: syz
[  286.950572][   T25] usb 2-1: Manufacturer: syz
[  286.962238][   T25] usb 2-1: SerialNumber: syz
[  287.016547][   T25] usb 2-1: config 0 descriptor??
[  287.042595][   T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  288.036688][   T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  288.212178][ T5902] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  288.303497][    T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  288.438770][ T5921] usb 6-1: USB disconnect, device number 20
[  288.679489][    T8] usb 1-1: Using ep0 maxpacket: 16
[  288.694789][    T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  288.708585][    T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  288.718915][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.237892][ T5902] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  289.246949][   T25] em28xx 2-1:0.0: chip ID is em2874
[  289.252205][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.260360][    T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  289.271692][    T8] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  289.292219][ T5902] usb 5-1: config 0 descriptor??
[  289.302365][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  289.320608][ T5902] pwc: Askey VC010 type 2 USB webcam detected.
[  289.329835][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.346244][    T8] usb 1-1: Product: syz
[  289.350600][    T8] usb 1-1: Manufacturer: syz
[  289.361695][    T8] usb 1-1: SerialNumber: syz
[  289.483808][  T966] usb 2-1: USB disconnect, device number 47
[  289.523969][  T966] em28xx 2-1:0.0: Disconnecting em28xx
[  289.538871][  T966] em28xx 2-1:0.0: Freeing device
[  289.643468][ T5921] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  289.720430][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00
[  289.729271][ T5902] pwc: recv_control_msg error -32 req 02 val 2700
[  289.736622][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00
[  289.743653][ T5902] pwc: recv_control_msg error -32 req 04 val 1000
[  289.750613][ T5902] pwc: recv_control_msg error -32 req 04 val 1300
[  289.753473][ T5871] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  289.833500][ T5921] usb 3-1: Using ep0 maxpacket: 16
[  289.840297][ T5921] usb 3-1: config index 0 descriptor too short (expected 64742, got 92)
[  289.848836][ T5921] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  289.858983][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.869245][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  289.878303][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  289.892752][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  289.902271][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.910473][ T5921] usb 3-1: Product: syz
[  289.913806][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  289.914926][ T5921] usb 3-1: Manufacturer: syz
[  289.924615][ T5921] usb 3-1: SerialNumber: syz
[  289.930247][ T5871] usb 6-1: config 0 has an invalid interface number: 9 but max is 0
[  289.940390][ T5871] usb 6-1: config 0 has no interface number 0
[  289.943027][ T5921] cdc_ncm 3-1:1.0: skipping garbage
[  289.954621][ T5871] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  289.955086][ T5921] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  289.964046][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.975839][ T5921] cdc_ncm 3-1:1.0: bind() failure
[  289.984141][ T5871] usb 6-1: Product: syz
[  289.985306][ T5902] pwc: recv_control_msg error -71 req 02 val 2000
[  289.989975][ T5871] usb 6-1: Manufacturer: syz
[  290.000293][ T5871] usb 6-1: SerialNumber: syz
[  290.007212][ T5871] usb 6-1: config 0 descriptor??
[  290.011791][ T5902] pwc: recv_control_msg error -71 req 02 val 2100
[  290.014513][ T5871] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  290.023243][ T5902] pwc: recv_control_msg error -71 req 04 val 1500
[  290.039571][ T5902] pwc: recv_control_msg error -71 req 02 val 2500
[  290.048202][ T5902] pwc: recv_control_msg error -71 req 02 val 2400
[  290.055849][ T5902] pwc: recv_control_msg error -71 req 02 val 2600
[  290.062649][ T5902] pwc: recv_control_msg error -71 req 02 val 2900
[  290.069668][ T5902] pwc: recv_control_msg error -71 req 02 val 2800
[  290.076747][ T5902] pwc: recv_control_msg error -71 req 04 val 1100
[  290.083960][ T5902] pwc: recv_control_msg error -71 req 04 val 1200
[  290.092770][ T5902] pwc: Registered as video103.
[  290.098669][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44
[  290.115479][ T5902] usb 5-1: USB disconnect, device number 35
[  290.281687][   T25] usb 3-1: USB disconnect, device number 29
[  290.290436][   T29] audit: type=1400 audit(1731560178.538:770): avc:  denied  { mount } for  pid=9500 comm="syz.5.929" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  291.018377][    T8] usb 1-1: unit 0 not found!
