last executing test programs:

1m17.860769322s ago: executing program 1 (id=454):
socket$alg(0x26, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r1, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001)
close(r1)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1m17.164883625s ago: executing program 1 (id=457):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f00000006c0)='afs_flock_ev\x00', r1, 0x0, 0x40003}, 0x18)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400111"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f2a746e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a0b7784e4cabb8a8a5abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e68c3c8ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5ab47e41cad31dc261020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa17547493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cbf4430bd2b6b559133979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d753177fc29860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120)
write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m16.095786807s ago: executing program 2 (id=460):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r7, 0x0, 0x79)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e27, @multicast1}, 0x10)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$binderfs(&(0x7f0000000380), &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000500)={[{@max={'max', 0x3d, 0x1000}}], [{@permit_directio}, {@pcr={'pcr', 0x3d, 0x2b}}, {@fowner_lt={'fowner<', r8}}, {@seclabel}]})
sendmmsg$inet(r2, 0x0, 0x0, 0x20008000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0)

1m15.410587706s ago: executing program 2 (id=462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000bdc000/0x2000)=nil, &(0x7f0000bdb000/0x2000)=nil, 0x2000, 0x2})
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c0001800600"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f0000000200)='m', 0x1)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
poll(&(0x7f0000000080)=[{r4, 0x90a4}], 0x1, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m13.299454557s ago: executing program 4 (id=466):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
semget$private(0x0, 0x2, 0x302)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r2, 0x0, 0x0, 0x867, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300100002a00f1cec91c8fba8658d636000201000000fbdbdf25060000000800fc00", @ANYRES32=r1, @ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x80, 0x0, 0x0, 0x1, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x2, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1m12.488460669s ago: executing program 2 (id=467):
socket$alg(0x26, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r1, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001)
close(r1)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1m12.339086656s ago: executing program 4 (id=469):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
keyctl$reject(0x13, 0x0, 0x9, 0x202, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r5, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3422a61a}], 0x1, 0x10102, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x3)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, &(0x7f0000000100)={{}, 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m10.828062288s ago: executing program 2 (id=471):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80))
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1m10.798337284s ago: executing program 1 (id=472):
r0 = syz_usb_connect(0xa9c9560cad9723f0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102e39ca23ecd063501665d0102030109023f00010500000509042102008b7a2808110339306688007ae993bcbdc19405240000010d240f01ff0f000005000900bd00"/81], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x83, 0x55, 0x0, 0x8})
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000845, 0x0, 0x0)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000", @ANYBLOB], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x26, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0000}]})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200})
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x138)
unshare(0x62040200)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETA(r10, 0x5406, &(0x7f00000000c0)={0x7, 0x0, 0x9, 0x8207, 0x18, "fd794b5df0967785"})

1m9.381587584s ago: executing program 4 (id=474):
eventfd(0x2d5)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x3, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
bind$802154_dgram(r3, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs(r0, &(0x7f0000000100)='comm\x00')
socket$inet6(0xa, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

1m9.295285917s ago: executing program 3 (id=475):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
syz_emit_ethernet(0x12d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x91)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

1m8.483841875s ago: executing program 2 (id=476):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1)
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
syz_io_uring_setup(0x154d, &(0x7f0000000080)={0x0, 0x19ae, 0x20000, 0x0, 0x387}, &(0x7f0000000100), &(0x7f0000000140))
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=<r2=>0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @mcast1, 0x3}, 0x1c)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340))
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, 0x0, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000380)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@x25={0x805, {0x1, 0x8, 0xf1, "f671a74d3d4264d89dcd1c5c0d2eaee209aab8016ac8546151aab3c8527a7df04e27cc28620c0dccfebf166545c69735a8c10ff9b673f3146fc55074e972d7657e9968e8573e0d6a846b863684a403f2657a994d71decdf315cad1d2acc693d313439c048422048c0f8bb5aead31b15dac2538e85e89455e2625ecf066de10ba45"}}}}, &(0x7f0000000440)={0x1, 0x2, [0xf0, 0x432, 0xa7d, 0x6b8]})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = accept4(r4, &(0x7f00000004c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000540)=0x80, 0x80000)
syz_emit_ethernet(0x56, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @empty, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x19, 0x5, 0x0, 0x0, "a6f1f0f68adef8d0ce6c2407f212207409330b2fd554284e1e013c432b7b8dff2b2b0751d3345fc1a0b93cf88115eeb67c702f89e9cf768e7d142e6694b08ddf"}}}}, &(0x7f0000000600)={0x1, 0x1, [0xfd6, 0xc1e, 0xa28, 0x5f0]})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000640)="504f2e7b4a6fe087b82c2061bab6373e2a09e5bd694c9333e12d83508225db960986ddf10813367e10bf10e1b7f658b1fcb82833078c32b6b834054bc938ba455549936e84"}, 0x20)
recvfrom$phonet(r6, &(0x7f0000000700)=""/27, 0x1b, 0x0, &(0x7f0000000740)={0x23, 0x4, 0x10, 0xf}, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x4008000)
rt_sigqueueinfo(r2, 0x3e, &(0x7f0000000880)={0x28, 0x0, 0x9})
r7 = openat$cgroup(r3, &(0x7f0000000900)='syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000940), 0x2, 0x0)
r9 = open(&(0x7f0000000980)='./file0\x00', 0x82, 0x30)
sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@deltclass={0x44, 0x29, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x6, 0xfff2}, {0xfff3, 0xfff1}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfb={0x8}]}, 0x44}}, 0x40001)
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000b00), &(0x7f0000000b40)=0x30)
copy_file_range(r4, &(0x7f0000000b80)=0xcee9, r8, &(0x7f0000000bc0)=0x9, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000c00)={<r10=>0x0, 0x1}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000c80)={r10, @in6={{0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe7cb}}, 0xffffffff, 0xfa53, 0xa, 0x2, 0xb}, &(0x7f0000000d40)=0x98)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m8.32886065s ago: executing program 3 (id=478):
r0 = socket$netlink(0x10, 0x3, 0xe)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x48)
io_uring_setup(0x1058, &(0x7f0000000940)={0x0, 0x45d3, 0x80, 0x0, 0x1fffffc})
write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="cf18abab60cea61552c6e9fd0fa679535196eb02dd74458c28c9c33bd0e8da23a0d13958b9fffca74c8f349f8390bf77e3d8004b2825b0139377d17c0054f4d1e54dab07a0d0d4c69806d99702dfec4e86a583ef6cba655132128dd8f3037489fa0593477ff401c41000a9af9cedcaa49ff98034874868533058caa49c52aa1cee254ccde0c2bf44bc0a3a69ed5ed20cb29b6d36a123b349af50fb30955d4be375c1e0493ef135504b596c869279d32139a67da0f77b004e629cb05d6f52ce43321501999af7bb0d1f428e", 0xcb}, {&(0x7f0000000040)="cd2223ad422866161cf956026f97d5ffa23035ca8965ab4c9b8dd73cf441d913a0f2f14802784da6fe663957e97f6a791837e498", 0x34}, {&(0x7f00000001c0)="252790b48a3d8044e9fa2551aed97ee9633af1fb3b759c366906714e0ce5b3c8512646e1f53c8e0606250f7653b487fe64833900e464ca419583f75fbb8c0a1cfd126bf01fa64d08814ad7a1f7529b447b626a8b4aece0de7db31e2de10da86388183348e63d54ca13ad56f27bfc63fd3eebac84fa5df7da8c22442eafdf87d642fee589a1f528fa32628db87919d5ec5f4c74a9399aa12d4d7c54e46dc800f8bd27539f889c2c69651c0c20dd79af76914d4bb09e2b28623e5fc261e0eebd3b188f4d6bb5795a7eacd32e3db2b0ad407b0bc8327d515b06da7e8c84", 0xdc}, {&(0x7f00000002c0)="8620ea586ff5f233ffa9148a885b0f49d81e2ac9fd8c53fe4883ee39d7959680c118e1442ab6a8c323a3bab497b9d02adb74d26cd0b7", 0x36}], 0x4)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x4)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109400, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000408010040"])
ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000300)={0x1, r5})
close_range(r4, 0xffffffffffffffff, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1m8.063688176s ago: executing program 3 (id=479):
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x100008c)

1m7.836703361s ago: executing program 3 (id=481):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

1m7.143263014s ago: executing program 1 (id=482):
socket$alg(0x26, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r1, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001)
close(r1)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1m7.008915773s ago: executing program 0 (id=483):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$I2C_SLAVE(r1, 0x703, 0x26b)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)

1m6.660507048s ago: executing program 4 (id=484):
r0 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="fd", 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6)
syz_io_uring_setup(0x10d4, 0x0, 0x0, &(0x7f0000000080))
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x1e, 0x0, &(0x7f0000000980))
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xbb1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x80}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r4, 0x0, 0x7ffff000, 0x0)

1m6.580728325s ago: executing program 1 (id=485):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = open(0x0, 0x80242, 0x1df2a23c5997fa5f)
sendfile(r3, r3, 0x0, 0x7f03)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc})
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3b}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x4}]})

1m6.567715364s ago: executing program 2 (id=486):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (fail_nth: 1)

1m4.893174133s ago: executing program 4 (id=487):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890)
listen(r2, 0x0)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)
read$FUSE(r1, &(0x7f00000056c0)={0x2020}, 0x2020)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[])

1m4.159464611s ago: executing program 4 (id=488):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
syz_emit_ethernet(0x12d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x91)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

1m3.680844993s ago: executing program 3 (id=489):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='eeto_\xcda_alloc', 0x0) (fail_nth: 6)

1m3.67791357s ago: executing program 1 (id=490):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x5)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x74cb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae0b38219c643ec9c09a40e015e04f279db9c8b955ff318e1d618bc962332f0128ec7a33c14e2b7ec7169533f203b6137dbe0b18ae1326f59d152995bc57715c6ba7a804f9b3e2bba3fcb54eebbc77e1aaadf83029c7792a57675d5de3c51afd5bd93"], 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000600)=""/23, 0x17, <r9=>0x0, &(0x7f0000000640)=""/36, 0x24}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200fdb3ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fdffffff10010000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)

1m2.981783909s ago: executing program 0 (id=491):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x4008af22, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1m2.933184774s ago: executing program 3 (id=492):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setresgid(0xee00, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ffff030040000000000000000b00200000000000030000000000000007000000"], 0x8082)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108)
getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4)
sync()
sync()
sched_setattr(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200), &(0x7f0000000280))

51.121095768s ago: executing program 32 (id=486):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000100)=0x3)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (fail_nth: 1)

48.777019624s ago: executing program 0 (id=494):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40800)

48.540631832s ago: executing program 33 (id=488):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
syz_emit_ethernet(0x12d, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x91)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

47.721121021s ago: executing program 34 (id=490):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x5)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x74cb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ae0b38219c643ec9c09a40e015e04f279db9c8b955ff318e1d618bc962332f0128ec7a33c14e2b7ec7169533f203b6137dbe0b18ae1326f59d152995bc57715c6ba7a804f9b3e2bba3fcb54eebbc77e1aaadf83029c7792a57675d5de3c51afd5bd93"], 0x6c}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000600)=""/23, 0x17, <r9=>0x0, &(0x7f0000000640)=""/36, 0x24}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200fdb3ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fdffffff10010000000000b7080000000000007b8af8ff00000000b7080000ffff00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)

47.470826647s ago: executing program 35 (id=492):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
setresgid(0xee00, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ffff030040000000000000000b00200000000000030000000000000007000000"], 0x8082)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108)
getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000003c0)=""/82)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4)
sync()
sync()
sched_setattr(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200), &(0x7f0000000280))

47.416405357s ago: executing program 0 (id=498):
socket$inet6(0xa, 0x5, 0x1)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x2b)
ioctl$SNDCTL_TMR_START(r0, 0x5402)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x559e, &(0x7f0000000340)={0x0, 0x7d7f, 0x4000, 0x1, 0x388}, &(0x7f00000000c0), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000013c0)={0x1, r2, 0x18, {0xffffffff, 0x7}, 0x80}, 0x1)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r5, r5, 0x2, 0xb)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/4096)
r8 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000001400)={0x7, 'veth1\x00', {0xb6}, 0x5})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000300)={0x5})
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

45.416142465s ago: executing program 0 (id=499):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$selinux_validatetrans(r7, 0x0, 0x79)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e27, @multicast1}, 0x10)
lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$binderfs(&(0x7f0000000380), &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000240), 0x20000, &(0x7f0000000500)={[{@max={'max', 0x3d, 0x1000}}], [{@permit_directio}, {@pcr={'pcr', 0x3d, 0x2b}}, {@fowner_lt={'fowner<', r8}}, {@seclabel}]})
sendmmsg$inet(r2, 0x0, 0x0, 0x20008000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0)

40.872335843s ago: executing program 0 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = open(0x0, 0x80242, 0x1df2a23c5997fa5f)
sendfile(r3, r3, 0x0, 0x7f03)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc})
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3b}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x4}]})

27.920992825s ago: executing program 5 (id=493):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, 0x0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x0, 0x8000000})
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

27.368639237s ago: executing program 5 (id=501):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$I2C_SLAVE(r1, 0x703, 0x26b)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)

25.780812239s ago: executing program 36 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = open(0x0, 0x80242, 0x1df2a23c5997fa5f)
sendfile(r3, r3, 0x0, 0x7f03)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc})
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3b}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x488, 0x0, 0x4}]})

25.774958886s ago: executing program 6 (id=495):
socket$alg(0x26, 0x5, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = getpid()
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r1, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001)
close(r1)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x1, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

21.025878105s ago: executing program 6 (id=503):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80))
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

20.917490628s ago: executing program 7 (id=496):
syz_open_dev$video4linux(&(0x7f0000000000), 0x50d2, 0x404801)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r3, 0xffffffffffffffff, 0x0)

18.217948555s ago: executing program 7 (id=504):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x3}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x85, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa1b080045000077000000020011907800000000000000000000000700639078e1fd0001d6a63caa07ae457c4c1152490aa2cc63fcbf270b7f3053119c3291dfb1c7aa9116fb5f25874103d23d12396c1a00a6c8b7e96c065a0b6e1b8e82508af9d3024e05b43f2e0b68380f00d10929cde5ef3004e31e076650c1fcdb78ee1170ba49563bfaf1e9d2e63efe19bd3b62cd13db79f2d3f35ad432b84a234ab369da1df8b25e501f99103d1259087b2c280769f602a56c1e2e499185b7f7c34b7b0b5c6aea3841ff2da7b9d4c9292d4aa3eeb0a7649a1f"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwrite64(r7, &(0x7f0000000080)='3', 0x1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r9, 0x0, 0x97, 0x8000000})

15.445691034s ago: executing program 7 (id=505):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x324)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r5 = syz_open_pts(r0, 0x0)
r6 = dup(r5)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000e00)={{r3}, 0x0, 0xe, @inherit={0x78, &(0x7f0000000300)={0x1, 0x6, 0x6, 0xfff, {0x0, 0x0, 0x8, 0xe, 0x81}, [0x2, 0x199, 0xffff, 0x6, 0x3, 0x7]}}, @subvolid=0xf6dc})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)

