last executing test programs:

9.544166665s ago: executing program 0 (id=222):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x101e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a82800810006000011feab814612c088f53e04ffb1601bffdde8957ff242b9f5b905d1fd368c334db5a61a20a7495e925e73606b979e36b2e089f0b87cc6d6f5254d3836dae0e539296f310a154147df957e678ddecd548eb4c0dcc288128f77e1f78bc2045af7a27de32dbbcc3f05601eb0154027ccbf7e8497430d554620c007291b7aadd57d49535aa48870a61bb1cd2f630b451f4bb60f9404fd77df7a1985e8403b5aa77178c852d5a165ee3e1d2ff4988ef56343226e18d87b00e504d0c708b66cd0c4f88970ff6abaa42cea589d177ecdb787ee5ef41b36d0bfd5a1f090a238e424f7a6c1aa06f095ae47d6b50f5a360c358aeb6f475a5442a13308c82a393a26261e92ca225d81e48ef8f6108cba1181f3cc831d649e0dc96e0d88fdeb26c4415d7cbc2475bc04e0f0f478c6d91873dc4e9aa615febaf15ef48c93cb147d917ce54b47cf8ac37af178256afa2b923eb991b40214e0aa25e3159052730a4d0285447f289852e1c14f90f6fbdf7c4432d1f0ef1b3ea804f5b255c2c3ed7e3fc43e5a7d0f351754f318dc909fa53b222a515bbc2c1beda9f2405c9123ad62ea8e87f2268dd13e1197d10ed976cd9409f5c48acb7e79e1d35baf30c5b2c0388e139f847fb17565791a7db5d39fe1674446d703e6e76ca6700505ce5cd9a8575995feb357d126df158dea29542e3fcd81f23b2c22838307502e38d63e6916b16a60e7d4581d79ec5e12b339ecf82f571e9c92701869a08de38cecc5290c020a5b9d5f0d54ed2c0780c3fc6f087b4aa600c5e4f26dd22e4b6633bf6626245bb333fceaa76e7cc25f34309114ae38b77eb64eb52ad869b8c7015811adcd4c8ec43bb1bf7978d14926a10cd48f280c04b10f4cb3e5607e0580e760b39149ecb5e54e42685d233dd1e5c2259dfbb3552260deab5bdc902fefbf070d70dfb285c5f27459043240f6558b1fb30882a370b82cca786c5447b541921bd420e39e5158c520ccf91f816efb5c0f8e27ef3625d1704ece3a6c44fd360ca8876fc3d694a70a82bff3ac81303ac64bf975acea0da7d7ba64db1efe0ee1bbe31305caa46db4270dbc4de29d9b4bd5ddf19427145c980a49f8554a187b8b91c5da12993dbcbf380e8b6d5669a1d99ff79e3118b081a919892855e7fbb3e1473d5182d211f90ceddfe5eadc992f7d353bfbe2063cdb34b6e93f317493dec31cb476d2c41c7762f0b9dd74d3bca28b1648e5e609a4ddd949d6bca58cfc9636e7336a7be21726f82a7650a930a184f4c285c851a80a10c5cd582a910304383b8cd62119298f7f6a9ff15a91a62460588e2784859549adb158312eeab93554d7ffb002c999d4177b052f4fbceb7cdf0722536a6416df7ece9cf7f1bce93ac016ff52c1e3eab223a311348c29b77b7a148affc16300637cd0ca34d41bb0d99d1ee4b98c5506cf97709166415701abd04df252b521df407102bd1dd2471860167c1e318c2159d9d494261ee97dd4fb8de005ac4390e6391e23047fe68f533dd5484aa5fd6c8df258d803af87dbadb82292f7d5277bd70150c68de01b110c5f1d36cd6374d12170538c9e16d0148a910cca212e67b0bebd4ccf818d4b4d8c3d5d2f6fa234aa0f16a6e734e735c9f979299db7aa30da835e62ccf9f05b431702d0cf5af5442e77cc66c3f8ca42d1ff7fc79870bd6835c86246fd21eea785690fdd2759e6383152e1d871ec09f0a7628b7f7b780c8591f1a5d8c98b52e3341c6a8260ee8306fcae0394631cde5f4fe0260ca5d925f0bd9740d48381bd9069bae76a391c976fa01685286f442339075ba72e293d97c20ef87788c43a09d2969fb6ed6268c77299c0309836228916f1c8875c738bac597c577eab45e2f55955c2d2319a898d1b06667ae028a6c472931083789c94431ba9569b993092688aa5dabb99de760adaf21f45b578d44a2dfeafa8abf214bef79ce57d095ed6976c1b2d061d9e90fc4100ed7a7c85dd0cfaa1b72e16fd270dd34d5a90bfc0705d3d1dc5ad5a71db082d03eb7c6a50acdeda37dc4680050b55d74b6b52011cac38fbb764dd42e44de68f2c523fc537b7fe637b420c9bf3703fcc42d52fbb2247a8ae7ca4f9c167aee28768a9179d033fdbfb13d6a05f44e5b7d4ae06bec862bb466f63531961997cfa3e1a4d16ab7475dc4e368d1a3ff960a01d04eac33681a0730df23db07e2eda40605be210f38df48ac5be137ebd10b5d32b89783efe352d1446002c889d5bc64d90432e7b22bc7a6f1e11d03ce6bc994af01b6ae34aaa5d7bdf236caea25c5620982278ee0b2b97d4c08b51aa088c312b2cb93291477295a791465fc624ca23a1e05175ba122f7cbf154016bae7234ad38c27390c9e8104c39b4edf8d7761a2247a6140b369c36ff838ead5e83f5146038405043c42f730c7f0e797f97d4d688027f8bbbedfa0327d4d864971a86412b5974ee99e0e47c4024cefb89f3c0b95a5eadc587c17f0097d72a8f6cd967911dfbd0bc60ce496f39b1e1316a670b93a29e54b7b6d81c12cfe186fe21bb2d256e42f067c9314cc631d61b8466a4299df99d26fe6c335238a911b707ebc2cf63b60d25201bbd97ee0d7bfe12995dfac93bccfd98c0da11b138d632726392e7681b70b278403fea3790ad8d8f83b76035409eb06a193528fce96833bca9bd7dff4192e919901b34634696a5f423f0d7153a4c4ece9cbc76afcac9859cdbb3ab0777c1d38d021fff525d515d712485470b066daf2a21a3544457657acd158290ba4beced0fcd9e4fc2bfa9e13a56fc6b55b20f5a34ab9b416425dc5a08f43ec910b601c0c76c41cb5379e987a8d670f396154b684c86623ec53bfa4041ecf9c631869f3456d183c874d469a3855503e71823fe2a887305c9175ced3fb5996ac7b0f1175519e7d892ef928b57d4c25ff00b8e611814642cbcbcbc698a4c5e25db3d9acdba89fa2e57dcb390ebf694023dbd9c2c87b6a9fbf1959dceb958288dac463686bd697556f5d6283f1b74088d2aa70bfd1583e2f78747fc84166f33834d7a3710ed5cad814f303dc89c0ec48cab21f557