[  291.034437][    T8] usb 1-1: USB disconnect, device number 30
[  291.115967][ T9512] SELinux:  policydb string  does not match my string SE Linux
[  291.126038][ T9512] SELinux: failed to load policy
[  291.239246][ T6754] udevd[6754]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.258133][ T5838] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  292.143781][ T5871] gspca_topro: reg_r err -110
[  292.457079][ T5871] gspca_topro: Sensor soi763a
[  292.481151][ T5871] usb 6-1: USB disconnect, device number 21
[  293.011337][   T29] audit: type=1400 audit(1731560181.268:771): avc:  denied  { nlmsg_read } for  pid=9536 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  293.055814][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'.
[  293.157794][   T29] audit: type=1400 audit(1731560181.418:772): avc:  denied  { unmount } for  pid=6836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  293.210600][ T9544] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  293.683430][ T5871] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  293.853516][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  293.869717][ T5871] usb 3-1: config index 0 descriptor too short (expected 64742, got 92)
[  293.899747][ T5871] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  293.931177][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.960508][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  293.992843][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  294.023092][ T5871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  294.034418][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.051755][ T5871] usb 3-1: Product: syz
[  294.060317][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'.
[  294.069268][ T5871] usb 3-1: Manufacturer: syz
[  294.077886][ T5871] usb 3-1: SerialNumber: syz
[  294.089342][ T5871] cdc_ncm 3-1:1.0: skipping garbage
[  294.099939][ T5871] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  294.115917][ T5871] cdc_ncm 3-1:1.0: bind() failure
[  294.327600][ T5871] usb 3-1: USB disconnect, device number 30
[  294.821904][   T29] audit: type=1400 audit(1731560183.048:773): avc:  denied  { mount } for  pid=9568 comm="syz.5.949" name="/" dev="rpc_pipefs" ino=23583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  295.249812][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'.
[  295.258681][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.950'.
[  295.271717][ T9578] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.280500][ T9578] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.289260][ T9578] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.298026][ T9578] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.306817][ T9578] vxlan0: entered promiscuous mode
[  295.894734][ T9589] misc userio: Invalid payload size
[  296.418048][   T29] audit: type=1400 audit(1731560184.648:774): avc:  denied  { mounton } for  pid=9580 comm="syz.2.953" path="/proc/685/task" dev="proc" ino=22994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  297.646243][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'.
[  297.655183][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'.
[  298.035358][   T29] audit: type=1326 audit(1731560442.307:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.141443][ T9614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.960'.
[  298.167834][   T29] audit: type=1326 audit(1731560442.357:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.223459][   T29] audit: type=1326 audit(1731560442.357:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.278032][ T9620] FAULT_INJECTION: forcing a failure.
[  298.278032][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  298.301775][   T29] audit: type=1326 audit(1731560442.357:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.325425][ T2137] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  298.390021][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.0.965 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  298.391497][   T29] audit: type=1326 audit(1731560442.357:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.400610][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  298.400621][ T9620] Call Trace:
[  298.400627][ T9620]  <TASK>
[  298.400635][ T9620]  dump_stack_lvl+0x16c/0x1f0
[  298.400662][ T9620]  should_fail_ex+0x497/0x5b0
[  298.400685][ T9620]  _copy_to_user+0x32/0xd0
[  298.400705][ T9620]  copy_siginfo_to_user+0x23/0xc0
[  298.400727][ T9620]  x64_setup_rt_frame+0x814/0xcf0
[  298.400754][ T9620]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  298.400777][ T9620]  ? fput+0x30/0x390