10.986236577s ago: executing program 37 (id=501):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$I2C_SLAVE(r1, 0x703, 0x26b)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x4000105, 0x38e, 0x3, 0x82]}, &(0x7f0000000400)=0x54)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0)

5.482061119s ago: executing program 38 (id=503):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80))
migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x20000)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

0s ago: executing program 39 (id=505):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x324)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r5 = syz_open_pts(r0, 0x0)
r6 = dup(r5)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000e00)={{r3}, 0x0, 0xe, @inherit={0x78, &(0x7f0000000300)={0x1, 0x6, 0x6, 0xfff, {0x0, 0x0, 0x8, 0xe, 0x81}, [0x2, 0x199, 0xffff, 0x6, 0x3, 0x7]}}, @subvolid=0xf6dc})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)

kernel console output (not intermixed with test programs):

scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  115.872008][    C0] vkms_vblank_simulate: vblank timer overrun
[  116.039131][   T30] audit: type=1400 audit(1751611404.713:233): avc:  denied  { read } for  pid=6362 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  116.068770][ T1220] libceph: connect (1)[c::]:6789 error -101
[  116.078841][ T1220] libceph: mon0 (1)[c::]:6789 connect error
[  116.086155][ T6366] ceph: No mds server is up or the cluster is laggy
[  116.109986][   T30] audit: type=1400 audit(1751611404.723:234): avc:  denied  { bind } for  pid=6362 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.193392][   T30] audit: type=1400 audit(1751611405.063:235): avc:  denied  { execute } for  pid=6362 comm="syz.2.108" path="/24/cpu.stat" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  116.248156][ T6389] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  116.261801][ T6390] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  116.324245][ T5939] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  116.386132][ T6392] IPVS: stopping master sync thread 6389 ...
[  116.547502][ T5884] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  116.820806][ T6398] IPVS: stopping master sync thread 6390 ...
[  116.830391][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  116.834669][ T5884] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  116.834688][ T5884] usb 4-1: config 0 has no interface number 0
[  116.870317][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  116.888374][ T5939] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[  116.891983][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.904642][ T5939] usb 2-1: config 0 has no interface number 0
[  116.906744][ T5939] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=e7.7b
[  116.937390][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.956585][ T5884] usb 4-1: Product: syz
[  116.961580][ T5939] usb 2-1: Product: syz
[  116.965135][ T5884] usb 4-1: Manufacturer: syz
[  116.965742][ T5939] usb 2-1: Manufacturer: syz
[  116.970390][ T5884] usb 4-1: SerialNumber: syz
[  116.973875][ T5884] usb 4-1: config 0 descriptor??
[  117.015637][ T5939] usb 2-1: SerialNumber: syz
[  117.024063][ T5939] usb 2-1: config 0 descriptor??
[  117.034578][ T5939] ttusb_dec_send_command: command bulk message failed: error -22
[  117.046991][ T5939] ttusb-dec 2-1:0.189: probe with driver ttusb-dec failed with error -22
[  117.282229][ T5939] usb 2-1: USB disconnect, device number 5
[  117.377223][ T5884] usb 4-1: USB disconnect, device number 4
[  117.632816][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  117.632833][   T30] audit: type=1400 audit(1751611406.783:250): avc:  denied  { add_name } for  pid=6397 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  117.679294][   T30] audit: type=1400 audit(1751611406.813:251): avc:  denied  { create } for  pid=6397 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.702223][   T30] audit: type=1400 audit(1751611406.813:252): avc:  denied  { write } for  pid=6397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  117.728263][    C0] vkms_vblank_simulate: vblank timer overrun
[  117.745722][   T30] audit: type=1400 audit(1751611406.813:253): avc:  denied  { append } for  pid=6397 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  118.006990][ T6421] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  118.307640][   T30] audit: type=1400 audit(1751611407.453:254): avc:  denied  { remove_name } for  pid=6423 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  118.381473][   T30] audit: type=1400 audit(1751611407.453:255): avc:  denied  { unlink } for  pid=6423 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  118.404534][    C0] vkms_vblank_simulate: vblank timer overrun
[  118.633859][   T30] audit: type=1800 audit(1751611407.773:256): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.122" name="bus" dev="overlay" ino=134 res=0 errno=0
[  118.655355][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.293832][ T6437] 9pnet_virtio: no channels available for device 127.0.0.1
[  119.399031][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.124'.
[  119.851915][ T6453] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  119.920364][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'.
[  120.324978][ T6457] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[  120.472336][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.883064][ T6478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.928181][ T6476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.009668][ T6481] /dev/nullb0: Can't open blockdev
[  121.472685][   T30] audit: type=1400 audit(1751611410.623:257): avc:  denied  { bind } for  pid=6482 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  121.495603][   T30] audit: type=1400 audit(1751611410.623:258): avc:  denied  { listen } for  pid=6482 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  121.657069][ T6492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.692052][   T30] audit: type=1400 audit(1751611410.843:259): avc:  denied  { ioctl } for  pid=6482 comm="syz.2.132" path="socket:[9711]" dev="sockfs" ino=9711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  123.305507][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  123.305521][   T30] audit: type=1800 audit(1751611411.773:264): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.136" name="bus" dev="overlay" ino=185 res=0 errno=0
[  123.473115][ T6511] 9pnet_virtio: no channels available for device 127.0.0.1
[  124.807767][ T6538] netlink: 'syz.2.143': attribute type 1 has an invalid length.
[  125.015799][ T6538] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.610230][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[  127.937374][   T30] audit: type=1800 audit(1751611416.453:265): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="overlay" ino=199 res=0 errno=0
[  128.982590][ T6605] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  129.380581][ T6608] =======================================================
[  129.380581][ T6608] WARNING: The mand mount option has been deprecated and
[  129.380581][ T6608]          and is ignored by this kernel. Remove the mand
[  129.380581][ T6608]          option from the mount to silence this warning.
[  129.380581][ T6608] =======================================================
[  129.528597][ T6608] option changes via remount are deprecated (pid=6600 comm=syz.0.154)
[  129.609715][   T30] audit: type=1400 audit(1751611418.563:266): avc:  denied  { mount } for  pid=6600 comm="syz.0.154" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  129.750237][   T30] audit: type=1400 audit(1751611418.663:267): avc:  denied  { remount } for  pid=6600 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  129.845272][   T30] audit: type=1400 audit(1751611418.933:268): avc:  denied  { create } for  pid=6609 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.916478][   T30] audit: type=1400 audit(1751611418.933:269): avc:  denied  { setopt } for  pid=6609 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  129.940325][   T30] audit: type=1400 audit(1751611418.953:270): avc:  denied  { bind } for  pid=6609 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  130.290793][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  130.365447][   T30] audit: type=1400 audit(1751611419.513:271): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  130.413777][ T6625] IPVS: stopping master sync thread 6453 ...
[  130.830926][ T5892] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  130.840059][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.858559][ T5892] usb 2-1: Product: syz
[  130.869085][ T5892] usb 2-1: Manufacturer: syz
[  130.883208][ T5892] usb 2-1: SerialNumber: syz
[  130.914784][ T5892] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  130.952685][   T30] audit: type=1400 audit(1751611420.083:272): avc:  denied  { firmware_load } for  pid=1220 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  131.009154][ T1220] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  131.066398][   T30] audit: type=1800 audit(1751611420.183:273): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="overlay" ino=189 res=0 errno=0
[  131.158088][   T30] audit: type=1400 audit(1751611420.273:274): avc:  denied  { bind } for  pid=6633 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  131.230272][   T30] audit: type=1400 audit(1751611420.293:275): avc:  denied  { connect } for  pid=6633 comm="syz.2.163" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  132.170319][ T1220] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  132.331499][ T1220] ath9k_htc: Failed to initialize the device
[  132.424992][ T6664] /dev/nullb0: Can't open blockdev
[  132.565922][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.748296][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.114289][ T1220] usb 2-1: ath9k_htc: USB layer deinitialized
[  133.226436][ T5892] usb 2-1: USB disconnect, device number 6
[  134.127156][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'.
[  134.297331][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'.
[  134.478986][ T6690] : entered promiscuous mode
[  134.637548][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  134.639883][   T30] audit: type=1400 audit(1751611423.753:278): avc:  denied  { connect } for  pid=6694 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  136.000679][ T6717] Driver unsupported XDP return value 0 on prog  (id 44) dev N/A, expect packet loss!
[  136.160577][   T30] audit: type=1400 audit(1751611425.103:279): avc:  denied  { create } for  pid=6711 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  136.383070][   T30] audit: type=1400 audit(1751611425.413:280): avc:  denied  { ioctl } for  pid=6720 comm="syz.4.179" path="socket:[10075]" dev="sockfs" ino=10075 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  136.475106][   T30] audit: type=1400 audit(1751611425.413:281): avc:  denied  { read } for  pid=6720 comm="syz.4.179" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  136.738380][   T30] audit: type=1400 audit(1751611425.413:282): avc:  denied  { open } for  pid=6720 comm="syz.4.179" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  136.825012][ T6733] /dev/nullb0: Can't open blockdev
[  137.200555][   T30] audit: type=1400 audit(1751611425.893:283): avc:  denied  { read } for  pid=6729 comm="syz.1.181" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  137.243773][   T30] audit: type=1400 audit(1751611425.893:284): avc:  denied  { open } for  pid=6729 comm="syz.1.181" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  137.427238][ T6743] netlink: 'syz.3.183': attribute type 1 has an invalid length.
[  137.773773][ T6743] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.454759][   T30] audit: type=1400 audit(1751611427.603:285): avc:  denied  { create } for  pid=6758 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  138.675655][ T6763] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  138.896048][   T30] audit: type=1400 audit(1751611428.003:286): avc:  denied  { bind } for  pid=6758 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  140.998609][ T6730] syz.1.181: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  141.081813][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.1.181 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  141.081840][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.081854][ T6730] Call Trace:
[  141.081860][ T6730]  <TASK>
[  141.081869][ T6730]  dump_stack_lvl+0x16c/0x1f0
[  141.081902][ T6730]  warn_alloc+0x248/0x3a0
[  141.081926][ T6730]  ? __pfx_warn_alloc+0x10/0x10
[  141.081957][ T6730]  ? xt_alloc_entry_offsets+0x3a/0x60
[  141.081978][ T6730]  ? __vmalloc_node_noprof+0xad/0xf0
[  141.082004][ T6730]  __vmalloc_node_range_noprof+0x101b/0x14b0
[  141.082024][ T6730]  ? stack_depot_save_flags+0x28/0xa40
[  141.082055][ T6730]  ? xt_alloc_entry_offsets+0x3a/0x60
[  141.082077][ T6730]  ? do_ip6t_set_ctl+0x50e/0xb00
[  141.082100][ T6730]  ? __x64_sys_setsockopt+0xbd/0x160
[  141.082126][ T6730]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  141.082147][ T6730]  ? __alloc_pages_noprof+0xb/0x1b0
[  141.082169][ T6730]  ? ___kmalloc_large_node+0x84/0x1e0
[  141.082193][ T6730]  __kvmalloc_node_noprof+0x30a/0x620
[  141.082215][ T6730]  ? xt_alloc_entry_offsets+0x3a/0x60
[  141.082237][ T6730]  ? xt_alloc_entry_offsets+0x3a/0x60
[  141.082263][ T6730]  ? xt_alloc_entry_offsets+0x3a/0x60
[  141.082282][ T6730]  xt_alloc_entry_offsets+0x3a/0x60
[  141.082303][ T6730]  translate_table+0x22d/0x17b0
[  141.082330][ T6730]  ? _copy_from_user+0x59/0xd0
[  141.082360][ T6730]  ? __pfx_translate_table+0x10/0x10
[  141.082380][ T6730]  ? xt_alloc_table_info+0x3e/0xa0
[  141.082408][ T6730]  do_ip6t_set_ctl+0x570/0xb00
[  141.082430][ T6730]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  141.082460][ T6730]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  141.082486][ T6730]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  141.082528][ T6730]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  141.082551][ T6730]  nf_setsockopt+0x8d/0xf0
[  141.082573][ T6730]  ipv6_setsockopt+0x135/0x170
[  141.082597][ T6730]  tcp_setsockopt+0xa4/0x100
[  141.082624][ T6730]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  141.082644][ T6730]  do_sock_setsockopt+0x224/0x470
[  141.082662][ T6730]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  141.082697][ T6730]  __sys_setsockopt+0x1a0/0x230
[  141.082726][ T6730]  __x64_sys_setsockopt+0xbd/0x160
[  141.082749][ T6730]  ? do_syscall_64+0x91/0x4c0
[  141.082774][ T6730]  ? lockdep_hardirqs_on+0x7c/0x110
[  141.082798][ T6730]  do_syscall_64+0xcd/0x4c0
[  141.082826][ T6730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.082845][ T6730] RIP: 0033:0x7f410118e929
[  141.082861][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.082879][ T6730] RSP: 002b:00007f4101f32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  141.082897][ T6730] RAX: ffffffffffffffda RBX: 00007f41013b5fa0 RCX: 00007f410118e929
[  141.082910][ T6730] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  141.082921][ T6730] RBP: 00007f4101210b39 R08: 0000000000000518 R09: 0000000000000000
[  141.082933][ T6730] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000
[  141.082945][ T6730] R13: 0000000000000000 R14: 00007f41013b5fa0 R15: 00007ffe252561b8
[  141.082971][ T6730]  </TASK>
[  141.082978][ T6730] Mem-Info:
[  141.140224][ T1220] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  141.152248][ T6730] active_anon:12350 inactive_anon:0 isolated_anon:0
[  141.152248][ T6730]  active_file:4608 inactive_file:40609 isolated_file:0
[  141.152248][ T6730]  unevictable:768 dirty:313 writeback:0
[  141.152248][ T6730]  slab_reclaimable:11063 slab_unreclaimable:98457
[  141.152248][ T6730]  mapped:35044 shmem:4230 pagetables:1321
[  141.152248][ T6730]  sec_pagetables:0 bounce:0
[  141.152248][ T6730]  kernel_misc_reclaimable:0
[  141.152248][ T6730]  free:1294025 free_pcp:21852 free_cma:0
[  141.450674][ T1220] usb 1-1: Using ep0 maxpacket: 8
[  141.470702][ T6730] Node 0 active_anon:49700kB inactive_anon:0kB active_file:18276kB inactive_file:162236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152072kB dirty:52kB writeback:0kB shmem:15384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12564kB pagetables:5252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  141.472005][ T1220] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.539227][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  141.559185][ T6730] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  141.597333][ T6730] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  141.598022][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  141.628204][ T6730] lowmem_reserve[]:
[  141.641609][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  141.642045][ T6730]  0
[  141.645496][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  141.657730][ T6730]  2481 2482 2482 2482
[  141.697908][ T6730] Node 0 DMA32 free:1269872kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49724kB inactive_anon:0kB active_file:18276kB inactive_file:160920kB unevictable:1536kB writepending:0kB present:3129332kB managed:2540572kB mlocked:0kB bounce:0kB free_pcp:60832kB local_pcp:40460kB free_cma:0kB
[  141.737419][ T6730] lowmem_reserve[]: 0 0 1 1 1
[  142.072900][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  142.088093][ T5892] usb 5-1: Using ep0 maxpacket: 16
[  142.109398][ T5892] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  142.124968][ T5892] usb 5-1: config 0 has no interface number 0
[  142.133331][ T1220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  142.133468][ T6730] Node 0 
[  142.173466][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  142.175311][ T6730] Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB
[  142.176599][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.209296][ T6730] lowmem_reserve[]:
[  142.222285][ T1220] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.263755][ T6806] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[  142.274731][ T6730]  0 0 0 0 0
[  142.278602][ T6730] Node 1 Normal free:3890856kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26012kB local_pcp:16156kB free_cma:0kB