411a18d8fa7d0fa287ede004fc2447f2d3c2be800f57f43acc5e26a1701fe07c04cb3f2dd7a6443e7e614f905eebba08144d5ecc592c0249ac35b73b5802c3de046bf07057bd0eb86efbeaefcf7e188d92734922c4abdd3a32467b40d0f32ecb192c788f499754ddfaf35748a5a0ced7bf09166e827b0ef0d849196303f8892ca33f9d6dbac808630702095a184740644e6e4ca288c5866b66bf5d7e315fc360a300f7d1dbcac47aefeeff58911b55034fb20548990cd17b6514301edf358c3883324b692eefa3ee1048c00b935ba96cd8e884f36b3b478ef013cf24214ee49b4e74319169b5b7bf3d3d2f35a298fa0c64dec52fcdb91e18188d135d1147076e0f599fffb9e841e4c077d183f0512f1a875cc7b0b6f7e90dc5113bdace37e1358ba4acc031483e36ad3ff10e198b8092f4450b29557843d1cdf228bfc59f8a6a723d8287c93284360645f3353aa995ace7a48724e39e53b4bc82ecb1f509ba575c2f3fcfd28f7562d71dfa165858c502481b3c77d196f8b25f2f889e53ac0e7e01d0ac6ab2d9e079cdfdcbba2d5fd5663c60dddd207a61e99d6dfe64bfda469aa8fa099e16bea1e0645aee169ef75194380f52c33555b45c13c66ff2eea666cd4fc624441dd4f721bd520df65065d4c08f54b613ee03595763754cb72deb29d3f55bfe4e0ab8188734998e86e5226639a5264cc4810c311f940f8d2f3130fa1220c90b71ec7a22985476b2fe8aac04b1e80977e7cc7d893ddb648a1f319c7db6d12158c94654b6a255ed9ee81104be9eaf010b92a6698749aab5bd2bb525789626d74c8261520c6a40f185762a0ca077c71fcec1b7f6fb2044cac29e573ff0e6b7007d7191f340eb929c87e8d63cfc9e2a0abf3f27c6ca31c10dbf6a3638c4c9cd7749141e25d56713aebfd78a0db422cb50ad0586b5238cbf753923bce12dd9d23ce1259a3f32d0d5785dcde2d867e91df21cce39f3e8e436dfabcf19bdb27ab0b08e9c6a9a23af5f6b0f0593bd8e15c65634a6cf1cd5df6ad6b511fee99277f01cc270dbe66660697cdf64fe743b983241fe870391137f368217cfd6a883094aad08189f5577210e83582e4a963439c43611947ecde587ac8495922416e487e42362a6d7706ba976ab701d7aeb0956af5624b3f49dd3b6b62511c02705affd02d0a275586e18b476d9eb6fb4bf21dd74ec070a4b7f6a24f7545ea6bd316abfc1571f88ba09dbcba8164ec2ef864a78438eb124698af105fcde675610c7728842c6daf08755fd6761c21bc8f5b6dbc91ec8909e9c61f7a3693c6e8567147836504de876381aeb29c2a2aa73dd529e157e5951d4c3fdf3ef53c22a42c79d2fb4184dc1ef5daf66cff220f60417dec00a95fd286033534c82ced80962b1922b8ff672b0f780af8693dd3680d261c44fdee8ddf9e2eb4dc003ce67e19f4f451ed4923bd01535a57187da14a8a6c7384ccb189d703d6e43a19ae76e7646d4a153840fe87a2f6975efa2d9ba8ae5f7f8d763ecaa3750ba20c7df1ec36293e4c4befeb29da42f6c0d15184044bbf6e28d4f55134fa53371897dacc403f92c90aed152a6705df3747e17ce9baa42d952c1e342c9493edbf63337b7302235705f6d4d2ba99c480789202d56f39bb6885acf6611994e59715a0e9fa81d2eedd0ee6e5cf2a05b5af1e098dc4894eeb29882178c3f561f0fa06d333b3ff4953101a3ce395525fbcaf3c804d9867bebab008fc42b49bec78ce9b617e137cdb19b2c3ceca89d71df11368618ca60218eaf937075b4f6e0a37847acb43c4619065a3db39fae220bd9f394221e1ea57c2c25c467a72e2cd6af0a1a091e99a85785e3b26489b30d7b9739dad791f2f0f5f66419f452b729ea449f393c3f455a799ecc89cf9a70d780af1b13471091314bfe285118106ce130a114a7c08f8c5b9a580482af758689f22b684488f8ba7c201c2233b2d4e89588b814ccc169f5c453213c76f03759d7762bf0164c61dcbe62a04fb06b68b3ec81ce404c955cd6e37c055bed8e0abc78f23bb3a1df62c31681f88ea280104bd1deb75596715abdc39ce3856fc9fcd74d8665a7b9ba48fed34633682087fe467ce3e720348ec91ac664d331bbd7f24c6e1089b8043fa37f52f9d97a80e318a5b756127dbda88dbc23ac800416a7e8ac1534c919b05297de0ee8b37a278051b52c7b5daec78215fd7277a66eed51875b367a989e57c96fee8bd95d89fb91248458faa4076d3e2414c1d90f5925bc2fd2bd9cab3c1fe8c2d31280fa613e4e1f6969a57a91f66117146f992d8d77a626e4ff2d10b65a5d4207667032fecbcaec40af177258d6883a8391eaa66306d50658e88e02d78e42b11cdf7eee17346fc7ab3681bd8caa471430fb71c54424751a57668a25fdbc59ba752728280c3e6acd5fdfc8977f353b4d1f871a8b152f516172f2423caada148919596defccd821bd4f9096b5319dece2002f058bb3c78dc519f0093beea954bc200e622b5b9c8b3e13d5bc7a0b1212df4b9c71e7aa68ff401b4612b1045e5674c651025f18962e2417f234447986e39dc7d2a429c51df5c9a6db18465176dc5bac795e22b6feb18cd119fdf772447faa97ac3d7479c6d839b1f6381bda8d85f88446407892c99b6116c35114e2e8c42508ec28eb3824ddec317533a90eb4148fcc908bbee1e51ec453bbae272acf68f6fa6eec53f553458de9bc36515d30788b3b89985eb057599c30432d2d4c13bd880"], 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000f00000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020029bd7000fe7a2ab7dbdf250200000006000600030000000c000300020000000000000005e90c0028000000080004000000000008", @ANYRES32=r1, @ANYBLOB="08000800040000000800080003000000080005007f0000010800020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x5, 0x4, 0x10005, 0x0, 0x0, 0xa6}}, 0x50)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
syz_open_dev$video4linux(&(0x7f0000000180), 0xae, 0x7a1220)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/custom0\x00', 0x4, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