[  298.400799][ T9620]  arch_do_signal_or_restart+0x5e6/0x7e0
[  298.400822][ T9620]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  298.400856][ T9620]  syscall_exit_to_user_mode+0x150/0x2a0
[  298.400885][ T9620]  do_syscall_64+0xda/0x250
[  298.400903][ T9620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.481730][   T29] audit: type=1326 audit(1731560442.357:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.485109][ T9620] RIP: 0033:0x7f2c2a97e717
[  298.485129][ T9620] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  298.485145][ T9620] RSP: 002b:00007f2c2b7b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  298.485163][ T9620] RAX: 000000000000002f RBX: 00007f2c2ab35f80 RCX: 00007f2c2a97e719
[  298.485175][ T9620] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003
[  298.485185][ T9620] RBP: 00007f2c2b7b6090 R08: 0000000000000000 R09: 0000000000000000
[  298.485194][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.485205][ T9620] R13: 0000000000000000 R14: 00007f2c2ab35f80 R15: 00007ffcde461038
[  298.485226][ T9620]  </TASK>
[  298.485285][    C0] vkms_vblank_simulate: vblank timer overrun
[  298.493436][ T5871] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  298.625569][   T29] audit: type=1326 audit(1731560442.357:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.658099][ T2137] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.673826][ T2137] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 233, using maximum allowed: 30
[  298.685065][ T2137] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 233
[  298.698748][   T29] audit: type=1326 audit(1731560442.357:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.893929][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  298.911196][ T5871] usb 3-1: config index 0 descriptor too short (expected 64742, got 92)
[  298.920849][ T2137] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  298.941117][ T5871] usb 3-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  298.953473][   T29] audit: type=1326 audit(1731560442.357:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9608 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff32b57e719 code=0x7ffc0000
[  298.982332][ T2137] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.047972][ T2137] usb 2-1: Product: syz
[  299.062609][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.062995][ T9630] netlink: 'syz.0.967': attribute type 10 has an invalid length.
[  299.080066][ T2137] usb 2-1: Manufacturer: syz
[  299.086012][ T2137] usb 2-1: SerialNumber: syz
[  299.119368][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  299.176767][ T2137] hub 2-1:1.0: bad descriptor, ignoring hub
[  299.191772][ T2137] hub 2-1:1.0: probe with driver hub failed with error -5
[  299.209411][ T5871] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  299.245491][ T5871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  299.259767][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.268009][ T5871] usb 3-1: Product: syz
[  299.301633][ T5871] usb 3-1: Manufacturer: syz
[  299.322070][ T5871] usb 3-1: SerialNumber: syz
[  299.333788][ T9630] bond0: (slave netdevsim0): Releasing backup interface
[  299.340311][ T5871] cdc_ncm 3-1:1.0: skipping garbage
[  299.346854][ T5871] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  299.367879][ T5871] cdc_ncm 3-1:1.0: bind() failure
[  299.477987][ T9630] team0: Port device netdevsim0 added
[  299.558279][ T5871] usb 3-1: USB disconnect, device number 31
[  299.581648][ T2137] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  299.588214][ T2137] cdc_ncm 2-1:1.0: bind() failure
[  299.607663][ T2137] hub 2-1:1.1: bad descriptor, ignoring hub
[  299.623563][ T2137] hub 2-1:1.1: probe with driver hub failed with error -5
[  299.631643][ T2137] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  299.653384][ T2137] cdc_ncm 2-1:1.1: bind() failure
[  299.816034][ T5902] usb 2-1: USB disconnect, device number 48
[  300.310848][ T9648] sp0: Synchronizing with TNC
[  301.265838][ T9676] tipc: Failed to remove unknown binding: 66,1,1/0:3293541304/3293541306
[  301.316086][   T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  301.553975][   T25] usb 2-1: Using ep0 maxpacket: 32
[  301.595297][   T25] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  301.621038][   T25] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.648035][   T25] usb 2-1: config 0 interface 0 has no altsetting 0
[  301.662140][   T25] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  301.681571][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.706926][   T25] usb 2-1: config 0 descriptor??