[  142.327807][ T1220] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  142.330024][ T6806] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.346355][ T6730] lowmem_reserve[]: 0 0 0 0 0
[  142.351683][ T6730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.368276][ T6730] Node 0 DMA32: 2*4kB (UE) 11*8kB (UME) 5*16kB (E) 10*32kB (ME) 12*64kB (UME) 1*128kB (E) 1*256kB (M) 1*512kB (U) 0*1024kB 1*2048kB (E) 309*4096kB (M) = 1269872kB
[  142.392241][ T6730] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  142.421748][ T6730] Node 1 Normal: 206*4kB (UE) 54*8kB (UME) 40*16kB (UME) 78*32kB (UME) 30*64kB (UME) 10*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3890856kB
[  142.443083][ T6730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  142.457716][ T6730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.475617][ T6730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  142.488699][ T6730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.499442][ T6730] 49447 total pagecache pages
[  142.509135][ T6730] 0 pages in swap cache
[  142.514340][ T6730] Free swap  = 124996kB
[  142.518577][ T6730] Total swap = 124996kB
[  142.525787][ T6730] 2097051 pages RAM
[  142.529672][ T6730] 0 pages HighMem/MovableOnly
[  142.537815][ T6730] 429930 pages reserved
[  142.544825][ T6730] 0 pages cma reserved
[  142.610200][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.948322][ T1220] usb 1-1: Product: syz
[  142.952923][ T1220] usb 1-1: Manufacturer: syz
[  142.957562][ T1220] usb 1-1: SerialNumber: syz
[  142.963751][ T5892] usb 5-1: Product: syz
[  142.968053][ T5892] usb 5-1: Manufacturer: syz
[  142.974973][ T5892] usb 5-1: SerialNumber: syz
[  142.980954][ T1220] usb 1-1: config 0 descriptor??
[  142.990001][ T6779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.991432][ T5892] usb 5-1: config 0 descriptor??
[  143.010041][ T1220] ati_remote 1-1:0.0: Initializing ati_remote hardware failed.
[  143.025600][ T1220] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5
[  143.262474][ T5934] usb 1-1: USB disconnect, device number 4
[  143.311157][ T5892] usb 5-1: USB disconnect, device number 4
[  143.500422][   T30] audit: type=1400 audit(1751611432.643:287): avc:  denied  { ioctl } for  pid=6816 comm="syz.3.198" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  143.653507][   T30] audit: type=1400 audit(1751611432.683:288): avc:  denied  { bind } for  pid=6816 comm="syz.3.198" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  143.792564][   T30] audit: type=1400 audit(1751611432.683:289): avc:  denied  { name_bind } for  pid=6816 comm="syz.3.198" src=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  143.973449][   T30] audit: type=1400 audit(1751611432.683:290): avc:  denied  { node_bind } for  pid=6816 comm="syz.3.198" saddr=172.20.20.170 src=2048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  144.345081][ T6832] /dev/nullb0: Can't open blockdev
[  145.277467][ T6837] 9pnet_virtio: no channels available for device 127.0.0.1
[  146.321453][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  146.601933][   T24] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  146.610385][   T24] usb 1-1: config 0 has no interface number 1
[  146.616563][   T24] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  146.626640][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  146.639204][   T24] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  146.681460][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  146.709732][   T30] audit: type=1400 audit(1751611948.849:291): avc:  denied  { setopt } for  pid=6850 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  146.920391][ T5892] usb 5-1: Using ep0 maxpacket: 8
[  147.007575][ T5892] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  147.098503][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.128703][ T5892] usb 5-1: Product: syz
[  147.138322][ T5892] usb 5-1: Manufacturer: syz
[  147.149048][ T6856] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[  147.155911][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  147.164375][ T5892] usb 5-1: SerialNumber: syz
[  147.165612][   T24] usb 1-1: SerialNumber: syz
[  147.177808][   T24] usb 1-1: config 0 descriptor??
[  147.189086][ T5892] usb 5-1: config 0 descriptor??
[  147.235296][ T5892] usb 5-1: selecting invalid altsetting 3
[  147.312516][ T5892] comedi comedi0: could not set alternate setting 3 in high speed
[  147.320703][ T5892] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  147.332227][ T5892] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  147.391899][   T24] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  147.398824][   T24] usb 1-1: No valid video chain found.
[  147.409685][ T6856] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.460675][ T6849] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  147.608383][   T24] usb 1-1: USB disconnect, device number 5
[  147.636915][ T5939] usb 5-1: USB disconnect, device number 5
[  147.870233][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  148.062003][ T5869] usb 2-1: Using ep0 maxpacket: 8
[  148.326710][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.561892][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  148.654749][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  148.667881][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  148.823949][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  148.839900][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  148.908593][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.932946][ T6878] overlayfs: failed to resolve './file1': -2
[  149.072310][ T5869] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  149.138976][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.202930][ T5869] usb 2-1: Product: syz
[  149.526397][ T5869] usb 2-1: Manufacturer: syz
[  149.911906][ T6890] 9pnet_virtio: no channels available for device 127.0.0.1
[  150.094780][ T5869] usb 2-1: SerialNumber: syz
[  150.144779][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  150.167055][ T6893] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  150.196557][ T5869] usb 2-1: config 0 descriptor??
[  150.206747][ T6866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  150.237669][ T5869] ati_remote 2-1:0.0: Initializing ati_remote hardware failed.
[  150.247249][ T5869] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5
[  150.952758][ T5884] usb 4-1: Using ep0 maxpacket: 8
[  150.999442][ T5884] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  151.010687][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.018662][ T5884] usb 4-1: Product: syz
[  151.043218][ T5884] usb 4-1: Manufacturer: syz
[  151.054612][ T5884] usb 4-1: SerialNumber: syz
[  151.082664][   T30] audit: type=1400 audit(1751612466.226:292): avc:  denied  { create } for  pid=6900 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  151.104852][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.114606][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.134924][ T5884] usb 4-1: config 0 descriptor??
[  151.434971][   T30] audit: type=1400 audit(1751612466.276:293): avc:  denied  { write } for  pid=6900 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  151.497165][   T30] audit: type=1400 audit(1751612466.276:294): avc:  denied  { read } for  pid=6900 comm="syz.4.218" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  151.679694][ T5884] usb 4-1: selecting invalid altsetting 3
[  151.687785][ T6886] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  151.743831][ T5884] comedi comedi0: could not set alternate setting 3 in high speed
[  152.181977][   T30] audit: type=1400 audit(1751612466.286:295): avc:  denied  { setopt } for  pid=6900 comm="syz.4.218" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  152.209853][ T5884] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  152.356258][ T5884] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  152.383357][ T5884] usb 4-1: USB disconnect, device number 5
[  152.967549][ T6920] netlink: 'syz.0.222': attribute type 1 has an invalid length.
[  153.127669][ T6920] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.180226][   T49] usb 2-1: USB disconnect, device number 7
[  153.261957][ T6930] overlayfs: failed to resolve './file1': -2
[  153.410727][ T5869] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  154.166164][ T5869] usb 5-1: Using ep0 maxpacket: 16
[  154.192131][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.209259][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  154.228435][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'.
[  154.240475][   T30] audit: type=1400 audit(1751612469.386:296): avc:  denied  { bind } for  pid=6934 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  154.269270][   T30] audit: type=1400 audit(1751612469.406:297): avc:  denied  { setopt } for  pid=6934 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  154.359699][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  154.398412][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.435384][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  154.445571][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.454260][ T5869] usb 5-1: Product: syz
[  154.462159][ T5869] usb 5-1: Manufacturer: syz
[  154.470499][ T5869] usb 5-1: SerialNumber: syz
[  154.492978][ T5869] usb 5-1: config 0 descriptor??
[  154.974301][ T6946] 9pnet_virtio: no channels available for device 127.0.0.1
[  155.226837][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'.
[  155.570200][ T5869] rc_core: IR keymap rc-xbox-dvd not found
[  155.576086][ T5869] Registered IR keymap rc-empty
[  155.583110][ T5869] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  155.829078][ T5869] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  156.073775][   T30] audit: type=1400 audit(1751612471.186:298): avc:  denied  { read } for  pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2856 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  156.214812][   T30] audit: type=1400 audit(1751612471.186:299): avc:  denied  { open } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2856 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  156.338966][ T5884] usb 5-1: USB disconnect, device number 6
[  156.338975][    C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  156.365936][   T30] audit: type=1400 audit(1751612471.186:300): avc:  denied  { ioctl } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2856 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  157.886178][   T30] audit: type=1400 audit(1751612472.996:301): avc:  denied  { name_bind } for  pid=6975 comm="syz.4.236" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  157.888478][ T6982] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[  157.937134][   T30] audit: type=1400 audit(1751612473.056:302): avc:  denied  { read write } for  pid=6980 comm="syz.3.237" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.020468][   T30] audit: type=1400 audit(1751612473.056:303): avc:  denied  { open } for  pid=6980 comm="syz.3.237" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.049074][   T30] audit: type=1400 audit(1751612473.056:304): avc:  denied  { ioctl } for  pid=6980 comm="syz.3.237" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  158.131614][ T6982] 8021q: adding VLAN 0 to HW filter on device bond2
[  158.201356][ T6988] overlayfs: failed to resolve './file1': -2
[  158.410559][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  158.570452][    T9] usb 4-1: Using ep0 maxpacket: 8
[  158.587361][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.674193][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  158.789344][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  158.895958][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  159.409192][ T6997] 9pnet_virtio: no channels available for device 127.0.0.1
[  159.783511][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  159.794487][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  159.804183][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.819653][    T9] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  159.828997][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.837073][    T9] usb 4-1: Product: syz
[  159.841365][    T9] usb 4-1: Manufacturer: syz
[  159.845973][    T9] usb 4-1: SerialNumber: syz
[  159.853171][    T9] usb 4-1: config 0 descriptor??
[  159.858778][ T6981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  159.868696][    T9] ati_remote 4-1:0.0: Initializing ati_remote hardware failed.
[  159.886180][    T9] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5
[  160.411558][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.431513][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.450299][ T1220] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  160.461925][ T7001] 9pnet: Could not find request transport: 0xffffffffffffffff
[  160.595345][   T30] audit: type=1400 audit(1751612475.736:305): avc:  denied  { ioctl } for  pid=6998 comm="syz.4.242" path="socket:[10724]" dev="sockfs" ino=10724 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  160.660530][ T1220] usb 3-1: Using ep0 maxpacket: 32
[  160.677124][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.691437][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.867095][ T1220] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  160.930997][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.025735][ T1220] usb 3-1: config 0 descriptor??
[  161.483714][ T7025] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  162.721125][ T1220] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x6
[  162.741838][ T1220] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0
[  162.786570][ T1220] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised
[  162.805347][ T1220] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero RNG initialised
[  163.039766][ T7003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.049370][ T7003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.401035][ T7003] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  163.507827][   T49] usb 3-1: USB disconnect, device number 2
[  163.726093][    T9] usb 4-1: USB disconnect, device number 6
[  164.410993][ T7052] overlayfs: failed to resolve './file1': -2
[  164.513110][ T7055] netlink: 'syz.4.254': attribute type 1 has an invalid length.
[  165.141728][ T7055] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.213033][   T30] audit: type=1400 audit(1751612993.365:306): avc:  denied  { set_context_mgr } for  pid=7065 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  165.325558][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[  165.361662][   T30] audit: type=1400 audit(1751612993.415:307): avc:  denied  { write } for  pid=7065 comm="syz.1.257" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  165.384486][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'.
[  165.393682][ T7056] netlink: 'syz.2.255': attribute type 15 has an invalid length.
[  165.401550][ T7056] netlink: 'syz.2.255': attribute type 18 has an invalid length.
[  165.773016][   T30] audit: type=1400 audit(1751612993.415:308): avc:  denied  { map } for  pid=7065 comm="syz.1.257" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  165.796608][    C1] vkms_vblank_simulate: vblank timer overrun
[  165.833655][ T7077] FAULT_INJECTION: forcing a failure.
[  165.833655][ T7077] name failslab, interval 1, probability 0, space 0, times 1
[  165.846603][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.0.259 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  165.846628][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  165.846639][ T7077] Call Trace:
[  165.846645][ T7077]  <TASK>
[  165.846652][ T7077]  dump_stack_lvl+0x16c/0x1f0
[  165.846681][ T7077]  should_fail_ex+0x512/0x640
[  165.846703][ T7077]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  165.846727][ T7077]  should_failslab+0xc2/0x120
[  165.846751][ T7077]  __kmalloc_cache_noprof+0x6a/0x3e0
[  165.846770][ T7077]  ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x2f1/0x510
[  165.846798][ T7077]  ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x345/0x510
[  165.846825][ T7077]  ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x9c/0x510
[  165.846858][ T7077]  snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x9c/0x510
[  165.846892][ T7077]  snd_mixer_oss_put_recsrc1_sw+0x87/0xc0
[  165.846921][ T7077]  snd_mixer_oss_ioctl1+0xaf0/0x1cf0
[  165.846944][ T7077]  ? lockdep_hardirqs_on+0x7c/0x110
[  165.846971][ T7077]  ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10
[  165.847004][ T7077]  ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10
[  165.847036][ T7077]  ? tomoyo_path_number_perm+0x18d/0x580
[  165.847062][ T7077]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  165.847085][ T7077]  ? do_vfs_ioctl+0x523/0x1a60
[  165.847106][ T7077]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  165.847131][ T7077]  snd_mixer_oss_ioctl_card+0x102/0x170
[  165.847154][ T7077]  ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10
[  165.847176][ T7077]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  165.847206][ T7077]  snd_pcm_oss_ioctl+0x137c/0x37a0
[  165.847229][ T7077]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  165.847252][ T7077]  ? selinux_file_ioctl+0x180/0x270
[  165.847274][ T7077]  ? selinux_file_ioctl+0xb4/0x270
[  165.847299][ T7077]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  165.847320][ T7077]  __x64_sys_ioctl+0x18b/0x210
[  165.847341][ T7077]  do_syscall_64+0xcd/0x4c0
[  165.847368][ T7077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.847386][ T7077] RIP: 0033:0x7f04bdd8e929
[  165.847401][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.847418][ T7077] RSP: 002b:00007f04becae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  165.847435][ T7077] RAX: ffffffffffffffda RBX: 00007f04bdfb6080 RCX: 00007f04bdd8e929
[  165.847448][ T7077] RDX: 0000200000000100 RSI: 00000000c0044dff RDI: 0000000000000006
[  165.847458][ T7077] RBP: 00007f04becae090 R08: 0000000000000000 R09: 0000000000000000
[  165.847467][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  165.847476][ T7077] R13: 0000000000000000 R14: 00007f04bdfb6080 R15: 00007fff76d61038
[  165.847500][ T7077]  </TASK>