9.51531449s ago: executing program 2 (id=223):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x10, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12)
close(r3)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

8.874016335s ago: executing program 4 (id=225):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000940)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0x7, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x4, 0x1, 0x65, 0x0, 0x3, 0x5, "9d874313"}, 0x9, 0x3, {0x0}, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})
syz_emit_ethernet(0x884, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00DI', 0x84e, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], "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"}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0)
syz_clone3(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r1)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})

8.572661361s ago: executing program 2 (id=226):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x800)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

7.939165194s ago: executing program 1 (id=227):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c00000002001190"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f000001aa40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000001e0a0103000000000000000007000000090002008a797a31000000000900010073797a30"], 0xf0}}, 0x0) (async)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
r4 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_usb_connect(0x2, 0x24, 0x0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
unshare(0x8000000)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async)
io_uring_enter(r4, 0x47bc, 0x0, 0x67, 0x0, 0x0) (async)
r7 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000180)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00', 0x2}, 0x3, 0x40, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})

7.890774506s ago: executing program 0 (id=228):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r7, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffb, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

7.384227078s ago: executing program 1 (id=229):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
io_setup(0x7a, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000)

7.357282403s ago: executing program 4 (id=230):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(0xffffffffffffffff, 0x0, 0x60)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)

7.1998229s ago: executing program 3 (id=231):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x10, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x12)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

7.023543047s ago: executing program 1 (id=232):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x10, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12)
close(r3)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

7.020647363s ago: executing program 2 (id=233):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b700de006a05000000a108000000000000000000004305000000000000008f1b8850821b01fe00000000ffff0d9eab7cc60e0000000004bfffe600020000000000003a46a55d6f680000000000000400000000000000ca11ec7e4be104ae4344c311827e067fbb17731c2a573cbcb936619e8b9cb07bd36ff10d7502b802022ca2d005538dc3b55d60b8728951d167c2ed594efca8fe1f20093ebda044b01aff3c6cec452e543e4f08c69ad4acfd48721bea7a62d69de4070d0c3b417fe57a0915061f2621eb772faad33d5927071d70d807d6a7bdab9f6d2d704811a1f882f2914803732bcae239e309164bf2fd77adcac265"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0x0, 0x3b1}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5a, 0x0, 0x80000000, 0x2, &(0x7f0000000300)="a670f1e34a2d87a184d17e3e292fdf97d76e8dc2120bf7b87958eef0bdbe8fae91058922153e5f6169ea95ebcf26b5d6505750d6b1aa6f4147661732aef3b19fd3db3b11ad9650aeb1638f5125eda403faf20e7ffe42c9499863fbb262d5419a9cafd789df8501f583f6bcc01b68170b1e66f73dc8d884d5541d09120aa878d3077c535b4a03292d644ce9a629543a43f7a7d93739c3aa35ef38297800cc2a4ec20b", 0x6801, 0x0, 0x1, {0x3}})
io_uring_enter(r1, 0xdb4, 0x0, 0x86, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0)
ioctl$TIOCMIWAIT(r4, 0x545c, 0x300fff2)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x6c15, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0)

6.129565361s ago: executing program 3 (id=234):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
timerfd_create(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300))
r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=<r1=>0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

6.083914861s ago: executing program 1 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$cec(0x0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, r5}, 0x38)
r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc000000000000"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x400c014)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2)

5.912194336s ago: executing program 3 (id=236):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
syz_open_dev$dri(0x0, 0x81, 0x20000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x200, 0x0, 0x0, 0xa, 0x0, 0xa0}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0xfffffffffffffffd}, 0x5, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x8, @in=@empty}}, 0xe8)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x40}}, 0x4800)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd})
close(0xffffffffffffffff)

5.911905066s ago: executing program 2 (id=237):
socket$inet6(0x10, 0x2, 0xfffffffe)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000580)=""/167, 0xa7, 0x0, &(0x7f0000000240)=""/113, 0x71}}, 0x10)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r5, 0x0, 0x0, 0x0, 0x80000, 0x2})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

4.607858545s ago: executing program 0 (id=238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001540)={&(0x7f0000001480)="38d7032ab0c216141a687a4e99908858cd5ee982b85485f2895e158e05ad33a2ae7233baae6d776da17cc855d403d2fff3c4e1c9bdd559205816afd17e462c0b14d7f11abe31fcdf54f01dd87bf2f36c4d0db1e9160bb7456311b3a8cf1689c07c2d067d5bd26bb15c718f011033e857cb75f486e15cd2a0dfda80539e1229f44987a52205", 0x85})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = open(0x0, 0x0, 0x0)
mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18)
renameat2(r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a65831f1254436b30800000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000000014000000000a010200000000000000000000000a140000001100010000000000000000000000000a"], 0x94}}, 0x0)

4.151283995s ago: executing program 1 (id=239):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3a05c", 0x1d}, {&(0x7f0000000540)="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", 0x224}], 0x2}}], 0x1, 0x4000001)
r4 = dup(r3)
read$FUSE(r4, &(0x7f00000075c0)={0x2020}, 0x2020)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x15)
mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
dup(r6)

4.148111665s ago: executing program 4 (id=240):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240), 0x0)
listen(r1, 0x3)
r3 = accept4(r1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x1e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xe952, 0x0)
read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1})
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000080))
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040))
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201, 0x0, 0x3}, 0x0, 0x0, 0x0)
close(0x3)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0xff])

3.268620129s ago: executing program 3 (id=241):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r3 = socket(0x2b, 0x80801, 0x1)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={<r5=>0x0}, &(0x7f00000000c0)=0xc)
ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0xffffffffffffffff, 0x2003)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @remote}, {0xa, 0x0, 0x7, @remote, 0x2}, r6}}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r7}, 0x10)
mq_notify(0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0xfffffffffffffca1, 0xfa00, @id_afonly={&(0x7f00000002c0)=0x4, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.044902875s ago: executing program 1 (id=242):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
ioctl$VIDIOC_QBUF(r4, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x13, r6, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.043630644s ago: executing program 2 (id=243):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x4}, 0x50)
open(&(0x7f00000000c0)='.\x00', 0x2800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
setresgid(0x0, 0x0, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x5a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0xa, 0x2, 0x0, 0x0, "25cccd9754769f20a3db39c81d08608de99e132cbd22f7a564cf28787d13eeaf751d04d5a49749863ef315aa80a72c01db866b82e7816c7151d9129a52c2c519"}}}}, 0x0)