[  302.619015][ T5871] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  302.629846][   T25] wacom 0003:056A:00C4.0011: unknown main item tag 0x0
[  302.639714][   T25] wacom 0003:056A:00C4.0011: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0
[  302.813283][ T5873] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  303.374704][ T5871] usb 1-1: Using ep0 maxpacket: 32
[  303.385164][ T5141] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  303.395336][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  303.406189][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  303.416235][ T5141] Workqueue: hci1 hci_rx_work
[  303.420911][ T5141] Call Trace:
[  303.424174][ T5141]  <TASK>
[  303.427092][ T5141]  dump_stack_lvl+0x16c/0x1f0
[  303.431757][ T5141]  sysfs_warn_dup+0x7f/0xa0
[  303.436247][ T5141]  sysfs_create_dir_ns+0x24d/0x2b0
[  303.441459][ T5141]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  303.447078][ T5141]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  303.452435][ T5141]  ? kobject_add_internal+0x12d/0x990
[  303.457795][ T5141]  ? do_raw_spin_unlock+0x172/0x230
[  303.462982][ T5141]  kobject_add_internal+0x2c8/0x990
[  303.468173][ T5141]  kobject_add+0x16f/0x240
[  303.472574][ T5141]  ? __pfx_kobject_add+0x10/0x10
[  303.477501][ T5141]  ? kobject_put+0xab/0x5a0
[  303.481995][ T5141]  device_add+0x289/0x1a70
[  303.486395][ T5141]  ? __pfx_dev_set_name+0x10/0x10
[  303.491404][ T5141]  ? __pfx_device_add+0x10/0x10
[  303.496238][ T5141]  ? mgmt_send_event_skb+0x2f2/0x460
[  303.501515][ T5141]  hci_conn_add_sysfs+0x17e/0x230
[  303.506531][ T5141]  le_conn_complete_evt+0x1078/0x1d80
[  303.511896][ T5141]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  303.517636][ T5141]  ? trace_contention_end+0xea/0x140
[  303.523043][ T5141]  hci_le_conn_complete_evt+0x23c/0x370
[  303.528604][ T5141]  hci_le_meta_evt+0x2e2/0x5d0
[  303.533365][ T5141]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  303.539427][ T5141]  hci_event_packet+0x666/0x1180
[  303.544355][ T5141]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  303.549638][ T5141]  ? __pfx_hci_event_packet+0x10/0x10
[  303.555005][ T5141]  ? kcov_remote_start+0x3df/0x6e0
[  303.560105][ T5141]  hci_rx_work+0x2c6/0x16c0
[  303.564600][ T5141]  ? lock_acquire+0x2f/0xb0
[  303.569089][ T5141]  ? process_one_work+0x921/0x1ba0
[  303.574192][ T5141]  process_one_work+0x9c5/0x1ba0
[  303.579119][ T5141]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  303.584738][ T5141]  ? __pfx_process_one_work+0x10/0x10
[  303.590097][ T5141]  ? assign_work+0x1a0/0x250
[  303.594682][ T5141]  worker_thread+0x6c8/0xf00
[  303.599265][ T5141]  ? __pfx_worker_thread+0x10/0x10
[  303.604361][ T5141]  kthread+0x2c1/0x3a0
[  303.608414][ T5141]  ? _raw_spin_unlock_irq+0x23/0x50
[  303.613696][ T5141]  ? __pfx_kthread+0x10/0x10
[  303.618272][ T5141]  ret_from_fork+0x45/0x80
[  303.622670][ T5141]  ? __pfx_kthread+0x10/0x10
[  303.627250][ T5141]  ret_from_fork_asm+0x1a/0x30
[  303.632015][ T5141]  </TASK>
[  303.647370][ T5141] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  303.663824][ T5141] Bluetooth: hci1: failed to register connection device
[  303.681839][ T5141] ==================================================================
[  303.690091][ T5141] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x22a/0x240
[  303.698929][ T5141] Read of size 8 at addr ffff88806a448580 by task kworker/u9:1/5141
[  303.706882][ T5141] 
[  303.709186][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  303.720010][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  303.730051][ T5141] Workqueue: hci1 hci_rx_work
[  303.734739][ T5141] Call Trace:
[  303.737997][ T5141]  <TASK>
[  303.740910][ T5141]  dump_stack_lvl+0x116/0x1f0
[  303.745574][ T5141]  print_report+0xc3/0x620
[  303.749974][ T5141]  ? __virt_addr_valid+0x5e/0x590
[  303.754984][ T5141]  ? __phys_addr+0xc6/0x150
[  303.759470][ T5141]  kasan_report+0xd9/0x110
[  303.763869][ T5141]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  303.769926][ T5141]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  303.775996][ T5141]  l2cap_sock_new_connection_cb+0x22a/0x240
[  303.781895][ T5141]  l2cap_connect_cfm+0x4c9/0xf80
[  303.786837][ T5141]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  303.792308][ T5141]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  303.797752][ T5141]  le_conn_complete_evt+0x1662/0x1d80
[  303.803110][ T5141]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  303.808814][ T5141]  ? trace_contention_end+0xea/0x140
[  303.814082][ T5141]  hci_le_conn_complete_evt+0x23c/0x370
[  303.819612][ T5141]  hci_le_meta_evt+0x2e2/0x5d0
[  303.824361][ T5141]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  303.830416][ T5141]  hci_event_packet+0x666/0x1180
[  303.835336][ T5141]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  303.840607][ T5141]  ? __pfx_hci_event_packet+0x10/0x10
[  303.846223][ T5141]  ? kcov_remote_start+0x3df/0x6e0
[  303.851312][ T5141]  hci_rx_work+0x2c6/0x16c0
[  303.855799][ T5141]  ? lock_acquire+0x2f/0xb0
[  303.860279][ T5141]  ? process_one_work+0x921/0x1ba0
[  303.865371][ T5141]  process_one_work+0x9c5/0x1ba0
[  303.870288][ T5141]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  303.875904][ T5141]  ? __pfx_process_one_work+0x10/0x10
[  303.881259][ T5141]  ? assign_work+0x1a0/0x250
[  303.885835][ T5141]  worker_thread+0x6c8/0xf00
[  303.890405][ T5141]  ? __pfx_worker_thread+0x10/0x10
[  303.895509][ T5141]  kthread+0x2c1/0x3a0
[  303.899557][ T5141]  ? _raw_spin_unlock_irq+0x23/0x50
[  303.904739][ T5141]  ? __pfx_kthread+0x10/0x10
[  303.909308][ T5141]  ret_from_fork+0x45/0x80
[  303.913703][ T5141]  ? __pfx_kthread+0x10/0x10
[  303.918274][ T5141]  ret_from_fork_asm+0x1a/0x30
[  303.923025][ T5141]  </TASK>
[  303.926026][ T5141] 
[  303.928325][ T5141] Allocated by task 5141:
[  303.932629][ T5141]  kasan_save_stack+0x33/0x60
[  303.937289][ T5141]  kasan_save_track+0x14/0x30
[  303.941945][ T5141]  __kasan_kmalloc+0xaa/0xb0
[  303.946512][ T5141]  __kmalloc_noprof+0x1e8/0x400
[  303.951342][ T5141]  sk_prot_alloc+0x1a8/0x2a0
[  303.955914][ T5141]  sk_alloc+0x36/0xb90
[  303.959963][ T5141]  bt_sock_alloc+0x3b/0x3a0
[  303.964447][ T5141]  l2cap_sock_alloc.constprop.0+0x35/0x180
[  303.970235][ T5141]  l2cap_sock_new_connection_cb+0x101/0x240
[  303.976112][ T5141]  l2cap_connect_cfm+0x4c9/0xf80
[  303.981029][ T5141]  le_conn_complete_evt+0x1662/0x1d80
[  303.986381][ T5141]  hci_le_conn_complete_evt+0x23c/0x370
[  303.991994][ T5141]  hci_le_meta_evt+0x2e2/0x5d0
[  303.996739][ T5141]  hci_event_packet+0x666/0x1180
[  304.001657][ T5141]  hci_rx_work+0x2c6/0x16c0
[  304.006141][ T5141]  process_one_work+0x9c5/0x1ba0
[  304.011056][ T5141]  worker_thread+0x6c8/0xf00
[  304.015628][ T5141]  kthread+0x2c1/0x3a0
[  304.019695][ T5141]  ret_from_fork+0x45/0x80
[  304.024088][ T5141]  ret_from_fork_asm+0x1a/0x30
[  304.028834][ T5141] 
[  304.031132][ T5141] Freed by task 9699:
[  304.035087][ T5141]  kasan_save_stack+0x33/0x60
[  304.039743][ T5141]  kasan_save_track+0x14/0x30
[  304.044396][ T5141]  kasan_save_free_info+0x3b/0x60
[  304.049404][ T5141]  __kasan_slab_free+0x51/0x70
[  304.054160][ T5141]  kfree+0x14f/0x4b0
[  304.058039][ T5141]  __sk_destruct+0x5eb/0x720
[  304.062632][ T5141]  sk_destruct+0xc2/0xf0