[  165.854120][   T30] audit: type=1400 audit(1751612993.445:309): avc:  denied  { sqpoll } for  pid=7065 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  166.729365][   T30] audit: type=1400 audit(1751612993.515:310): avc:  denied  { remount } for  pid=7054 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  166.756504][ T7085] bond0: entered promiscuous mode
[  166.761747][ T7085] bond_slave_0: entered promiscuous mode
[  166.768271][ T7085] bond_slave_1: entered promiscuous mode
[  167.283260][   T30] audit: type=1400 audit(1751612993.655:311): avc:  denied  { create } for  pid=7054 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  167.344136][   T30] audit: type=1400 audit(1751612993.655:312): avc:  denied  { connect } for  pid=7054 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  167.363591][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.379819][   T30] audit: type=1400 audit(1751612994.635:313): avc:  denied  { ioctl } for  pid=7070 comm="syz.4.258" path="socket:[11705]" dev="sockfs" ino=11705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  167.415811][ T7086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'.
[  167.660234][   T30] audit: type=1400 audit(1751612995.785:314): avc:  denied  { getopt } for  pid=7084 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  168.047637][ T5832] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1
[  168.056266][   T30] audit: type=1400 audit(1751612996.195:315): avc:  denied  { bind } for  pid=7093 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  168.434652][ T7101] netlink: 'syz.4.268': attribute type 1 has an invalid length.
[  169.025754][ T7113] 9pnet_virtio: no channels available for device 127.0.0.1
[  169.399538][ T7101] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.564311][ T7115] overlayfs: failed to resolve './file1': -2
[  169.919300][ T7122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  170.839360][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  170.839376][   T30] audit: type=1400 audit(1751612998.985:318): avc:  denied  { ioctl } for  pid=7130 comm="syz.1.274" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  172.072342][ T7144] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  172.102127][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  172.116761][ T5832] Bluetooth: hci1: Injecting HCI hardware error event
[  172.127083][   T51] Bluetooth: hci1: hardware error 0x00
[  172.955190][ T7163] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[  173.004137][ T7166] capability: warning: `syz.3.282' uses 32-bit capabilities (legacy support in use)
[  173.122434][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'.
[  173.504356][ T7163] 8021q: adding VLAN 0 to HW filter on device bond4
[  173.519949][ T7158] bridge_slave_1: left allmulticast mode
[  173.525877][ T7158] bridge_slave_1: left promiscuous mode
[  173.531739][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.544537][ T7158] bridge_slave_0: left allmulticast mode
[  173.550213][ T7158] bridge_slave_0: left promiscuous mode
[  173.555931][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.920245][   T30] audit: type=1800 audit(1751613002.055:319): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.284" name="bus" dev="overlay" ino=328 res=0 errno=0
[  173.929320][ T7176] netlink: 'syz.2.285': attribute type 9 has an invalid length.
[  173.972024][   T30] audit: type=1400 audit(1751613002.075:320): avc:  denied  { create } for  pid=7175 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  173.974051][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.285'.
[  174.480591][   T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  174.888091][ T7183] ALSA: mixer_oss: invalid index 40000
[  175.222519][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.291'.
[  175.231544][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'.
[  175.697314][ T7205] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.847778][   T30] audit: type=1400 audit(1751613003.825:321): avc:  denied  { append } for  pid=7201 comm="syz.1.293" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  177.839329][   T30] audit: type=1400 audit(1751613003.835:322): avc:  denied  { create } for  pid=7201 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  177.858691][   T30] audit: type=1400 audit(1751613003.835:323): avc:  denied  { write } for  pid=7201 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  177.878566][   T30] audit: type=1400 audit(1751613004.205:324): avc:  denied  { append } for  pid=7197 comm="syz.4.292" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  177.903444][   T30] audit: type=1400 audit(1751613004.205:325): avc:  denied  { ioctl } for  pid=7197 comm="syz.4.292" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  178.254544][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'.
[  178.721100][ T7213] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[  178.906009][   T30] audit: type=1800 audit(1751613007.045:326): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.296" name="bus" dev="overlay" ino=354 res=0 errno=0
[  178.933386][ T7213] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.459825][ T7226] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  180.421465][ T7236] netlink: 2 bytes leftover after parsing attributes in process `syz.4.300'.
[  181.730706][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  181.941744][   T30] audit: type=1800 audit(1751613010.085:327): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.310" name="bus" dev="overlay" ino=323 res=0 errno=0
[  181.970553][ T7267] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[  182.012549][    T9] usb 2-1: Using ep0 maxpacket: 16
[  182.048934][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.071245][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.076036][ T7267] 8021q: adding VLAN 0 to HW filter on device bond5
[  182.093879][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  182.103678][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  182.122772][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.137123][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  182.146431][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  182.154517][    T9] usb 2-1: Manufacturer: syz
[  182.166484][    T9] usb 2-1: config 0 descriptor??
[  182.528306][    T9] rc_core: IR keymap rc-hauppauge not found
[  182.534471][    T9] Registered IR keymap rc-empty
[  182.888044][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  182.918259][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  182.992324][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  183.051386][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9
[  183.194006][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  183.238271][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  183.814862][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  183.955228][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.456851][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.600302][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.620289][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.644859][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.685311][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.751391][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  184.848367][    T9] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  184.919966][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  184.959702][    T9] usb 2-1: USB disconnect, device number 8
[  186.229316][   T30] audit: type=1400 audit(1751613014.365:328): avc:  denied  { write } for  pid=7320 comm="syz.3.324" path="socket:[12254]" dev="sockfs" ino=12254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  186.355038][   T30] audit: type=1400 audit(1751613014.375:329): avc:  denied  { ioctl } for  pid=7320 comm="syz.3.324" path="socket:[12254]" dev="sockfs" ino=12254 ioctlcmd=0x891e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  187.769206][   T30] audit: type=1400 audit(1751613015.795:330): avc:  denied  { ioctl } for  pid=7326 comm="syz.2.325" path="socket:[12281]" dev="sockfs" ino=12281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  187.850801][   T30] audit: type=1400 audit(1751613015.865:331): avc:  denied  { connect } for  pid=7326 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  190.676801][   T30] audit: type=1400 audit(1751613018.825:332): avc:  denied  { ioctl } for  pid=7364 comm="syz.2.335" path="socket:[12319]" dev="sockfs" ino=12319 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  190.706623][ T7365] warning: `syz.2.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  190.726417][ T7365] loop3: detected capacity change from 0 to 1
[  191.804464][ T7377] process 'syz.2.338' launched '/dev/fd/4' with NULL argv: empty string added
[  191.826458][   T30] audit: type=1400 audit(1751613019.952:333): avc:  denied  { watch } for  pid=7376 comm="syz.2.338" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  191.863776][   T30] audit: type=1400 audit(1751613020.012:334): avc:  denied  { execute_no_trans } for  pid=7376 comm="syz.2.338" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  191.920222][   T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  192.100211][   T49] usb 1-1: Using ep0 maxpacket: 8
[  192.250930][ T7385] netlink: 72 bytes leftover after parsing attributes in process `syz.3.339'.
[  192.317756][   T30] audit: type=1326 audit(1751613020.422:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  192.651450][   T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.662342][ T7377] binder: 7376:7377 ioctl c0306201 200000000540 returned -14
[  192.670727][   T49] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  192.683213][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  192.694273][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  192.706183][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  192.741734][   T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  192.877745][   T30] audit: type=1326 audit(1751613020.422:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  192.978637][   T49] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.157985][   T49] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  193.172188][   T30] audit: type=1326 audit(1751613020.432:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.212000][   T30] audit: type=1326 audit(1751613020.432:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.240440][   T30] audit: type=1326 audit(1751613020.442:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.271445][   T30] audit: type=1326 audit(1751613020.442:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.274393][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.320317][   T49] usb 1-1: Product: syz
[  193.324528][   T49] usb 1-1: Manufacturer: syz
[  193.329134][   T49] usb 1-1: SerialNumber: syz
[  193.356494][   T49] usb 1-1: config 0 descriptor??
[  193.373183][ T7374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  193.375303][   T30] audit: type=1326 audit(1751613020.442:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.402166][   T49] ati_remote 1-1:0.0: Initializing ati_remote hardware failed.
[  193.429799][   T49] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5
[  193.530653][   T30] audit: type=1326 audit(1751613020.442:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  193.580912][  T974] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  193.652639][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  193.917374][  T974] usb 3-1: Using ep0 maxpacket: 8
[  193.980294][  T974] usb 3-1: unable to get BOS descriptor or descriptor too short
[  193.998329][  T974] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  194.003519][   T24] usb 2-1: Using ep0 maxpacket: 32
[  194.016111][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.025633][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.029077][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.035669][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.043719][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  194.058581][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.066003][ T7397] loop3: detected capacity change from 0 to 1
[  194.069503][   T24] usb 2-1: config 0 descriptor??
[  194.093686][  T974] usb 3-1: config 0 has no interface number 0
[  194.119893][  T974] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  194.140634][  T974] usb 3-1: config 0 interface 88 has no altsetting 0
[  194.149897][  T974] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  194.169366][  T974] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  194.178897][  T974] usb 3-1: Product: syz
[  194.196945][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.209704][  T974] usb 3-1: Manufacturer: syz
[  194.220585][  T974] usb 3-1: SerialNumber: syz
[  194.222546][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.245059][  T974] usb 3-1: config 0 descriptor??
[  194.827689][   T24] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x6
[  194.829613][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.942900][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.955341][   T24] hid-u2fzero 0003:10C4:8ACF.0004: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0
[  194.971650][   T24] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero LED initialised
[  194.980097][   T24] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero RNG initialised
[  194.992991][  T974] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input11
[  195.060777][ T7407] /dev/nullb0: Can't open blockdev
[  195.639715][  T974] usb 3-1: USB disconnect, device number 3
[  195.639775][    C0] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19
[  195.724167][ T7390] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  195.771479][ T7413] syzkaller0: entered promiscuous mode
[  195.777677][ T7413] syzkaller0: entered allmulticast mode
[  195.821040][   T30] audit: type=1400 audit(1751613536.933:343): avc:  denied  { relabelfrom } for  pid=7411 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  195.841624][ T7413] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.893059][   T24] usb 2-1: USB disconnect, device number 9
[  195.935635][   T30] audit: type=1400 audit(1751613536.933:344): avc:  denied  { relabelto } for  pid=7411 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  195.969246][   T30] audit: type=1400 audit(1751613536.963:345): avc:  denied  { read } for  pid=7411 comm="syz.2.347" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  195.971139][ T7414] program syz.2.347 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.083897][ T5831] udevd[5831]: Error opening device "/dev/input/event4": No such file or directory
[  196.096154][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4"
[  196.104894][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4"
[  196.226478][    T9] usb 1-1: USB disconnect, device number 6
[  196.608795][ T7420] mmap: syz.0.348 (7420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  196.662036][ T7420] pim6reg: entered allmulticast mode
[  196.830248][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  197.030377][   T24] usb 5-1: Using ep0 maxpacket: 8
[  197.073440][   T24] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  197.100341][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.108584][   T24] usb 5-1: Product: syz
[  197.113741][   T24] usb 5-1: Manufacturer: syz
[  197.119211][   T24] usb 5-1: SerialNumber: syz
[  197.129856][   T24] usb 5-1: config 0 descriptor??
[  197.146273][   T24] usb 5-1: selecting invalid altsetting 3
[  197.238644][   T24] comedi comedi0: could not set alternate setting 3 in high speed
[  197.247243][   T24] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  197.302929][   T24] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  197.347045][ T7421] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  197.425292][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'.
[  198.474179][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'.
[  198.483228][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[  199.440430][   T49] usb 5-1: USB disconnect, device number 7
[  199.853848][ T7453] netlink: 'syz.3.358': attribute type 1 has an invalid length.
[  200.529376][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  200.536276][   T30] audit: type=1400 audit(1751613541.663:350): avc:  denied  { view } for  pid=7449 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  200.980524][   T30] audit: type=1400 audit(1751613541.673:351): avc:  denied  { ioctl } for  pid=7449 comm="syz.1.357" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  200.989827][ T7453] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.091190][   T30] audit: type=1400 audit(1751613542.233:352): avc:  denied  { shutdown } for  pid=7455 comm="syz.4.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  202.357278][ T7475] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  204.998843][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  205.124003][   T30] audit: type=1400 audit(1751613546.273:353): avc:  denied  { call } for  pid=7500 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  205.200221][   T24] usb 4-1: Using ep0 maxpacket: 32
[  205.226757][   T30] audit: type=1400 audit(1751613546.313:354): avc:  denied  { write } for  pid=7500 comm="syz.1.370" path="socket:[13564]" dev="sockfs" ino=13564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  205.273190][   T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  205.294763][   T24] usb 4-1: config 0 has no interface number 0
[  207.101773][   T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  207.257630][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.281757][ T7520] tipc: Started in network mode
[  207.286894][ T7520] tipc: Node identity 4, cluster identity 4711
[  207.290703][   T30] audit: type=1400 audit(1751613548.403:355): avc:  denied  { setopt } for  pid=7515 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  207.293246][ T7520] tipc: Node number set to 4
[  207.568672][   T24] usb 4-1: config 0 descriptor??
[  207.628668][   T24] usb 4-1: can't set config #0, error -71
[  207.663604][   T30] audit: type=1400 audit(1751613548.403:356): avc:  denied  { write } for  pid=7515 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  207.699912][   T30] audit: type=1400 audit(1751613548.423:357): avc:  denied  { setopt } for  pid=7515 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  207.761693][   T24] usb 4-1: USB disconnect, device number 7