2.776004687s ago: executing program 2 (id=244):
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000001c0)=""/156)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
llistxattr(0x0, 0x0, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080004000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x34)
r8 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)
r11 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x8f}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x0, 0x7, 0x4, 0x75f1, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7fff, 0x86, &(0x7f0000000340)=""/134, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0xc, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x5, 0x2, 0xc}, {0x3, 0x1, 0xd}, {0x0, 0x2, 0xa, 0x2}, {0x3, 0x5, 0xc, 0x8}, {0x0, 0x4, 0x7, 0x6}, {0x1, 0x4, 0x0, 0x4}]}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

2.731478633s ago: executing program 0 (id=245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty=0x2000000}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)

1.526397756s ago: executing program 0 (id=246):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ptrace(0x10, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0x12)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

1.330029172s ago: executing program 4 (id=247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.326516703s ago: executing program 3 (id=248):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x4040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

923.707174ms ago: executing program 4 (id=249):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0xffffff13) (fail_nth: 22)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
socket$inet6_sctp(0xa, 0x5, 0x84)
semget$private(0x0, 0x2, 0x302)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
semop(0x0, 0x0, 0x0)
fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)

915.651111ms ago: executing program 3 (id=250):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)
write$usbip_server(0xffffffffffffffff, 0x0, 0x60)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001aaaaaaaaaaaa00000000"], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB="050003"], 0x28}}, 0x80)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)

2.367947ms ago: executing program 4 (id=251):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$cec(0x0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, r5}, 0x38)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc000000000000"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x400c014)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2)