[  304.066854][ T5141]  __sk_free+0xf4/0x3e0
[  304.070986][ T5141]  sk_free+0x6a/0x90
[  304.074860][ T5141]  l2cap_sock_kill+0x171/0x2d0
[  304.079625][ T5141]  l2cap_sock_cleanup_listen+0x3d/0x2a0
[  304.085157][ T5141]  l2cap_sock_release+0x5c/0x210
[  304.090076][ T5141]  __sock_release+0xb0/0x270
[  304.094649][ T5141]  sock_close+0x1c/0x30
[  304.098784][ T5141]  __fput+0x3f6/0xb60
[  304.102745][ T5141]  task_work_run+0x14e/0x250
[  304.107316][ T5141]  get_signal+0x1ca/0x2770
[  304.111716][ T5141]  arch_do_signal_or_restart+0x90/0x7e0
[  304.117243][ T5141]  syscall_exit_to_user_mode+0x150/0x2a0
[  304.122862][ T5141]  do_syscall_64+0xda/0x250
[  304.127339][ T5141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.133215][ T5141] 
[  304.135517][ T5141] The buggy address belongs to the object at ffff88806a448000
[  304.135517][ T5141]  which belongs to the cache kmalloc-2k of size 2048
[  304.149546][ T5141] The buggy address is located 1408 bytes inside of
[  304.149546][ T5141]  freed 2048-byte region [ffff88806a448000, ffff88806a448800)
[  304.163491][ T5141] 
[  304.165791][ T5141] The buggy address belongs to the physical page:
[  304.172174][ T5141] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a448
[  304.180910][ T5141] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  304.189385][ T5141] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  304.196920][ T5141] page_type: f5(slab)
[  304.200884][ T5141] raw: 00fff00000000040 ffff88801b042000 ffffea0000d88800 dead000000000002
[  304.209444][ T5141] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[  304.218006][ T5141] head: 00fff00000000040 ffff88801b042000 ffffea0000d88800 dead000000000002
[  304.226669][ T5141] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000
[  304.235319][ T5141] head: 00fff00000000003 ffffea0001a91201 ffffffffffffffff 0000000000000000
[  304.244140][ T5141] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  304.252781][ T5141] page dumped because: kasan: bad access detected
[  304.259165][ T5141] page_owner tracks the page as allocated
[  304.264856][ T5141] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6021, tgid 5996 (syz.0.27), ts 66301418841, free_ts 66207105106
[  304.285842][ T5141]  post_alloc_hook+0x2d1/0x350
[  304.290585][ T5141]  get_page_from_freelist+0xfce/0x2f80
[  304.296024][ T5141]  __alloc_pages_noprof+0x223/0x25a0
[  304.301289][ T5141]  alloc_pages_mpol_noprof+0x2c9/0x610
[  304.306729][ T5141]  new_slab+0x2c9/0x410
[  304.310860][ T5141]  ___slab_alloc+0xdac/0x1880
[  304.315514][ T5141]  __slab_alloc.constprop.0+0x56/0xb0
[  304.320863][ T5141]  __kmalloc_noprof+0x367/0x400
[  304.325698][ T5141]  __vb2_queue_alloc+0x238/0x1230
[  304.330705][ T5141]  vb2_core_create_bufs+0x55d/0xab0
[  304.335882][ T5141]  vb2_create_bufs+0x566/0x780
[  304.340637][ T5141]  vb2_ioctl_create_bufs+0x244/0x3e0
[  304.345906][ T5141]  vidioc_create_bufs+0x7d/0xf0
[  304.350735][ T5141]  v4l_create_bufs+0x156/0x270
[  304.355480][ T5141]  __video_do_ioctl+0xaf0/0xf00
[  304.360307][ T5141]  video_usercopy+0x4ce/0x1600
[  304.365049][ T5141] page last free pid 6015 tgid 6015 stack trace:
[  304.371345][ T5141]  free_unref_page+0x5f4/0xdc0
[  304.376088][ T5141]  __put_partials+0x14c/0x170
[  304.380741][ T5141]  qlist_free_all+0x4e/0x120
[  304.385308][ T5141]  kasan_quarantine_reduce+0x192/0x1e0
[  304.390743][ T5141]  __kasan_slab_alloc+0x69/0x90
[  304.395571][ T5141]  kmem_cache_alloc_noprof+0x121/0x2f0
[  304.401010][ T5141]  vm_area_dup+0x21/0x2f0
[  304.405321][ T5141]  __split_vma+0x181/0x1160
[  304.409803][ T5141]  vms_gather_munmap_vmas+0x1c7/0x1750
[  304.415243][ T5141]  __mmap_region+0x36c/0x21c0