[  207.779093][   T30] audit: type=1400 audit(1751613548.513:358): avc:  denied  { write } for  pid=7515 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  210.656275][ T7572] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  210.684487][   T30] audit: type=1400 audit(1751614064.827:359): avc:  denied  { map } for  pid=7571 comm="syz.3.388" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  211.792021][ T7577] loop3: detected capacity change from 0 to 1
[  212.170869][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  212.376454][   T30] audit: type=1400 audit(1751614066.517:360): avc:  denied  { bind } for  pid=7591 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  212.397199][   T30] audit: type=1400 audit(1751614066.517:361): avc:  denied  { name_bind } for  pid=7591 comm="syz.0.393" src=11823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  212.425845][   T30] audit: type=1400 audit(1751614066.517:362): avc:  denied  { node_bind } for  pid=7591 comm="syz.0.393" saddr=98.117.115.0 src=11823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  212.538907][   T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  212.885401][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.941730][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  212.956913][   T24] usb 3-1: config 1 has no interface number 1
[  212.963494][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  212.978816][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  213.001016][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.019761][   T24] usb 3-1: Product: syz
[  213.025804][   T24] usb 3-1: Manufacturer: syz
[  213.030614][   T24] usb 3-1: SerialNumber: syz
[  214.044086][   T30] audit: type=1400 audit(1751614067.257:363): avc:  denied  { create } for  pid=7597 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  214.318694][   T30] audit: type=1400 audit(1751614067.267:364): avc:  denied  { getopt } for  pid=7597 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  214.485124][   T24] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  214.528094][   T24] usb 3-1: MIDIStreaming interface descriptor not found
[  214.577287][   T24] usb 3-1: USB disconnect, device number 4
[  214.627803][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.667385][   T30] audit: type=1400 audit(1751614068.807:365): avc:  denied  { getopt } for  pid=7600 comm="syz.0.396" laddr=::1 lport=60 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  214.811616][   T30] audit: type=1400 audit(1751614068.867:366): avc:  denied  { shutdown } for  pid=7600 comm="syz.0.396" laddr=::1 lport=60 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  214.854370][ T7609] loop3: detected capacity change from 0 to 1
[  214.936029][   T30] audit: type=1400 audit(1751614069.077:367): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  215.165609][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.401'.
[  215.200640][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  215.297902][   T30] audit: type=1400 audit(1751614069.427:368): avc:  denied  { connect } for  pid=7618 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  215.453426][   T30] audit: type=1400 audit(1751614069.437:369): avc:  denied  { create } for  pid=7616 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  215.488216][   T24] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config
[  216.273063][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 99, changing to 10
[  216.355077][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25087, setting to 1024
[  216.393304][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.407543][   T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  216.426180][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.476237][   T24] usb 5-1: config 0 descriptor??
[  216.875327][   T24] ath6kl: Failed to submit usb control message: -71
[  217.028556][   T24] ath6kl: unable to send the bmi data to the device: -71
[  217.074248][   T24] ath6kl: Unable to send get target info: -71
[  217.095261][   T24] ath6kl: Failed to init ath6kl core: -71
[  217.127521][   T24] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  217.186532][   T24] usb 5-1: USB disconnect, device number 8
[  217.824984][ T7649] 9pnet_virtio: no channels available for device 127.0.0.1
[  219.477075][ T7659] option changes via remount are deprecated (pid=7658 comm=syz.1.410)
[  219.493051][   T24] libceph: connect (1)[c::]:6789 error -101
[  219.502432][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  219.592125][ T7651] ceph: No mds server is up or the cluster is laggy
[  219.875719][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  219.875735][   T30] audit: type=1326 audit(1751614074.017:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  219.953120][   T30] audit: type=1326 audit(1751614074.017:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.029691][   T30] audit: type=1326 audit(1751614074.017:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.058776][   T30] audit: type=1326 audit(1751614074.017:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.083270][   T30] audit: type=1400 audit(1751614074.017:376): avc:  denied  { getattr } for  pid=7673 comm="syz.3.412" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  220.105611][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.112333][   T30] audit: type=1326 audit(1751614074.017:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.665880][   T30] audit: type=1326 audit(1751614074.017:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.689554][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.714964][   T30] audit: type=1326 audit(1751614074.017:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.738270][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.840998][   T30] audit: type=1326 audit(1751614074.017:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.885355][   T30] audit: type=1326 audit(1751614074.017:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.3.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca68f8e929 code=0x7ffc0000
[  220.908730][    C0] vkms_vblank_simulate: vblank timer overrun
[  221.012409][ T7661] autofs: Bad value for 'fd'
[  221.526533][ T7694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.450732][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'.
[  222.654460][ T7700] vxcan1: entered allmulticast mode
[  222.659790][ T7704] batadv_slave_1: entered promiscuous mode
[  223.043124][ T7703] batadv_slave_1: left promiscuous mode
[  223.240878][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  223.440857][ T5934] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  223.500905][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.4.427'.
[  223.620579][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.764602][ T5934] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  223.849621][ T5934] usb 4-1: config 1 has no interface number 1
[  224.210060][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  224.235204][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.246085][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.256323][ T5934] usb 4-1: Product: syz
[  224.260914][ T5934] usb 4-1: Manufacturer: syz
[  224.290334][ T5934] usb 4-1: SerialNumber: syz
[  225.023516][ T5934] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  225.034940][ T5934] usb 4-1: MIDIStreaming interface descriptor not found
[  225.291991][ T7742] QAT: Device 7 not found
[  225.567157][ T5934] usb 4-1: USB disconnect, device number 8
[  226.579932][ T7752] orangefs_mount: mount request failed with -4
[  226.782353][ T7755] fuse: Unknown parameter ''
[  227.994569][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  227.994591][   T30] audit: type=1400 audit(1751614082.047:409): avc:  denied  { write } for  pid=7764 comm="syz.0.437" name="mcfilter6" dev="proc" ino=4026533143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  228.023849][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.774637][ T7746] autofs: Unknown parameter '0x0000000000000000'
[  230.074647][ T7787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.718905][  T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  231.143842][ T7798] 9pnet_virtio: no channels available for device 127.0.0.1
[  231.291496][  T974] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  231.382727][  T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.465208][  T974] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  231.472332][   T30] audit: type=1400 audit(1751614085.607:410): avc:  denied  { ioctl } for  pid=7803 comm="syz.0.447" path="socket:[14070]" dev="sockfs" ino=14070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  231.482617][  T974] usb 2-1: config 1 has no interface number 1
[  231.510779][  T974] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  231.546762][  T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.556481][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.568559][ T7805] binder: 7803:7805 ioctl c0306201 2000000003c0 returned -14
[  231.603750][  T974] usb 2-1: Product: syz
[  231.610387][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  231.627945][  T974] usb 2-1: Manufacturer: syz
[  231.645857][  T974] usb 2-1: SerialNumber: syz
[  231.776540][ T5884] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.793576][ T5884] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.814006][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.823718][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.837691][ T5884] usb 5-1: Product: syz
[  231.838924][   T30] audit: type=1400 audit(1751614085.977:411): avc:  denied  { read } for  pid=7808 comm="syz.2.449" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.867490][ T5884] usb 5-1: Manufacturer: syz
[  231.872540][ T5884] usb 5-1: SerialNumber: syz
[  231.927382][  T974] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  231.946140][  T974] usb 2-1: MIDIStreaming interface descriptor not found
[  232.042945][  T974] usb 2-1: USB disconnect, device number 10
[  232.076892][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.636167][   T30] audit: type=1400 audit(1751614086.587:412): avc:  denied  { create } for  pid=7811 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  232.692156][ T5884] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  232.698292][ T5884] cdc_ncm 5-1:1.0: bind() failure
[  232.711516][ T5884] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  232.718434][ T5884] cdc_ncm 5-1:1.1: bind() failure
[  232.760087][ T5884] usb 5-1: USB disconnect, device number 9
[  233.313626][ T7834] netlink: 'syz.2.455': attribute type 12 has an invalid length.
[  234.989589][ T5884] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  235.016262][ T7848] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  235.210612][ T5884] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  235.265927][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.276553][ T7858] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'.
[  235.703853][ T5884] usb 2-1: Product: syz
[  235.712709][ T5884] usb 2-1: Manufacturer: syz
[  235.717597][ T5884] usb 2-1: SerialNumber: syz
[  235.728198][ T5884] usb 2-1: config 0 descriptor??
[  235.809223][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  235.943093][ T5884] usb-storage 2-1:0.0: USB Mass Storage device detected
[  236.055254][ T7852] autofs: Unknown parameter '0x0000000000000000'
[  236.244423][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.280306][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.990055][   T30] audit: type=1400 audit(1751614091.067:413): avc:  denied  { read write } for  pid=7841 comm="syz.1.457" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  237.101612][ T5884] hid-generic 00A0:0008:0003.0005: unknown main item tag 0x7
[  237.158420][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.173590][ T5884] hid-generic 00A0:0008:0003.0005: item fetching failed at offset 14/15
[  237.240705][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.240777][ T5884] hid-generic 00A0:0008:0003.0005: probe with driver hid-generic failed with error -22
[  237.270350][   T30] audit: type=1400 audit(1751614091.067:414): avc:  denied  { open } for  pid=7841 comm="syz.1.457" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  237.778981][ T7879] QAT: Device 7 not found
[  239.791511][ T5934] usb 2-1: USB disconnect, device number 11
[  241.306840][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'.
[  241.517806][ T7902] batadv_slave_1: entered promiscuous mode
[  242.149206][ T7902] batadv_slave_1: left promiscuous mode
[  242.180236][ T7918] IPVS: stopping master sync thread 7025 ...
[  242.339868][   T30] audit: type=1400 audit(1751614096.477:415): avc:  denied  { create } for  pid=7926 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[  242.409513][ T7931] SELinux: ebitmap: map size 2147483712 does not match my size 64 (high bit was 0)
[  242.419317][   T30] audit: type=1400 audit(1751614096.547:416): avc:  denied  { load_policy } for  pid=7926 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  242.442586][ T7931] SELinux: failed to load policy
[  242.465754][   T30] audit: type=1400 audit(1751614096.587:417): avc:  denied  { append } for  pid=7926 comm="syz.3.478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  242.537363][   T30] audit: type=1400 audit(1751614096.657:418): avc:  denied  { create } for  pid=7929 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  242.580191][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[  242.590758][ T7930] IPVS: Error joining to the multicast group
[  242.842988][   T30] audit: type=1400 audit(1751614096.877:419): avc:  denied  { accept } for  pid=7933 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  242.902398][   T30] audit: type=1400 audit(1751614096.887:420): avc:  denied  { getopt } for  pid=7933 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  242.972234][ T7946] netlink: 72 bytes leftover after parsing attributes in process `syz.0.480'.
[  245.829446][ T7963] FAULT_INJECTION: forcing a failure.
[  245.829446][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  245.938676][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.2.486 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  245.938705][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  245.938720][ T7963] Call Trace:
[  245.938727][ T7963]  <TASK>
[  245.938734][ T7963]  dump_stack_lvl+0x16c/0x1f0
[  245.938767][ T7963]  should_fail_ex+0x512/0x640
[  245.938796][ T7963]  _copy_to_user+0x32/0xd0
[  245.938824][ T7963]  simple_read_from_buffer+0xcb/0x170
[  245.938850][ T7963]  proc_fail_nth_read+0x197/0x270
[  245.938876][ T7963]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  245.938902][ T7963]  ? rw_verify_area+0xcf/0x680
[  245.938922][ T7963]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  245.938945][ T7963]  vfs_read+0x1e4/0xc60
[  245.938972][ T7963]  ? __pfx___mutex_lock+0x10/0x10
[  245.938999][ T7963]  ? __pfx_vfs_read+0x10/0x10
[  245.939030][ T7963]  ? __fget_files+0x20e/0x3c0
[  245.939063][ T7963]  ksys_read+0x12a/0x250
[  245.939084][ T7963]  ? __pfx_ksys_read+0x10/0x10
[  245.939107][ T7963]  ? fdget+0x187/0x210
[  245.939136][ T7963]  do_syscall_64+0xcd/0x4c0
[  245.939164][ T7963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.939184][ T7963] RIP: 0033:0x7f4a5398d33c
[  245.939200][ T7963] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  245.939218][ T7963] RSP: 002b:00007f4a54834030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  245.939237][ T7963] RAX: ffffffffffffffda RBX: 00007f4a53bb6080 RCX: 00007f4a5398d33c
[  245.939250][ T7963] RDX: 000000000000000f RSI: 00007f4a548340a0 RDI: 0000000000000005
[  245.939262][ T7963] RBP: 00007f4a54834090 R08: 0000000000000000 R09: 0000000000000000
[  245.939274][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.939285][ T7963] R13: 0000000000000000 R14: 00007f4a53bb6080 R15: 00007ffd03c3f948
[  245.939312][ T7963]  </TASK>
[  247.016409][ T7973] FAULT_INJECTION: forcing a failure.
[  247.016409][ T7973] name failslab, interval 1, probability 0, space 0, times 0
[  247.290243][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.3.489 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  247.290278][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.290290][ T7973] Call Trace:
[  247.290296][ T7973]  <TASK>
[  247.290304][ T7973]  dump_stack_lvl+0x16c/0x1f0
[  247.290335][ T7973]  should_fail_ex+0x512/0x640
[  247.290358][ T7973]  ? __kmalloc_node_track_caller_noprof+0xc3/0x510
[  247.290386][ T7973]  should_failslab+0xc2/0x120
[  247.290413][ T7973]  __kmalloc_node_track_caller_noprof+0xd6/0x510
[  247.290440][ T7973]  ? kasprintf+0xc7/0x100
[  247.290470][ T7973]  kvasprintf+0xbc/0x160
[  247.290495][ T7973]  ? __pfx_kvasprintf+0x10/0x10
[  247.290519][ T7973]  ? do_syscall_64+0xcd/0x4c0
[  247.290556][ T7973]  kasprintf+0xc7/0x100
[  247.290581][ T7973]  ? __pfx_kasprintf+0x10/0x10
[  247.290622][ T7973]  logfc+0x114/0x660
[  247.290649][ T7973]  ? __pfx_logfc+0x10/0x10
[  247.290671][ T7973]  ? kasan_quarantine_put+0x10a/0x240
[  247.290699][ T7973]  ? kfree+0x2b4/0x4d0
[  247.290718][ T7973]  ? fscrypt_parse_test_dummy_encryption+0x190/0x430
[  247.290749][ T7973]  ceph_parse_mount_param+0x1cac/0x2860
[  247.290784][ T7973]  ? __pfx_ceph_parse_mount_param+0x10/0x10
[  247.290813][ T7973]  ? static_key_count+0x5a/0x70
[  247.290833][ T7973]  ? __pfx_ceph_parse_mount_param+0x10/0x10
[  247.290858][ T7973]  vfs_parse_fs_param+0x208/0x3c0
[  247.290885][ T7973]  __do_sys_fsconfig+0x930/0xbe0
[  247.290907][ T7973]  ? __pfx___do_sys_fsconfig+0x10/0x10
[  247.290924][ T7973]  ? fput+0x70/0xf0
[  247.290965][ T7973]  do_syscall_64+0xcd/0x4c0
[  247.290993][ T7973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.291013][ T7973] RIP: 0033:0x7fca68f8e929
[  247.291028][ T7973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.291046][ T7973] RSP: 002b:00007fca69e84038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  247.291065][ T7973] RAX: ffffffffffffffda RBX: 00007fca691b5fa0 RCX: 00007fca68f8e929
[  247.291078][ T7973] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003
[  247.291090][ T7973] RBP: 00007fca69e84090 R08: 0000000000000000 R09: 0000000000000000