0s ago: executing program 0 (id=252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$cec(0x0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, r5}, 0x38)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc000000000000"], 0x64}}, 0x4800)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x400c014)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x800008, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts.
[   56.121049][   T30] audit: type=1400 audit(1755140300.485:62): avc:  denied  { mounton } for  pid=5832 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   56.124582][ T5832] cgroup: Unknown subsys name 'net'
[   56.143817][   T30] audit: type=1400 audit(1755140300.485:63): avc:  denied  { mount } for  pid=5832 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.173708][   T30] audit: type=1400 audit(1755140300.545:64): avc:  denied  { unmount } for  pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   56.328038][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.336165][ T5832] cgroup: Unknown subsys name 'rlimit'
[   56.460900][   T30] audit: type=1400 audit(1755140300.825:65): avc:  denied  { setattr } for  pid=5832 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   56.484291][   T30] audit: type=1400 audit(1755140300.825:66): avc:  denied  { create } for  pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.505680][   T30] audit: type=1400 audit(1755140300.825:67): avc:  denied  { write } for  pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.544994][   T30] audit: type=1400 audit(1755140300.825:68): avc:  denied  { read } for  pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.565824][   T30] audit: type=1400 audit(1755140300.875:69): avc:  denied  { mounton } for  pid=5832 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   56.590675][   T30] audit: type=1400 audit(1755140300.875:70): avc:  denied  { mount } for  pid=5832 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   56.591100][ T5834] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   56.613952][   T30] audit: type=1400 audit(1755140300.905:71): avc:  denied  { read } for  pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   57.541068][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.631994][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.647660][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   59.651695][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.655760][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.670027][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.678406][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.678508][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.685835][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.694012][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   59.700958][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.706848][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   59.721034][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.724135][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   59.728540][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.735804][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   59.744048][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.750296][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.756374][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.764722][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.770714][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   59.777684][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   59.784697][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.792783][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   59.809489][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   59.821068][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.304729][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   60.316446][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   60.372332][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   60.390578][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   60.511305][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   60.528422][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.536074][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.543309][ T5843] bridge_slave_0: entered allmulticast mode
[   60.550134][ T5843] bridge_slave_0: entered promiscuous mode
[   60.579298][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.586406][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.593482][ T5843] bridge_slave_1: entered allmulticast mode
[   60.601122][ T5843] bridge_slave_1: entered promiscuous mode
[   60.620600][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.628064][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.635557][ T5844] bridge_slave_0: entered allmulticast mode
[   60.642457][ T5844] bridge_slave_0: entered promiscuous mode
[   60.688410][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.695687][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.702776][ T5844] bridge_slave_1: entered allmulticast mode
[   60.709763][ T5844] bridge_slave_1: entered promiscuous mode
[   60.724834][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.731989][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.739426][ T5845] bridge_slave_0: entered allmulticast mode
[   60.746172][ T5845] bridge_slave_0: entered promiscuous mode
[   60.780055][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.787185][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.794293][ T5845] bridge_slave_1: entered allmulticast mode
[   60.801680][ T5845] bridge_slave_1: entered promiscuous mode
[   60.808185][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.815848][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.822952][ T5851] bridge_slave_0: entered allmulticast mode
[   60.829716][ T5851] bridge_slave_0: entered promiscuous mode
[   60.838237][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.849890][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.863570][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.889420][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.896684][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.903791][ T5851] bridge_slave_1: entered allmulticast mode
[   60.910695][ T5851] bridge_slave_1: entered promiscuous mode
[   60.930085][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.941227][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.953186][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.011187][ T5843] team0: Port device team_slave_0 added
[   61.019613][ T5843] team0: Port device team_slave_1 added
[   61.049536][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.060113][ T5845] team0: Port device team_slave_0 added
[   61.074375][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.081618][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.088912][ T5842] bridge_slave_0: entered allmulticast mode
[   61.095989][ T5842] bridge_slave_0: entered promiscuous mode
[   61.103609][ T5844] team0: Port device team_slave_0 added
[   61.111703][ T5844] team0: Port device team_slave_1 added
[   61.118974][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.129222][ T5845] team0: Port device team_slave_1 added
[   61.149473][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.157997][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.165138][ T5842] bridge_slave_1: entered allmulticast mode
[   61.171764][ T5842] bridge_slave_1: entered promiscuous mode
[   61.217791][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.224734][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.251010][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.273886][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.281268][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.307326][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.326081][ T5851] team0: Port device team_slave_0 added
[   61.332318][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.339335][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.365879][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.378106][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.385135][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.411237][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.423777][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.439101][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.448983][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.456023][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.482602][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.494441][ T5851] team0: Port device team_slave_1 added
[   61.508747][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.515731][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.541668][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.589274][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.596377][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.623244][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.635509][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.642456][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.668438][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.691833][ T5842] team0: Port device team_slave_0 added
[   61.722442][ T5842] team0: Port device team_slave_1 added
[   61.740934][ T5845] hsr_slave_0: entered promiscuous mode
[   61.747523][ T5845] hsr_slave_1: entered promiscuous mode
[   61.778263][ T5843] hsr_slave_0: entered promiscuous mode
[   61.784444][ T5843] hsr_slave_1: entered promiscuous mode
[   61.790707][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   61.796886][ T5843] Cannot create hsr debugfs directory
[   61.825926][ T5856] Bluetooth: hci2: command tx timeout
[   61.825924][ T5855] Bluetooth: hci3: command tx timeout
[   61.837028][ T5853] Bluetooth: hci0: command tx timeout
[   61.837620][ T5855] Bluetooth: hci1: command tx timeout
[   61.862345][ T5851] hsr_slave_0: entered promiscuous mode
[   61.868515][ T5851] hsr_slave_1: entered promiscuous mode
[   61.874417][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   61.880360][ T5851] Cannot create hsr debugfs directory
[   61.893259][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.901693][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.928394][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.935232][ T5855] Bluetooth: hci4: command tx timeout
[   61.940481][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.951649][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.977606][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.992658][ T5844] hsr_slave_0: entered promiscuous mode
[   61.998778][ T5844] hsr_slave_1: entered promiscuous mode
[   62.004721][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   62.010716][ T5844] Cannot create hsr debugfs directory
[   62.135392][ T5842] hsr_slave_0: entered promiscuous mode
[   62.141397][ T5842] hsr_slave_1: entered promiscuous mode
[   62.147453][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   62.153163][ T5842] Cannot create hsr debugfs directory