[  304.419897][ T5141]  mmap_region+0x127/0x320
[  304.424294][ T5141]  do_mmap+0xc00/0xfc0
[  304.428342][ T5141]  vm_mmap_pgoff+0x1ba/0x360
[  304.432913][ T5141]  ksys_mmap_pgoff+0x32c/0x5c0
[  304.437658][ T5141]  __x64_sys_mmap+0x125/0x190
[  304.442314][ T5141]  do_syscall_64+0xcd/0x250
[  304.446806][ T5141] 
[  304.449107][ T5141] Memory state around the buggy address:
[  304.454712][ T5141]  ffff88806a448480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.462747][ T5141]  ffff88806a448500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.470785][ T5141] >ffff88806a448580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.478834][ T5141]                    ^
[  304.482883][ T5141]  ffff88806a448600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.490929][ T5141]  ffff88806a448680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  304.498972][ T5141] ==================================================================
[  304.508080][ T5141] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  304.515270][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: kworker/u9:1 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[  304.526087][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  304.536117][ T5141] Workqueue: hci1 hci_rx_work
[  304.540782][ T5141] Call Trace:
[  304.544050][ T5141]  <TASK>
[  304.546968][ T5141]  dump_stack_lvl+0x3d/0x1f0
[  304.551533][ T5141]  panic+0x71d/0x800
[  304.555403][ T5141]  ? __pfx_panic+0x10/0x10
[  304.559802][ T5141]  ? preempt_schedule_thunk+0x1a/0x30
[  304.565154][ T5141]  ? preempt_schedule_common+0x44/0xc0
[  304.570607][ T5141]  check_panic_on_warn+0xab/0xb0
[  304.575535][ T5141]  end_report+0x117/0x180
[  304.579853][ T5141]  kasan_report+0xe9/0x110
[  304.584245][ T5141]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  304.590292][ T5141]  ? l2cap_sock_new_connection_cb+0x22a/0x240
[  304.596338][ T5141]  l2cap_sock_new_connection_cb+0x22a/0x240
[  304.602211][ T5141]  l2cap_connect_cfm+0x4c9/0xf80
[  304.607139][ T5141]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.612579][ T5141]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.618016][ T5141]  le_conn_complete_evt+0x1662/0x1d80
[  304.623377][ T5141]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  304.629068][ T5141]  ? trace_contention_end+0xea/0x140
[  304.634336][ T5141]  hci_le_conn_complete_evt+0x23c/0x370
[  304.639862][ T5141]  hci_le_meta_evt+0x2e2/0x5d0
[  304.644661][ T5141]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  304.650710][ T5141]  hci_event_packet+0x666/0x1180
[  304.655632][ T5141]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  304.660895][ T5141]  ? __pfx_hci_event_packet+0x10/0x10
[  304.666260][ T5141]  ? kcov_remote_start+0x3df/0x6e0
[  304.671387][ T5141]  hci_rx_work+0x2c6/0x16c0
[  304.675870][ T5141]  ? lock_acquire+0x2f/0xb0
[  304.680358][ T5141]  ? process_one_work+0x921/0x1ba0
[  304.685452][ T5141]  process_one_work+0x9c5/0x1ba0
[  304.690365][ T5141]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  304.695973][ T5141]  ? __pfx_process_one_work+0x10/0x10
[  304.701577][ T5141]  ? assign_work+0x1a0/0x250
[  304.706149][ T5141]  worker_thread+0x6c8/0xf00
[  304.710715][ T5141]  ? __pfx_worker_thread+0x10/0x10
[  304.715808][ T5141]  kthread+0x2c1/0x3a0
[  304.719861][ T5141]  ? _raw_spin_unlock_irq+0x23/0x50
[  304.725039][ T5141]  ? __pfx_kthread+0x10/0x10
[  304.729621][ T5141]  ret_from_fork+0x45/0x80
[  304.734012][ T5141]  ? __pfx_kthread+0x10/0x10
[  304.738576][ T5141]  ret_from_fork_asm+0x1a/0x30
[  304.743327][ T5141]  </TASK>
[  304.746524][ T5141] Kernel Offset: disabled
[  304.750821][ T5141] Rebooting in 86400 seconds..