[  247.291102][ T7973] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  247.291114][ T7973] R13: 0000000000000000 R14: 00007fca691b5fa0 R15: 00007ffd84935f78
[  247.291142][ T7973]  </TASK>
[  247.705111][   T30] audit: type=1400 audit(1751614101.777:421): avc:  denied  { connect } for  pid=7978 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  255.448291][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  255.459146][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.840133][    C0] sched: DL replenish lagged too much
[  259.874439][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.887025][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.895200][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.907573][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.915998][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.937885][   T30] audit: type=1400 audit(1751614114.077:422): avc:  denied  { mounton } for  pid=7989 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  262.010321][ T5832] Bluetooth: hci5: command tx timeout
[  264.080381][ T5832] Bluetooth: hci5: command tx timeout
[  264.814638][ T7989] chnl_net:caif_netlink_parms(): no params data found
[  265.366719][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  265.378485][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  265.386759][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  265.397422][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  265.406171][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  266.452406][   T51] Bluetooth: hci5: command tx timeout
[  267.440961][   T51] Bluetooth: hci6: command tx timeout
[  267.838412][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  267.850954][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  267.859182][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  267.867391][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  267.875032][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.909136][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  267.917968][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  267.925861][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  267.937821][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  267.945494][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  268.480893][   T51] Bluetooth: hci5: command tx timeout
[  268.793387][ T8012] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  269.520376][   T51] Bluetooth: hci6: command tx timeout
[  269.989663][   T51] Bluetooth: hci1: command tx timeout
[  270.010261][   T51] Bluetooth: hci7: command tx timeout
[  270.726746][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.748431][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.760276][ T7989] bridge_slave_0: entered allmulticast mode
[  270.767803][ T7989] bridge_slave_0: entered promiscuous mode
[  270.783348][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.814838][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.824657][ T7989] bridge_slave_1: entered allmulticast mode
[  270.836321][ T7989] bridge_slave_1: entered promiscuous mode
[  271.018269][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.064574][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.234470][ T7989] team0: Port device team_slave_0 added
[  271.253804][ T7989] team0: Port device team_slave_1 added
[  271.438307][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.453652][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.487959][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.523273][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.533225][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.563899][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.603299][   T51] Bluetooth: hci6: command tx timeout
[  271.949056][ T7989] hsr_slave_0: entered promiscuous mode
[  271.955627][ T7989] hsr_slave_1: entered promiscuous mode
[  271.968719][ T7989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.976645][ T7989] Cannot create hsr debugfs directory
[  272.000428][   T51] Bluetooth: hci1: command tx timeout
[  272.080909][   T51] Bluetooth: hci7: command tx timeout
[  272.389613][ T8016] chnl_net:caif_netlink_parms(): no params data found
[  272.413989][ T8010] chnl_net:caif_netlink_parms(): no params data found
[  272.465884][ T8017] chnl_net:caif_netlink_parms(): no params data found
[  273.338582][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.351590][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.358817][ T8016] bridge_slave_0: entered allmulticast mode
[  273.375597][ T8016] bridge_slave_0: entered promiscuous mode
[  273.390084][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.423397][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.440613][ T8010] bridge_slave_0: entered allmulticast mode
[  273.448268][ T8010] bridge_slave_0: entered promiscuous mode
[  273.462013][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.469131][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.484421][ T8017] bridge_slave_0: entered allmulticast mode
[  273.492865][ T8017] bridge_slave_0: entered promiscuous mode
[  273.506905][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.519337][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.532399][ T8016] bridge_slave_1: entered allmulticast mode
[  273.539941][ T8016] bridge_slave_1: entered promiscuous mode
[  273.598261][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.616034][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.626158][ T8010] bridge_slave_1: entered allmulticast mode
[  273.637532][ T8010] bridge_slave_1: entered promiscuous mode
[  273.646516][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.662952][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.678606][ T8017] bridge_slave_1: entered allmulticast mode
[  273.684940][ T5832] Bluetooth: hci6: command tx timeout
[  273.697881][ T8017] bridge_slave_1: entered promiscuous mode
[  274.052760][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.073467][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.088001][ T5832] Bluetooth: hci1: command tx timeout
[  274.106375][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.121094][ T8017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.160550][ T5832] Bluetooth: hci7: command tx timeout
[  274.221749][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.241593][ T8017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.304729][ T8016] team0: Port device team_slave_0 added
[  274.536039][ T8016] team0: Port device team_slave_1 added
[  274.734699][ T8010] team0: Port device team_slave_0 added
[  274.748576][ T7989] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.851465][ T8017] team0: Port device team_slave_0 added
[  274.911037][ T8010] team0: Port device team_slave_1 added
[  274.917545][ T7989] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.958186][ T8017] team0: Port device team_slave_1 added
[  274.969056][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.986148][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.020876][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.136807][ T7989] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  275.204298][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.220095][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.255643][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.278753][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.294103][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.329928][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.346803][ T7989] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  275.468499][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.478954][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.511873][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.529871][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.538781][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.579431][ T8017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.659341][ T8016] hsr_slave_0: entered promiscuous mode
[  275.666519][ T8016] hsr_slave_1: entered promiscuous mode
[  275.688223][ T8016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.701023][ T8016] Cannot create hsr debugfs directory
[  275.729389][ T8017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.736874][ T8017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.771684][ T8017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.118969][ T8010] hsr_slave_0: entered promiscuous mode
[  276.138385][ T8010] hsr_slave_1: entered promiscuous mode
[  276.150890][ T8010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.158466][ T8010] Cannot create hsr debugfs directory
[  276.164384][ T5832] Bluetooth: hci1: command tx timeout
[  276.234638][ T8017] hsr_slave_0: entered promiscuous mode
[  276.241780][ T5832] Bluetooth: hci7: command tx timeout
[  276.257010][ T8017] hsr_slave_1: entered promiscuous mode
[  276.268084][ T8017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.283859][ T8017] Cannot create hsr debugfs directory
[  277.198519][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.242707][ T8016] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  277.297955][ T8016] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  277.327661][ T7989] 8021q: adding VLAN 0 to HW filter on device team0
[  277.400852][ T8016] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  277.444729][ T8016] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  277.484940][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.492138][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.514342][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.521500][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.615243][ T8010] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  277.735754][ T8010] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  277.761292][ T8010] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  277.837549][ T8010] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.997436][ T8017] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  278.100796][ T8017] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  278.131757][ T8017] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  278.199283][ T8017] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  278.296418][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.439168][ T8016] 8021q: adding VLAN 0 to HW filter on device team0
[  278.471905][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.479055][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.601227][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.608409][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.718268][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.748093][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.906246][ T8010] 8021q: adding VLAN 0 to HW filter on device team0
[  278.995772][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.002999][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.070236][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.077409][ T6367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.317301][ T8017] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.463597][ T8017] 8021q: adding VLAN 0 to HW filter on device team0
[  279.588865][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.596044][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.661883][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.669042][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.198847][ T7989] veth0_vlan: entered promiscuous mode
[  280.283017][ T7989] veth1_vlan: entered promiscuous mode
[  280.407524][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.462635][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.659641][ T7989] veth0_macvtap: entered promiscuous mode
[  280.705470][ T7989] veth1_macvtap: entered promiscuous mode
[  280.823716][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.933994][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.118899][ T7989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.190577][ T7989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.199315][ T7989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.270179][ T7989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.382022][ T8017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.000449][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.054928][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.197508][ T8010] veth0_vlan: entered promiscuous mode
[  282.292398][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.302642][ T8016] veth0_vlan: entered promiscuous mode
[  282.341293][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.354273][ T8016] veth1_vlan: entered promiscuous mode
[  282.397621][ T8010] veth1_vlan: entered promiscuous mode
[  282.424549][   T30] audit: type=1400 audit(1751614136.567:423): avc:  denied  { mounton } for  pid=7989 comm="syz-executor" path="/root/syzkaller.9vi2kT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  282.628874][   T30] audit: type=1400 audit(1751614136.647:424): avc:  denied  { mount } for  pid=7989 comm="syz-executor" name="/" dev="gadgetfs" ino=6584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  282.679008][ T8010] veth0_macvtap: entered promiscuous mode
[  282.737760][ T8016] veth0_macvtap: entered promiscuous mode
[  282.815535][ T8010] veth1_macvtap: entered promiscuous mode
[  282.855556][ T8016] veth1_macvtap: entered promiscuous mode
[  282.942943][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.009913][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.028592][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.055995][ T8017] veth0_vlan: entered promiscuous mode
[  283.089578][ T8010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.101860][ T8010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.116074][ T8010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.166681][ T8010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.236015][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.276170][ T8016] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.306101][ T8016] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.316994][ T8016] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.331464][ T8016] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.351066][ T8017] veth1_vlan: entered promiscuous mode
[  283.807285][ T8017] veth0_macvtap: entered promiscuous mode
[  283.943296][ T8017] veth1_macvtap: entered promiscuous mode
[  284.041599][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.049451][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.158561][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.172500][ T8119] autofs: Unknown parameter '0x0000000000000000'
[  284.264555][ T8017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.314813][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.328567][ T7148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.344080][ T8017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.368959][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.377062][ T7148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.390157][ T8017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.413188][ T8017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.435271][ T8017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.851882][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.937703][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.807892][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.967141][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.285386][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.503'.
[  291.591898][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.620702][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.650239][ T8132] bridge_slave_1: left allmulticast mode
[  291.656451][ T8132] bridge_slave_1: left promiscuous mode
[  291.823952][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.072718][ T8132] bridge_slave_0: left allmulticast mode
[  292.078373][ T8132] bridge_slave_0: left promiscuous mode
[  292.172103][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.537325][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  292.546209][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  292.555474][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  292.591418][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  292.600079][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  294.741613][   T51] Bluetooth: hci2: command tx timeout
[  294.838119][   T30] audit: type=1400 audit(1751614148.977:425): avc:  denied  { read } for  pid=8141 comm="syz.7.504" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  294.861246][   T30] audit: type=1400 audit(1751614148.977:426): avc:  denied  { open } for  pid=8141 comm="syz.7.504" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  294.897763][   T30] audit: type=1400 audit(1751614148.977:427): avc:  denied  { ioctl } for  pid=8141 comm="syz.7.504" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  295.098926][   T30] audit: type=1400 audit(1751614149.227:428): avc:  denied  { read write } for  pid=8016 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.200205][   T30] audit: type=1400 audit(1751614149.227:429): avc:  denied  { open } for  pid=8016 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  296.811382][   T51] Bluetooth: hci2: command tx timeout
[  297.050441][   T30] audit: type=1400 audit(1751614149.227:430): avc:  denied  { ioctl } for  pid=8016 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  297.351566][   T30] audit: type=1400 audit(1751614151.247:431): avc:  denied  { read } for  pid=8147 comm="syz.7.505" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  297.723571][   T30] audit: type=1400 audit(1751614151.247:432): avc:  denied  { open } for  pid=8147 comm="syz.7.505" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  299.456635][   T51] Bluetooth: hci2: command tx timeout