[   62.430083][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.440836][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.451706][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.460898][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.522975][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.532711][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.544216][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.554803][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.640826][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.664737][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.674022][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.683739][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.741602][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   62.772772][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.781492][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   62.791140][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   62.801234][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   62.872850][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.883056][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   62.906317][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.926893][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   62.933639][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.955762][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.967222][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.974462][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.991452][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.002740][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.016046][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.023123][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.031664][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.038737][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.047641][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.054679][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.123074][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   63.144352][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.151486][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.180056][ T2981] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.187188][ T2981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.259284][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.265651][   T30] kauditd_printk_skb: 17 callbacks suppressed
[   63.265664][   T30] audit: type=1400 audit(1755140307.635:89): avc:  denied  { sys_module } for  pid=5843 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   63.330681][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   63.362453][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.369602][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.407941][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.415038][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.438721][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.521291][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   63.580495][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.587683][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.603898][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.611070][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.690637][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.728741][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.766417][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.853950][ T5845] veth0_vlan: entered promiscuous mode
[   63.888947][ T5845] veth1_vlan: entered promiscuous mode
[   63.905299][ T5855] Bluetooth: hci0: command tx timeout
[   63.911067][ T5856] Bluetooth: hci3: command tx timeout
[   63.911090][ T5861] Bluetooth: hci2: command tx timeout
[   63.926665][ T5853] Bluetooth: hci1: command tx timeout
[   63.986325][ T5853] Bluetooth: hci4: command tx timeout
[   63.988594][ T5843] veth0_vlan: entered promiscuous mode
[   64.041879][ T5843] veth1_vlan: entered promiscuous mode
[   64.058499][ T5845] veth0_macvtap: entered promiscuous mode
[   64.074235][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.105596][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.114771][ T5845] veth1_macvtap: entered promiscuous mode
[   64.144361][ T5843] veth0_macvtap: entered promiscuous mode
[   64.159393][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.179191][ T5843] veth1_macvtap: entered promiscuous mode
[   64.197882][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.242336][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.251738][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.272824][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.282731][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.292759][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.314822][ T5844] veth0_vlan: entered promiscuous mode
[   64.324330][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.391747][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.395268][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.402080][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.417999][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.431498][ T5844] veth1_vlan: entered promiscuous mode
[   64.448482][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.472035][ T5851] veth0_vlan: entered promiscuous mode
[   64.482465][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.507791][ T5842] veth0_vlan: entered promiscuous mode
[   64.524598][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.534321][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.543079][ T5842] veth1_vlan: entered promiscuous mode
[   64.553608][ T5851] veth1_vlan: entered promiscuous mode
[   64.573616][ T5844] veth0_macvtap: entered promiscuous mode
[   64.583474][ T5844] veth1_macvtap: entered promiscuous mode
[   64.602948][   T30] audit: type=1400 audit(1755140308.955:90): avc:  denied  { mounton } for  pid=5845 comm="syz-executor" path="/root/syzkaller.lgwRN9/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   64.628096][   T30] audit: type=1400 audit(1755140308.965:91): avc:  denied  { mount } for  pid=5845 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   64.651503][   T30] audit: type=1400 audit(1755140308.965:92): avc:  denied  { mounton } for  pid=5845 comm="syz-executor" path="/root/syzkaller.lgwRN9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   64.678156][   T30] audit: type=1400 audit(1755140308.965:93): avc:  denied  { mount } for  pid=5845 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   64.682878][ T5842] veth0_macvtap: entered promiscuous mode
[   64.710843][   T30] audit: type=1400 audit(1755140308.965:94): avc:  denied  { mounton } for  pid=5845 comm="syz-executor" path="/root/syzkaller.lgwRN9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   64.740939][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.742286][   T30] audit: type=1400 audit(1755140308.965:95): avc:  denied  { mounton } for  pid=5845 comm="syz-executor" path="/root/syzkaller.lgwRN9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   64.778800][   T30] audit: type=1400 audit(1755140308.965:96): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   64.803394][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.811681][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.828707][   T30] audit: type=1400 audit(1755140308.995:97): avc:  denied  { mounton } for  pid=5845 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   64.839892][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.857713][   T30] audit: type=1400 audit(1755140308.995:98): avc:  denied  { mount } for  pid=5845 comm="syz-executor" name="/" dev="gadgetfs" ino=7379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   64.886066][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.890621][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.895202][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.918798][ T5842] veth1_macvtap: entered promiscuous mode
[   64.927992][ T2946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.938261][ T2909] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.970468][ T5851] veth0_macvtap: entered promiscuous mode
[   65.019006][ T2909] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.038165][ T2909] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.070669][ T5851] veth1_macvtap: entered promiscuous mode
[   65.117811][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.134583][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.179894][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.331997][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.373781][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.374300][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.390642][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.468332][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.493377][ T2946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.527869][ T2946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.562510][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.570422][ T2946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.572173][ T2946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.589725][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.612457][ T2946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.632710][ T2946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.743803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   65.752602][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.808226][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.829372][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.855872][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.880258][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.990423][ T5853] Bluetooth: hci3: command tx timeout
[   65.995894][ T5861] Bluetooth: hci0: command tx timeout
[   65.996306][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.001271][ T5861] Bluetooth: hci1: command tx timeout
[   66.015276][ T5853] Bluetooth: hci2: command tx timeout
[   66.074268][ T5981] mmap: syz.3.4 (5981) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   66.089286][ T5856] Bluetooth: hci4: command tx timeout
[   66.096808][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   66.113846][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   66.116545][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.172269][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.237484][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.358377][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   66.475991][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.484569][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.517754][ T1541] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.550268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.595924][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.604196][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.627976][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.658587][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.695904][ T1541] usb 3-1: Using ep0 maxpacket: 32
[   66.719072][ T1541] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   66.795021][ T1541] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   66.851537][ T1541] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   66.900464][ T1541] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   66.965386][ T1541] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   67.352439][ T1541] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   67.449198][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.486135][ T1541] usb 3-1: Product: syz