[  299.671147][   T30] audit: type=1400 audit(1751614151.827:433): avc:  denied  { ioctl } for  pid=8147 comm="syz.7.505" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  299.775420][   T30] audit: type=1400 audit(1751614151.827:434): avc:  denied  { write } for  pid=8147 comm="syz.7.505" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  299.850713][   T30] audit: type=1400 audit(1751614151.827:435): avc:  denied  { open } for  pid=8147 comm="syz.7.505" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  299.921563][   T30] audit: type=1400 audit(1751614151.827:436): avc:  denied  { ioctl } for  pid=8147 comm="syz.7.505" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  299.993063][   T30] audit: type=1400 audit(1751614153.877:437): avc:  denied  { execmem } for  pid=8156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  300.216721][   T30] audit: type=1400 audit(1751614154.357:438): avc:  denied  { create } for  pid=8158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.265521][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.278337][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.287252][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.313299][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.321533][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.360625][   T30] audit: type=1400 audit(1751614154.377:439): avc:  denied  { read write } for  pid=8158 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  300.411385][   T30] audit: type=1400 audit(1751614154.377:440): avc:  denied  { open } for  pid=8158 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  300.446569][   T30] audit: type=1400 audit(1751614154.437:441): avc:  denied  { ioctl } for  pid=8158 comm="syz-executor" path="socket:[18566]" dev="sockfs" ino=18566 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.477491][   T30] audit: type=1400 audit(1751614154.477:442): avc:  denied  { read } for  pid=8158 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  300.522971][   T30] audit: type=1400 audit(1751614154.477:443): avc:  denied  { open } for  pid=8158 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  300.554616][   T30] audit: type=1400 audit(1751614154.477:444): avc:  denied  { mounton } for  pid=8158 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  301.532039][   T51] Bluetooth: hci2: command tx timeout
[  302.400344][ T5832] Bluetooth: hci3: command tx timeout
[  304.480388][ T5832] Bluetooth: hci3: command tx timeout
[  305.580605][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.589223][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.600280][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.608170][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.634561][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  306.566538][   T51] Bluetooth: hci3: command tx timeout
[  307.680251][   T51] Bluetooth: hci4: command tx timeout
[  308.640333][   T51] Bluetooth: hci3: command tx timeout
[  309.766396][   T51] Bluetooth: hci4: command tx timeout
[  311.026775][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  311.046333][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  311.054481][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  311.063571][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  311.071323][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  311.840263][ T5832] Bluetooth: hci4: command tx timeout
[  313.120430][ T5832] Bluetooth: hci8: command tx timeout
[  313.920477][ T5832] Bluetooth: hci4: command tx timeout
[  315.200259][ T5832] Bluetooth: hci8: command tx timeout
[  316.900673][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  316.907006][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.284252][ T5832] Bluetooth: hci8: command tx timeout
[  319.360646][ T5832] Bluetooth: hci8: command tx timeout
[  324.420391][   T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  324.446071][   T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  324.459497][   T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  324.467718][   T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  324.476014][   T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  326.560582][ T5832] Bluetooth: hci9: command tx timeout
[  328.640529][ T5832] Bluetooth: hci9: command tx timeout
[  330.720342][ T5832] Bluetooth: hci9: command tx timeout
[  332.800717][ T5832] Bluetooth: hci9: command tx timeout
[  346.530904][   T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  346.540065][   T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  346.550884][   T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  346.559782][   T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  346.569473][   T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  348.640366][   T51] Bluetooth: hci10: command tx timeout
[  350.720338][   T51] Bluetooth: hci10: command tx timeout
[  352.800262][   T51] Bluetooth: hci10: command tx timeout
[  354.880538][   T51] Bluetooth: hci10: command tx timeout
[  360.466832][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  360.476002][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  360.484179][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  360.492375][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  360.500143][ T5832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  362.560749][   T51] Bluetooth: hci11: command tx timeout
[  364.640345][   T51] Bluetooth: hci11: command tx timeout
[  366.079410][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  366.090114][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  366.097940][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  366.107002][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  366.114763][ T5832] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  366.720560][ T5832] Bluetooth: hci11: command tx timeout
[  368.160481][ T5832] Bluetooth: hci12: command tx timeout
[  368.800407][ T5832] Bluetooth: hci11: command tx timeout
[  370.240872][ T5832] Bluetooth: hci12: command tx timeout
[  371.064581][   T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  371.077844][   T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  371.090427][   T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  371.098410][   T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  371.106683][   T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  372.320735][   T51] Bluetooth: hci12: command tx timeout
[  373.211482][   T51] Bluetooth: hci13: command tx timeout
[  374.400318][   T51] Bluetooth: hci12: command tx timeout
[  375.280581][   T51] Bluetooth: hci13: command tx timeout
[  377.362773][   T51] Bluetooth: hci13: command tx timeout
[  378.337265][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  378.343952][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  379.440270][   T51] Bluetooth: hci13: command tx timeout
[  384.804914][ T8207] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  384.821645][ T8207] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  384.829773][ T8207] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  384.838694][ T8207] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  384.849080][ T8207] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  385.840870][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[  386.882409][   T51] Bluetooth: hci14: command tx timeout
[  388.961046][ T8211] Bluetooth: hci14: command tx timeout
[  390.640623][ T8211] Bluetooth: hci7: command 0x0406 tx timeout
[  390.646745][ T8211] Bluetooth: hci1: command 0x0406 tx timeout
[  390.720453][ T8212] Bluetooth: hci6: command 0x0406 tx timeout
[  391.040717][ T5832] Bluetooth: hci14: command tx timeout
[  393.120831][ T5832] Bluetooth: hci14: command tx timeout
[  406.877098][   T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  406.886821][   T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  406.897686][   T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  406.906341][   T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  406.914684][   T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  408.960255][   T51] Bluetooth: hci15: command tx timeout
[  411.040252][   T51] Bluetooth: hci15: command tx timeout
[  413.120261][   T51] Bluetooth: hci15: command tx timeout
[  415.200284][   T51] Bluetooth: hci15: command tx timeout
[  416.247438][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  420.705002][   T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  420.722407][   T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  420.730817][   T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  420.738804][   T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  420.746637][   T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  422.800238][   T51] Bluetooth: hci16: command tx timeout
[  424.880275][   T51] Bluetooth: hci16: command tx timeout
[  426.297890][ T8212] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  426.306782][ T8212] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  426.315333][ T8212] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  426.328592][ T8212] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  426.336413][ T8212] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  426.497701][ T8212] Bluetooth: hci3: command 0x0406 tx timeout
[  426.970578][ T5832] Bluetooth: hci16: command tx timeout
[  428.403341][ T5832] Bluetooth: hci17: command tx timeout
[  429.040860][ T5832] Bluetooth: hci16: command tx timeout
[  430.480827][ T5832] Bluetooth: hci17: command tx timeout
[  431.177066][   T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  431.186770][   T51] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  431.195211][   T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  431.203444][   T51] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  431.211777][   T51] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  431.610344][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  432.560663][ T8212] Bluetooth: hci17: command tx timeout
[  433.280359][ T8212] Bluetooth: hci18: command tx timeout
[  434.641255][   T51] Bluetooth: hci17: command tx timeout
[  435.285008][   T31] INFO: task kworker/u8:9:6367 blocked for more than 143 seconds.
[  435.293582][   T31]       Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0
[  435.313277][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  435.326012][   T31] task:kworker/u8:9    state:D stack:23688 pid:6367  tgid:6367  ppid:2      task_flags:0x4208060 flags:0x00004000
[  435.351196][   T30] audit: type=1400 audit(1751614289.487:445): avc:  denied  { write } for  pid=5806 comm="syz-executor" path="pipe:[3713]" dev="pipefs" ino=3713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  435.390430][   T31] Workqueue: events_unbound linkwatch_event
[  435.396403][   T31] Call Trace:
[  435.399687][   T31]  <TASK>
[  435.403388][   T51] Bluetooth: hci18: command tx timeout
[  435.425535][   T31]  __schedule+0x116a/0x5de0
[  435.460326][   T31]  ? ieee80211_sta_create_ibss+0x190/0x470
[  435.466213][   T31]  ? __lock_acquire+0x622/0x1c90
[  435.559749][   T31]  ? __pfx___schedule+0x10/0x10
[  435.591171][   T31]  ? find_held_lock+0x2b/0x80
[  435.595912][   T31]  ? schedule+0x2d7/0x3a0
[  435.620151][   T31]  schedule+0xe7/0x3a0
[  435.624279][   T31]  schedule_preempt_disabled+0x13/0x30
[  435.629755][   T31]  __mutex_lock+0x6c7/0xb90
[  435.651276][   T31]  ? linkwatch_event+0x51/0xc0
[  435.656344][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  435.670078][   T31]  ? __lock_acquire+0xb8a/0x1c90
[  435.675083][   T31]  ? linkwatch_event+0x51/0xc0
[  435.679857][   T31]  linkwatch_event+0x51/0xc0
[  435.695301][   T31]  ? __pfx_linkwatch_event+0x10/0x10
[  435.705699][   T31]  ? rcu_is_watching+0x12/0xc0
[  435.711406][   T31]  process_one_work+0x9cf/0x1b70
[  435.716379][   T31]  ? __pfx_cfg80211_wiphy_work+0x10/0x10
[  435.730155][   T31]  ? __pfx_process_one_work+0x10/0x10
[  435.735577][   T31]  ? assign_work+0x1a0/0x250
[  435.746209][   T31]  worker_thread+0x6c8/0xf10
[  435.756768][   T31]  ? __kthread_parkme+0x19e/0x250
[  435.772794][   T31]  ? __pfx_worker_thread+0x10/0x10
[  435.777945][   T31]  kthread+0x3c2/0x780
[  435.787291][   T31]  ? __pfx_kthread+0x10/0x10
[  435.793272][   T31]  ? rcu_is_watching+0x12/0xc0
[  435.798065][   T31]  ? __pfx_kthread+0x10/0x10
[  435.807771][   T31]  ret_from_fork+0x5d4/0x6f0
[  435.813242][   T31]  ? __pfx_kthread+0x10/0x10
[  435.817848][   T31]  ret_from_fork_asm+0x1a/0x30
[  435.827787][   T31]  </TASK>
[  435.834555][   T31] INFO: task syz-executor:8017 blocked for more than 143 seconds.
[  435.852201][   T31]       Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0
[  435.859852][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  435.897333][   T31] task:syz-executor    state:D stack:23448 pid:8017  tgid:8017  ppid:1      task_flags:0x400140 flags:0x00004004
[  435.913632][   T31] Call Trace:
[  435.917291][   T31]  <TASK>
[  435.928845][   T31]  __schedule+0x116a/0x5de0
[  435.937535][   T31]  ? __lock_acquire+0x622/0x1c90
[  435.948155][   T31]  ? __pfx___schedule+0x10/0x10
[  435.958782][   T31]  ? find_held_lock+0x2b/0x80
[  435.966135][   T31]  ? schedule+0x2d7/0x3a0
[  435.976543][   T31]  schedule+0xe7/0x3a0
[  435.989330][   T31]  schedule_preempt_disabled+0x13/0x30
[  435.998063][   T31]  __mutex_lock+0x6c7/0xb90
[  436.006051][   T31]  ? rtnetlink_rcv_msg+0x371/0xe90
[  436.014427][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  436.019478][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  436.027459][   T31]  ? find_held_lock+0x2b/0x80
[  436.035375][   T31]  ? rtnetlink_rcv_msg+0x359/0xe90
[  436.043200][   T31]  ? rtnetlink_rcv_msg+0x371/0xe90
[  436.048333][   T31]  rtnetlink_rcv_msg+0x371/0xe90
[  436.059528][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  436.075681][   T31]  ? ref_tracker_free+0x37c/0x830
[  436.090280][   T31]  netlink_rcv_skb+0x155/0x420
[  436.095090][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  436.111302][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.116643][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[  436.127958][   T31]  netlink_unicast+0x53d/0x7f0
[  436.133010][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  436.138320][   T31]  netlink_sendmsg+0x8d1/0xdd0
[  436.148970][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.154560][   T31]  __sys_sendto+0x4a3/0x520
[  436.159205][   T31]  ? __pfx___sys_sendto+0x10/0x10
[  436.177370][   T31]  ? fd_install+0x225/0x750
[  436.190287][   T31]  ? __pfx___sys_socket+0x10/0x10
[  436.195351][   T31]  ? xfd_validate_state+0x61/0x180
[  436.209785][   T31]  ? __pfx___x64_sys_clock_nanosleep+0x10/0x10
[  436.226440][   T31]  __x64_sys_sendto+0xe0/0x1c0
[  436.233754][   T31]  ? do_syscall_64+0x91/0x4c0
[  436.238491][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  436.249665][   T31]  do_syscall_64+0xcd/0x4c0
[  436.254440][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.265918][   T31] RIP: 0033:0x7f83bad907bc
[  436.272312][   T31] RSP: 002b:00007fffa9d05d00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  436.290088][   T31] RAX: ffffffffffffffda RBX: 00007f83bbae4620 RCX: 00007f83bad907bc
[  436.298083][   T31] RDX: 0000000000000020 RSI: 00007f83bbae4670 RDI: 0000000000000005
[  436.312712][   T31] RBP: 0000000000000000 R08: 00007fffa9d05d54 R09: 000000000000000c
[  436.327992][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  436.339916][   T31] R13: 00007fffa9d05dbc R14: 00007f83bbae4670 R15: 0000000000000000
[  436.353315][   T31]  </TASK>
[  436.356428][   T31] INFO: task kworker/1:7:8073 blocked for more than 144 seconds.
[  436.366884][   T31]       Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0
[  436.377781][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.396459][   T31] task:kworker/1:7     state:D stack:26424 pid:8073  tgid:8073  ppid:2      task_flags:0x4208060 flags:0x00004000
[  436.416200][   T31] Workqueue: events switchdev_deferred_process_work
[  436.424957][   T31] Call Trace:
[  436.428249][   T31]  <TASK>
[  436.438481][   T31]  __schedule+0x116a/0x5de0
[  436.446978][   T31]  ? find_held_lock+0x2b/0x80
[  436.456359][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  436.466103][   T31]  ? __pfx___schedule+0x10/0x10
[  436.474798][   T31]  ? find_held_lock+0x2b/0x80
[  436.479502][   T31]  ? schedule+0x2d7/0x3a0
[  436.488977][   T31]  schedule+0xe7/0x3a0
[  436.497692][   T31]  schedule_preempt_disabled+0x13/0x30
[  436.505256][   T31]  __mutex_lock+0x6c7/0xb90
[  436.509821][   T31]  ? switchdev_deferred_process_work+0xe/0x20
[  436.521364][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  436.526423][   T31]  ? debug_object_deactivate+0x1ec/0x3a0
[  436.537544][   T31]  ? switchdev_deferred_process_work+0xe/0x20
[  436.549539][   T31]  switchdev_deferred_process_work+0xe/0x20
[  436.562107][   T31]  process_one_work+0x9cf/0x1b70
[  436.567084][   T31]  ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10
[  436.583705][   T31]  ? __pfx_process_one_work+0x10/0x10
[  436.594989][   T31]  ? assign_work+0x1a0/0x250
[  436.599630][   T31]  worker_thread+0x6c8/0xf10
[  436.608418][   T31]  ? __kthread_parkme+0x19e/0x250
[  436.616145][   T31]  ? __pfx_worker_thread+0x10/0x10
[  436.625339][   T31]  kthread+0x3c2/0x780
[  436.629429][   T31]  ? __pfx_kthread+0x10/0x10
[  436.638088][   T31]  ? rcu_is_watching+0x12/0xc0
[  436.646130][   T31]  ? __pfx_kthread+0x10/0x10
[  436.656828][   T31]  ret_from_fork+0x5d4/0x6f0
[  436.666453][   T31]  ? __pfx_kthread+0x10/0x10
[  436.673741][   T31]  ret_from_fork_asm+0x1a/0x30
[  436.678541][   T31]  </TASK>
[  436.689587][   T31] 
[  436.689587][   T31] Showing all locks held in the system:
[  436.701703][   T31] 2 locks held by kworker/0:0/9:
[  436.706652][   T31] 4 locks held by kworker/0:1/10:
[  436.716647][   T31] 1 lock held by khungtaskd/31:
[  436.723668][   T51] Bluetooth: hci8: command 0x0406 tx timeout
[  436.743046][   T31]  #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  436.763361][   T31] 4 locks held by kworker/u8:2/36:
[  436.768493][   T31]  #0: ffff88802ee15948 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  436.786639][   T31]  #1: ffffc90000ac7d10 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  436.806507][   T31]  #2: ffff888026341308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650
[  436.826006][   T31]  #3: ffff8880254daad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650
[  436.839530][   T31] 3 locks held by kworker/1:1/49:
[  436.851290][   T31]  #0: ffff88801b879d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  436.869785][   T31]  #1: ffffc90000b97d10 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  436.889698][   T31]  #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170