[   67.514873][ T1541] usb 3-1: Manufacturer: syz
[   67.534211][ T1541] usb 3-1: SerialNumber: syz
[   67.904408][ T1541] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[   67.934403][ T1541] imon 3-1:155.0: unable to initialize intf0, err -90
[   67.945746][ T6018] tmpfs: Unknown parameter 'usuota_inode_hardlimit'
[   67.973922][ T1541] imon:imon_probe: failed to initialize context!
[   67.992725][ T1541] imon 3-1:155.0: unable to register, err -19
[   68.115431][ T5856] Bluetooth: hci1: command tx timeout
[   68.120893][ T5856] Bluetooth: hci2: command tx timeout
[   68.126887][ T5861] Bluetooth: hci3: command tx timeout
[   68.132301][ T5861] Bluetooth: hci0: command tx timeout
[   68.141465][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.162913][ T5856] Bluetooth: hci4: command tx timeout
[   68.172038][ T1541] usb 3-1: USB disconnect, device number 2
[   68.175180][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   68.718705][   T30] kauditd_printk_skb: 68 callbacks suppressed
[   68.718720][   T30] audit: type=1400 audit(1755140313.075:167): avc:  denied  { write } for  pid=5989 comm="syz.1.2" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   69.035345][   T30] audit: type=1400 audit(1755140313.375:168): avc:  denied  { add_name } for  pid=5995 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   69.222409][   T30] audit: type=1400 audit(1755140313.585:169): avc:  denied  { bind } for  pid=6031 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   70.224901][   T30] audit: type=1400 audit(1755140314.165:170): avc:  denied  { mount } for  pid=6032 comm="syz.0.14" name="/" dev="ramfs" ino=8418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   70.494575][   T30] audit: type=1400 audit(1755140314.755:171): avc:  denied  { getattr } for  pid=6034 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=1980 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   70.562692][   T30] audit: type=1400 audit(1755140314.755:172): avc:  denied  { remove_name } for  pid=6034 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=1980 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   70.969189][   T30] audit: type=1400 audit(1755140314.755:173): avc:  denied  { unlink } for  pid=6034 comm="rm" name="resolv.conf.wlan2.link" dev="tmpfs" ino=1980 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   71.016662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.029163][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   71.059984][   T30] audit: type=1400 audit(1755140314.765:174): avc:  denied  { create } for  pid=6043 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   71.157338][   T30] audit: type=1400 audit(1755140314.765:175): avc:  denied  { setopt } for  pid=6031 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   71.462932][   T30] audit: type=1400 audit(1755140314.765:176): avc:  denied  { connect } for  pid=6031 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   72.406015][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'.
[   72.487234][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'.
[   73.660291][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'.
[   73.872781][ T6074] can0: slcan on ptm0.
[   73.901891][   T30] kauditd_printk_skb: 7 callbacks suppressed
[   73.901905][   T30] audit: type=1400 audit(1755140318.265:184): avc:  denied  { connect } for  pid=6073 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   74.033464][ T6060] syz.2.18 (6060): drop_caches: 2
[   74.042456][ T6073] can0 (unregistered): slcan off ptm0.
[   74.240503][   T30] audit: type=1400 audit(1755140318.585:185): avc:  denied  { write } for  pid=6086 comm="syz.3.22" path="socket:[8125]" dev="sockfs" ino=8125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   74.311221][   T30] audit: type=1400 audit(1755140318.595:186): avc:  denied  { read write } for  pid=6086 comm="syz.3.22" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   74.336639][   T30] audit: type=1400 audit(1755140318.595:187): avc:  denied  { open } for  pid=6086 comm="syz.3.22" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   74.478588][   T30] audit: type=1400 audit(1755140318.845:188): avc:  denied  { ioctl } for  pid=6089 comm="syz.2.24" path="socket:[8512]" dev="sockfs" ino=8512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   75.476504][   T30] audit: type=1400 audit(1755140319.265:189): avc:  denied  { write } for  pid=6086 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   75.495720][   T30] audit: type=1400 audit(1755140319.525:190): avc:  denied  { write } for  pid=6093 comm="syz.0.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   75.520130][   T30] audit: type=1400 audit(1755140319.845:191): avc:  denied  { create } for  pid=6070 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   75.543825][   T30] audit: type=1400 audit(1755140319.845:192): avc:  denied  { write } for  pid=6070 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.016064][   T30] audit: type=1400 audit(1755140319.845:193): avc:  denied  { append } for  pid=6070 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" dev="tmpfs" ino=2036 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   76.892903][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.145733][ T6124] tmpfs: Unknown parameter 'nr_inndes'
[   77.725542][    T9] usb 1-1: Using ep0 maxpacket: 16
[   77.779313][    T9] usb 1-1: config 4 has an invalid interface number: 51 but max is 0
[   77.800643][    T9] usb 1-1: config 4 has no interface number 0
[   78.345505][    T9] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[   78.363770][    T9] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   78.445227][    T9] usb 1-1: config 4 interface 51 has no altsetting 0
[   78.592636][    T9] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[   78.674929][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.682861][ T6132] netlink: 340 bytes leftover after parsing attributes in process `syz.2.31'.
[   78.699707][ T6132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31'.
[   78.710809][    T9] usb 1-1: Product: syz
[   78.719473][    T9] usb 1-1: Manufacturer: syz
[   78.729583][    T9] usb 1-1: SerialNumber: syz
[   78.769379][ T6107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.821810][ T6107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   79.409392][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   79.409406][   T30] audit: type=1400 audit(1755140323.775:196): avc:  denied  { create } for  pid=6135 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   79.527130][    T9] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71
[   79.585245][    T9] usb 1-1: USB disconnect, device number 2
[   79.722063][   T30] audit: type=1400 audit(1755140323.805:197): avc:  denied  { ioctl } for  pid=6135 comm="syz.2.34" path="socket:[8668]" dev="sockfs" ino=8668 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   80.029886][   T30] audit: type=1400 audit(1755140323.875:198): avc:  denied  { ioctl } for  pid=6135 comm="syz.2.34" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9544 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   80.328585][ T6159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6159 comm=syz.2.39
[   81.122879][ T6157] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   81.141363][ T5856] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1
[   81.192397][   T10] cfg80211: failed to load regulatory.db
[   81.298457][   T30] audit: type=1400 audit(1755140325.445:199): avc:  denied  { accept } for  pid=6150 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   82.760385][ T6178] Zero length message leads to an empty skb
[   82.891036][   T30] audit: type=1400 audit(1755140327.245:200): avc:  denied  { read } for  pid=6183 comm="syz.2.47" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   82.933240][   T30] audit: type=1400 audit(1755140327.245:201): avc:  denied  { open } for  pid=6183 comm="syz.2.47" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   82.958135][   T30] audit: type=1400 audit(1755140327.295:202): avc:  denied  { ioctl } for  pid=6183 comm="syz.2.47" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   83.715145][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.978149][ T6209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6209 comm=syz.3.52
[   84.059964][ T5903] usb 2-1: config 1 has an invalid interface number: 115 but max is 0
[   84.359908][ T5903] usb 2-1: config 1 has no interface number 0
[   84.438847][ T5903] usb 2-1: config 1 interface 115 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   84.454984][ T5903] usb 2-1: config 1 interface 115 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   84.472164][ T5903] usb 2-1: config 1 interface 115 has no altsetting 0
[   84.498420][ T5903] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a21, bcdDevice=9b.66
[   84.529006][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.641103][ T5903] usb 2-1: Product: syz
[   84.648928][ T5903] usb 2-1: Manufacturer: syz
[   84.656226][ T5903] usb 2-1: SerialNumber: syz
[   84.665871][ T6193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   84.685723][ T6193] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   85.316629][ T5856] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   85.325972][ T5856] Bluetooth: hci4: Injecting HCI hardware error event
[   85.338880][ T5856] Bluetooth: hci4: hardware error 0x00
[   85.536175][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.738930][   T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   85.844691][ T6225] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.139353][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.185210][   T10] usb 4-1: Product: syz
[   86.208146][   T10] usb 4-1: Manufacturer: syz
[   86.220066][   T10] usb 4-1: SerialNumber: syz
[   86.251091][   T10] usb 4-1: config 0 descriptor??
[   86.854001][ T6229] tmpfs: Unknown parameter 'nr_inndes'
[   86.946369][ T5903] ipaq 2-1:1.115: PocketPC PDA converter detected
[   86.985483][ T5903] ipaq 2-1:1.115: probe with driver ipaq failed with error -71
[   87.005962][ T5903] usb 2-1: USB disconnect, device number 2
[   87.125522][   T10] usb-storage 4-1:0.0: USB Mass Storage device detected
[   87.316442][   T10] usb 4-1: USB disconnect, device number 2
[   87.446414][  T918] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.510888][ T5856] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   87.617701][   T30] audit: type=1400 audit(1755140331.925:203): avc:  denied  { watch watch_reads } for  pid=6241 comm="syz.1.62" path="/5" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   87.640739][    C0] vkms_vblank_simulate: vblank timer overrun
[   87.743049][ T6245] syz.1.62: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.885518][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.1.62 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) 
[   87.885549][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   87.885560][ T6245] Call Trace:
[   87.885567][ T6245]  <TASK>
[   87.885575][ T6245]  dump_stack_lvl+0x16c/0x1f0
[   87.885599][ T6245]  warn_alloc+0x248/0x3a0
[   87.885620][ T6245]  ? __pfx_warn_alloc+0x10/0x10