[  436.904423][   T31] 5 locks held by kworker/0:3/1220:
[  436.909688][   T31] 4 locks held by kworker/u8:7/3554:
[  436.921778][   T31]  #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  436.936914][   T31]  #1: ffffc9000ce6fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  436.949931][   T31]  #2: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890
[  436.965167][   T31]  #3: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230
[  436.979095][   T31] 4 locks held by kworker/u8:8/4858:
[  436.988174][   T31]  #0: ffff888033d98148 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.014568][   T31]  #1: ffffc9000e33fd10 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.030658][   T31]  #2: ffff888026345308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x650
[  437.049957][   T31]  #3: ffff8880254de648 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x650
[  437.068336][   T31] 2 locks held by getty/5580:
[  437.074893][   T31]  #0: ffff888031d140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  437.093792][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  437.108463][   T31] 3 locks held by kworker/0:6/5884:
[  437.126921][   T31] 4 locks held by kworker/1:6/5939:
[  437.135736][   T31]  #0: ffff88803512f548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.150222][   T31]  #1: ffffc90002fb7d10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.201158][   T31]  #2: ffff88806bec1308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880
[  437.234500][   T31]  #3: ffff8880254d8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880
[  437.253390][   T31] 3 locks held by kworker/u8:9/6367:
[  437.258702][   T31]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.276208][   T31]  #1: ffffc9000593fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.290075][   T31]  #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  437.299175][   T31] 4 locks held by kworker/u8:10/7148:
[  437.317926][   T31]  #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  437.328201][   T31]  #1: ffff8880b8524088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  437.345459][   T31]  #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0
[  437.360404][   T31]  #3: ffffffff9b01afd8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0
[  437.377420][   T31] 3 locks held by kworker/u8:11/7149:
[  437.383098][   T31]  #0: ffff88814c88b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.399784][   T31]  #1: ffffc90003197d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.420089][   T31]  #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0
[  437.429635][   T31] 1 lock held by syz-executor/8017:
[  437.440274][   T51] Bluetooth: hci18: command tx timeout
[  437.447719][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90
[  437.461774][   T31] 3 locks held by kworker/1:7/8073:
[  437.466984][   T31]  #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.492588][   T31]  #1: ffffc90004437d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.509308][   T31]  #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  437.530026][   T31] 2 locks held by syz.5.501/8118:
[  437.535113][   T31]  #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0
[  437.551103][   T31]  #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150
[  437.565231][   T31] 2 locks held by syz.6.503/8132:
[  437.571732][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x277/0xa80
[  437.586436][   T31]  #1: ffffffff8e5cfe00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[  437.607288][   T31] 2 locks held by kworker/0:9/8137:
[  437.619455][   T31] 1 lock held by syz-executor/8139:
[  437.633427][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.647971][   T31] 2 locks held by syz.7.505/8149:
[  437.654813][   T31]  #0: ffff8880587fc6d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[  437.670478][   T31]  #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0
[  437.679420][   T31] 3 locks held by kworker/0:10/8154:
[  437.689925][   T31] 1 lock held by syz-executor/8158:
[  437.697842][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.720875][   T31] 1 lock held by syz-executor/8163:
[  437.726116][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.742384][   T31] 1 lock held by syz-executor/8168:
[  437.747612][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.764589][   T31] 1 lock held by syz-executor/8173:
[  437.769816][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.786646][   T31] 1 lock held by syz-executor/8179:
[  437.796408][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.808276][   T31] 1 lock held by syz-executor/8184:
[  437.824758][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.839071][   T31] 1 lock held by syz-executor/8193:
[  437.848352][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.865874][   T31] 1 lock held by syz-executor/8198:
[  437.875359][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.888640][   T31] 2 locks held by kworker/0:11/8202:
[  437.896846][   T31] 1 lock held by syz-executor/8205:
[  437.905838][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  437.923909][   T31] 7 locks held by kworker/u9:4/8212:
[  437.929225][   T31]  #0: ffff88802a298148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  437.949695][   T31]  #1: ffffc90004ee7d10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  437.967518][   T31]  #2: ffff88807af74dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430
[  437.979881][   T31]  #3: ffff88807af740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb10
[  437.996968][   T31]  #4: ffffffff905be5e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x330
[  438.009759][   T31]  #5: ffff888037225338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730
[  438.027689][   T31]  #6: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  438.038961][   T31] 1 lock held by syz-executor/8215:
[  438.049758][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  438.063984][   T31] 1 lock held by syz-executor/8222:
[  438.069203][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  438.086657][   T31] 1 lock held by syz-executor/8235:
[  438.094960][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  438.111114][   T31] 1 lock held by syz-executor/8244:
[  438.116335][   T31]  #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540
[  438.136503][   T31] 
[  438.138854][   T31] =============================================
[  438.138854][   T31] 
[  438.149856][   T31] NMI backtrace for cpu 1
[  438.149870][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  438.149895][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  438.149906][   T31] Call Trace:
[  438.149919][   T31]  <TASK>
[  438.149926][   T31]  dump_stack_lvl+0x116/0x1f0
[  438.149957][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  438.149977][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  438.150003][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  438.150029][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  438.150054][   T31]  watchdog+0xf70/0x12c0
[  438.150077][   T31]  ? __pfx_watchdog+0x10/0x10
[  438.150096][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  438.150123][   T31]  ? __kthread_parkme+0x19e/0x250
[  438.150149][   T31]  ? __pfx_watchdog+0x10/0x10
[  438.150168][   T31]  kthread+0x3c2/0x780
[  438.150186][   T31]  ? __pfx_kthread+0x10/0x10
[  438.150205][   T31]  ? rcu_is_watching+0x12/0xc0
[  438.150227][   T31]  ? __pfx_kthread+0x10/0x10
[  438.150246][   T31]  ret_from_fork+0x5d4/0x6f0
[  438.150270][   T31]  ? __pfx_kthread+0x10/0x10
[  438.150288][   T31]  ret_from_fork_asm+0x1a/0x30
[  438.150321][   T31]  </TASK>
[  438.271116][   T31] Sending NMI from CPU 1 to CPUs 0:
[  438.276357][    C0] NMI backtrace for cpu 0
[  438.276371][    C0] CPU: 0 UID: 0 PID: 1220 Comm: kworker/0:3 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  438.276397][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  438.276411][    C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
[  438.276439][    C0] RIP: 0010:__read_once_word_nocheck+0x0/0x10
[  438.276473][    C0] Code: 92 42 8e e8 52 e2 a3 03 e9 c8 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <48> 8b 07 e9 18 16 19 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90
[  438.276493][    C0] RSP: 0018:ffffc90000006ee0 EFLAGS: 00000202
[  438.276508][    C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffc90000008000
[  438.276521][    C0] RDX: ffffc90000007a01 RSI: ffffc900000079f8 RDI: ffffc900000079f8
[  438.276535][    C0] RBP: ffffc900000079f8 R08: 0000000000000001 R09: 0000000000000000
[  438.276548][    C0] R10: 0000000000000000 R11: 000000000008b5ce R12: ffffc90000006fa8
[  438.276560][    C0] R13: ffffc90000006f58 R14: ffffc90000007a20 R15: ffffc90000006f8c
[  438.276574][    C0] FS:  0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000
[  438.276599][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.276612][    C0] CR2: 00005622dc5bfbe0 CR3: 000000000e382000 CR4: 00000000003526f0
[  438.276625][    C0] Call Trace:
[  438.276631][    C0]  <IRQ>
[  438.276638][    C0]  unwind_next_frame+0x15d5/0x20a0
[  438.276671][    C0]  ? nft_do_chain_inet+0x18a/0x340
[  438.276694][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  438.276723][    C0]  arch_stack_walk+0x94/0x100
[  438.276744][    C0]  ? nf_hook_slow+0xbb/0x200
[  438.276794][    C0]  stack_trace_save+0x8e/0xc0
[  438.276819][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  438.276849][    C0]  kasan_save_stack+0x33/0x60
[  438.276874][    C0]  ? kasan_save_stack+0x33/0x60
[  438.276898][    C0]  ? kasan_save_track+0x14/0x30
[  438.276922][    C0]  ? __kasan_slab_alloc+0x89/0x90
[  438.276947][    C0]  ? kmem_cache_alloc_noprof+0x1cb/0x3b0
[  438.276973][    C0]  ? kmem_alloc_batch+0x49/0x170
[  438.277002][    C0]  ? debug_objects_fill_pool+0x228/0x500
[  438.277033][    C0]  ? debug_object_activate+0x10b/0x4c0
[  438.277064][    C0]  ? __call_rcu_common.constprop.0+0x35/0xa10
[  438.277085][    C0]  ? dst_release+0x266/0x340
[  438.277108][    C0]  ? skb_release_head_state+0x234/0x290
[  438.277136][    C0]  ? consume_skb+0x85/0x100
[  438.277169][    C0]  ? nft_synproxy_do_eval+0xa6b/0xd80
[  438.277193][    C0]  ? nft_do_chain+0x2e6/0x1920
[  438.277213][    C0]  ? nft_do_chain_inet+0x18a/0x340
[  438.277250][    C0]  kasan_save_track+0x14/0x30
[  438.277274][    C0]  __kasan_slab_alloc+0x89/0x90
[  438.277301][    C0]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  438.277327][    C0]  ? lock_acquire+0x179/0x350
[  438.277356][    C0]  ? kmem_alloc_batch+0x49/0x170
[  438.277387][    C0]  kmem_alloc_batch+0x49/0x170
[  438.277418][    C0]  debug_objects_fill_pool+0x228/0x500
[  438.277450][    C0]  ? __pfx_debug_objects_fill_pool+0x10/0x10
[  438.277482][    C0]  ? __ip_finish_output+0x116/0x950
[  438.277504][    C0]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  438.277530][    C0]  debug_object_activate+0x10b/0x4c0
[  438.277563][    C0]  ? __pfx_debug_object_activate+0x10/0x10
[  438.277598][    C0]  ? synproxy_send_tcp.isra.0+0x439/0x630
[  438.277619][    C0]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  438.277645][    C0]  __call_rcu_common.constprop.0+0x35/0xa10
[  438.277665][    C0]  ? percpu_counter_add_batch+0xb8/0x1f0
[  438.277692][    C0]  dst_release+0x266/0x340
[  438.277716][    C0]  skb_release_head_state+0x234/0x290
[  438.277744][    C0]  consume_skb+0x85/0x100
[  438.277774][    C0]  nft_synproxy_do_eval+0xa6b/0xd80
[  438.277799][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  438.277822][    C0]  ? blake2s_compress+0x7f/0xe0
[  438.277840][    C0]  ? blake2s_update+0xef/0x360
[  438.277865][    C0]  ? hmac.constprop.0+0x32a/0x420
[  438.277891][    C0]  ? wg_noise_handshake_consume_response+0x4b3/0x950
[  438.277921][    C0]  ? process_one_work+0x9cf/0x1b70
[  438.277941][    C0]  ? worker_thread+0x6c8/0xf10
[  438.277964][    C0]  ? __pfx_nft_synproxy_eval+0x10/0x10
[  438.277988][    C0]  nft_do_chain+0x2e6/0x1920
[  438.278013][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  438.278034][    C0]  ? mark_held_locks+0x49/0x80
[  438.278063][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  438.278095][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  438.278121][    C0]  ? ipt_do_table+0xd48/0x1ae0
[  438.278158][    C0]  nft_do_chain_inet+0x18a/0x340
[  438.278179][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  438.278202][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  438.278227][    C0]  ? __pfx_iptable_mangle_hook+0x10/0x10
[  438.278253][    C0]  ? nf_nat_ipv4_local_in+0x181/0x720
[  438.278282][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  438.278302][    C0]  nf_hook_slow+0xbb/0x200
[  438.278331][    C0]  nf_hook.constprop.0+0x422/0x750
[  438.278360][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  438.278391][    C0]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  438.278421][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  438.278452][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  438.278486][    C0]  ip_local_deliver+0x169/0x1f0
[  438.278515][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  438.278545][    C0]  ip_rcv+0x2c3/0x5d0
[  438.278574][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  438.278602][    C0]  __netif_receive_skb_one_core+0x197/0x1e0
[  438.278629][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  438.278656][    C0]  ? lock_acquire+0x179/0x350
[  438.278693][    C0]  ? process_backlog+0x3f0/0x15e0
[  438.278717][    C0]  __netif_receive_skb+0x1d/0x160
[  438.278742][    C0]  process_backlog+0x442/0x15e0
[  438.278771][    C0]  __napi_poll.constprop.0+0xba/0x550
[  438.278799][    C0]  net_rx_action+0xa9f/0xfe0
[  438.278829][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  438.278855][    C0]  ? mark_held_locks+0x49/0x80
[  438.278884][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  438.278911][    C0]  ? tmigr_handle_remote+0x132/0x380
[  438.278939][    C0]  ? run_timer_base+0x121/0x190
[  438.278967][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  438.278999][    C0]  handle_softirqs+0x219/0x8e0
[  438.279025][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  438.279050][    C0]  ? kernel_fpu_end+0x59/0x70
[  438.279069][    C0]  do_softirq+0xb2/0xf0
[  438.279090][    C0]  </IRQ>
[  438.279096][    C0]  <TASK>
[  438.279103][    C0]  __local_bh_enable_ip+0x100/0x120
[  438.279126][    C0]  kernel_fpu_end+0x5e/0x70
[  438.279143][    C0]  blake2s_compress+0x7f/0xe0
[  438.279167][    C0]  blake2s_update+0xef/0x360
[  438.279194][    C0]  hmac.constprop.0+0x32a/0x420
[  438.279221][    C0]  ? __pfx_hmac.constprop.0+0x10/0x10
[  438.279256][    C0]  ? kdf.constprop.0+0x223/0x280
[  438.279283][    C0]  ? __pfx_curve25519_arch+0x10/0x10
[  438.279309][    C0]  kdf.constprop.0+0x1f2/0x280
[  438.279336][    C0]  ? __pfx_kdf.constprop.0+0x10/0x10
[  438.279361][    C0]  ? __crypto_memneq+0x203/0x430
[  438.279386][    C0]  ? mix_dh+0xf7/0x150
[  438.279409][    C0]  ? mix_dh+0x103/0x150
[  438.279439][    C0]  wg_noise_handshake_consume_response+0x4b3/0x950
[  438.279474][    C0]  ? __pfx_wg_noise_handshake_consume_response+0x10/0x10
[  438.279510][    C0]  ? __local_bh_enable_ip+0xa4/0x120
[  438.279533][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  438.279559][    C0]  ? kernel_fpu_end+0x59/0x70
[  438.279580][    C0]  ? __local_bh_enable_ip+0xa4/0x120
[  438.279603][    C0]  ? kernel_fpu_end+0x5e/0x70
[  438.279622][    C0]  ? blake2s_final+0x110/0x150
[  438.279649][    C0]  ? __pfx_blake2s.constprop.0+0x10/0x10
[  438.279676][    C0]  ? find_held_lock+0x2b/0x80
[  438.279704][    C0]  ? __crypto_memneq+0x203/0x430
[  438.279729][    C0]  ? wg_cookie_validate_packet+0x16f/0x360
[  438.279759][    C0]  ? __pfx_wg_cookie_validate_packet+0x10/0x10
[  438.279793][    C0]  wg_receive_handshake_packet+0x713/0xbf0
[  438.279816][    C0]  ? __pfx_wg_receive_handshake_packet+0x10/0x10
[  438.279843][    C0]  ? __local_bh_enable_ip+0xa4/0x120
[  438.279868][    C0]  wg_packet_handshake_receive_worker+0x17f/0x3a0
[  438.279896][    C0]  process_one_work+0x9cf/0x1b70
[  438.279920][    C0]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  438.279943][    C0]  ? __pfx_process_one_work+0x10/0x10
[  438.279967][    C0]  ? assign_work+0x1a0/0x250
[  438.279999][    C0]  worker_thread+0x6c8/0xf10
[  438.280023][    C0]  ? __kthread_parkme+0x19e/0x250
[  438.280051][    C0]  ? __pfx_worker_thread+0x10/0x10
[  438.280068][    C0]  kthread+0x3c2/0x780
[  438.280084][    C0]  ? __pfx_kthread+0x10/0x10
[  438.280101][    C0]  ? rcu_is_watching+0x12/0xc0
[  438.280123][    C0]  ? __pfx_kthread+0x10/0x10
[  438.280140][    C0]  ret_from_fork+0x5d4/0x6f0
[  438.280173][    C0]  ? __pfx_kthread+0x10/0x10
[  438.280191][    C0]  ret_from_fork_asm+0x1a/0x30
[  438.280216][    C0]  </TASK>
[  439.212530][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  439.219415][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[  439.231227][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  439.241286][   T31] Call Trace:
[  439.244565][   T31]  <TASK>
[  439.247494][   T31]  dump_stack_lvl+0x3d/0x1f0
[  439.252100][   T31]  panic+0x71c/0x800
[  439.256011][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[  439.261915][   T31]  ? __pfx_panic+0x10/0x10
[  439.266341][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  439.271727][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  439.277716][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  439.283100][   T31]  ? watchdog+0xdda/0x12c0
[  439.287523][   T31]  ? watchdog+0xdcd/0x12c0
[  439.291947][   T31]  watchdog+0xdeb/0x12c0
[  439.296199][   T31]  ? __pfx_watchdog+0x10/0x10
[  439.300879][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  439.306092][   T31]  ? __kthread_parkme+0x19e/0x250
[  439.311131][   T31]  ? __pfx_watchdog+0x10/0x10
[  439.315817][   T31]  kthread+0x3c2/0x780
[  439.319887][   T31]  ? __pfx_kthread+0x10/0x10
[  439.324477][   T31]  ? rcu_is_watching+0x12/0xc0
[  439.329246][   T31]  ? __pfx_kthread+0x10/0x10
[  439.333837][   T31]  ret_from_fork+0x5d4/0x6f0
[  439.338435][   T31]  ? __pfx_kthread+0x10/0x10
[  439.343027][   T31]  ret_from_fork_asm+0x1a/0x30
[  439.347805][   T31]  </TASK>
[  439.351043][   T31] Kernel Offset: disabled
[  439.355354][   T31] Rebooting in 86400 seconds..