[   87.885651][ T6245]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   87.885673][ T6245]  ? __vmalloc_node_noprof+0xad/0xf0
[   87.885704][ T6245]  __vmalloc_node_range_noprof+0x101b/0x14b0
[   87.885739][ T6245]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   87.885770][ T6245]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.885806][ T6245]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   87.885830][ T6245]  vmalloc_user_noprof+0x9e/0xe0
[   87.885856][ T6245]  ? vb2_vmalloc_alloc+0x135/0x3f0
[   87.885881][ T6245]  vb2_vmalloc_alloc+0x135/0x3f0
[   87.885914][ T6245]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[   87.885937][ T6245]  __vb2_queue_alloc+0x8c6/0x1280
[   87.885976][ T6245]  vb2_core_reqbufs+0xa90/0xfe0
[   87.886007][ T6245]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[   87.886033][ T6245]  ? __pfx___might_resched+0x10/0x10
[   87.886063][ T6245]  ? __mutex_lock+0x1c4/0x10b0
[   87.886089][ T6245]  vb2_reqbufs+0x1a3/0x1f0
[   87.886109][ T6245]  ? __pfx_vb2_reqbufs+0x10/0x10
[   87.886132][ T6245]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   87.886155][ T6245]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[   87.886178][ T6245]  v4l_reqbufs+0x152/0x1e0
[   87.886206][ T6245]  __video_do_ioctl+0xb3d/0xfc0
[   87.886238][ T6245]  ? __might_fault+0xe3/0x190
[   87.886256][ T6245]  ? __pfx___video_do_ioctl+0x10/0x10
[   87.886301][ T6245]  video_usercopy+0x4d0/0x1720
[   87.886322][ T6245]  ? __pfx___video_do_ioctl+0x10/0x10
[   87.886351][ T6245]  ? selinux_kernel_read_file+0xb0/0x130
[   87.886378][ T6245]  ? __pfx_video_usercopy+0x10/0x10
[   87.886415][ T6245]  v4l2_ioctl+0x1ba/0x250
[   87.886429][ T6245]  ? __pfx_v4l2_ioctl+0x10/0x10
[   87.886453][ T6245]  __x64_sys_ioctl+0x18e/0x210
[   87.886480][ T6245]  do_syscall_64+0xcd/0x4c0
[   87.886501][ T6245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.886519][ T6245] RIP: 0033:0x7f0e5c98ebe9
[   87.886533][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.886549][ T6245] RSP: 002b:00007f0e5d77a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.886566][ T6245] RAX: ffffffffffffffda RBX: 00007f0e5cbb6090 RCX: 00007f0e5c98ebe9
[   87.886578][ T6245] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000004
[   87.886588][ T6245] RBP: 00007f0e5ca11e19 R08: 0000000000000000 R09: 0000000000000000
[   87.886598][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.886607][ T6245] R13: 00007f0e5cbb6128 R14: 00007f0e5cbb6090 R15: 00007fffb5773b78
[   87.886630][ T6245]  </TASK>
[   87.886637][ T6245] Mem-Info:
[   88.195147][  T918] usb 5-1: Using ep0 maxpacket: 32
[   88.207230][  T918] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[   88.218948][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.227368][ T6245] active_anon:10236 inactive_anon:0 isolated_anon:0
[   88.227368][ T6245]  active_file:3342 inactive_file:40536 isolated_file:0
[   88.227368][ T6245]  unevictable:768 dirty:908 writeback:0
[   88.227368][ T6245]  slab_reclaimable:12044 slab_unreclaimable:93610
[   88.227368][ T6245]  mapped:33888 shmem:4228 pagetables:1211
[   88.227368][ T6245]  sec_pagetables:0 bounce:0
[   88.227368][ T6245]  kernel_misc_reclaimable:0
[   88.227368][ T6245]  free:1317310 free_pcp:18825 free_cma:0
[   88.272616][    C0] vkms_vblank_simulate: vblank timer overrun
[   88.294208][  T918] usb 5-1: config 0 descriptor??
[   88.310168][   T30] audit: type=1400 audit(1755140332.665:204): avc:  denied  { bind } for  pid=6251 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   88.415354][  T918] as10x_usb: device has been detected
[   88.433372][ T6245] Node 0 active_anon:52576kB inactive_anon:0kB active_file:13132kB inactive_file:161944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146852kB dirty:3500kB writeback:0kB shmem:26856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12072kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.474814][ T6245] Node 1 active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:236kB dirty:132kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.518125][  T918] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[   88.646142][   T30] audit: type=1400 audit(1755140333.015:205): avc:  denied  { read write } for  pid=6237 comm="syz.4.60" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   88.673559][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'.
[   88.679342][ T6245] Node 0 
[   88.683105][ T6238] bridge_slave_1: left allmulticast mode
[   88.692313][ T6238] bridge_slave_1: left promiscuous mode
[   88.692328][  T918] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[   88.698890][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.710279][ T6245] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.741674][    C0] vkms_vblank_simulate: vblank timer overrun
[   88.794146][ T6245] lowmem_reserve[]: 0 2479 2481 2481 2481
[   88.810178][ T6245] Node 0 DMA32 free:1346272kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62236kB inactive_anon:0kB active_file:13132kB inactive_file:160632kB unevictable:1536kB writepending:3496kB present:3129332kB managed:2539408kB mlocked:0kB bounce:0kB free_pcp:44936kB local_pcp:29328kB free_cma:0kB
[   88.877842][   T30] audit: type=1400 audit(1755140333.015:206): avc:  denied  { open } for  pid=6237 comm="syz.4.60" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   88.925231][ T6238] bridge_slave_0: left allmulticast mode
[   88.930907][ T6238] bridge_slave_0: left promiscuous mode
[   88.936722][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.969428][  T918] as10x_usb: error during firmware upload part1
[   89.033888][   T30] audit: type=1400 audit(1755140333.035:207): avc:  denied  { ioctl } for  pid=6237 comm="syz.4.60" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   89.070553][  T918] Registered device nBox DVB-T Dongle
[   89.085481][  T918] usb 5-1: USB disconnect, device number 2
[   89.086817][   T30] audit: type=1400 audit(1755140333.215:208): avc:  denied  { setopt } for  pid=6251 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[   89.163169][ T6245] lowmem_reserve[]: 0 0 1 1 1
[   89.217301][ T6245] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB
[   89.259362][  T918] Unregistered device nBox DVB-T Dongle
[   89.269026][   T30] audit: type=1400 audit(1755140333.335:209): avc:  denied  { firmware_load } for  pid=918 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   89.306002][  T918] as10x_usb: device has been disconnected
[   89.320679][ T6245] lowmem_reserve[]: 0 0 0 0 0
[   89.330785][ T6245] Node 1 Normal free:3893860kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176kB inactive_anon:0kB active_file:292kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19444kB local_pcp:10676kB free_cma:0kB
[   89.455546][ T6245] lowmem_reserve[]: 0 0 0 0 0
[   89.460346][ T6245] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   89.474483][ T6245] Node 0 DMA32: 1486*4kB (UM) 1016*8kB (U) 377*16kB (U) 152*32kB (UME) 101*64kB (U) 27*128kB (UME) 23*256kB (UE) 13*512kB (UM) 15*1024kB (UME) 7*2048kB (UME) 309*4096kB (M) = 1342792kB
[   89.560382][ T6245] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[   89.574436][ T6245] Node 1 Normal: 194*4kB (UME) 40*8kB (UE) 39*16kB (UE) 51*32kB (UME) 20*64kB (UE) 7*128kB (UME) 1*256kB (E) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3893912kB
[   89.636408][ T6245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   89.683966][ T6245] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.728359][ T6245] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   89.768581][ T6245] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.814816][ T6245] 51000 total pagecache pages
[   89.829157][ T6245] 0 pages in swap cache
[   89.843467][ T6245] Free swap  = 124996kB
[   89.858455][ T6245] Total swap = 124996kB
[   89.881916][ T6245] 2097051 pages RAM
[   89.896375][ T6245] 0 pages HighMem/MovableOnly
[   89.958109][ T6245] 430237 pages reserved
[   89.962281][ T6245] 0 pages cma reserved
[   90.716396][ T6288] tmpfs: Unknown parameter 'nr_inndes'
[   90.854091][   T30] audit: type=1400 audit(1755140335.205:210): avc:  denied  { create } for  pid=6286 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.236727][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'.
[   91.246492][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'.
[   91.367514][   T30] audit: type=1400 audit(1755140335.215:211): avc:  denied  { setopt } for  pid=6286 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   92.903281][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   93.299620][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'.
[   93.503172][ T5910] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.737292][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   93.783567][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'.
[   93.805918][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   93.838336][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'.
[   93.961366][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'.
[   94.015106][   T30] audit: type=1400 audit(1755140338.225:212): avc:  denied  { mount } for  pid=6323 comm="syz.0.79" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   94.057521][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   94.115967][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   94.192019][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   94.201165][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.291550][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   94.336405][ T5910] usb 4-1: config 0 descriptor??
[   94.444793][    T9] usb 1-1: device descriptor read/64, error -71
[   94.752305][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.845728][   T30] audit: type=1400 audit(1755140339.205:213): avc:  denied  { unlink } for  pid=6311 comm="syz.3.75" name="#1" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   94.885340][    T9] usb 1-1: device descriptor read/64, error -71
[   95.065939][ T5910] usbhid 4-1:0.0: can't add hid device: -71
[   95.078515][    T9] usb usb1-port1: attempt power cycle
[   95.978498][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   96.184333][ T5910] usb 4-1: USB disconnect, device number 3
[   96.206506][   T30] audit: type=1400 audit(1755140339.245:214): avc:  denied  { mount } for  pid=6311 comm="syz.3.75" name="/" dev="overlay" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   96.535138][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.552341][   T30] audit: type=1400 audit(1755140340.915:215): avc:  denied  { read write } for  pid=6337 comm="syz.1.81" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   96.599365][    T9] usb 1-1: device descriptor read/8, error -71
[   96.608627][   T30] audit: type=1400 audit(1755140340.915:216): avc:  denied  { open } for  pid=6337 comm="syz.1.81" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   96.665091][   T30] audit: type=1400 audit(1755140341.015:217): avc:  denied  { unmount } for  pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   96.847795][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.878660][ T6344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   96.885297][ T6344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   96.893678][ T6344] vhci_hcd vhci_hcd.0: Device attached
[   97.016502][    T9] usb 1-1: device descriptor read/8, error -71
[   97.128565][   T24] vhci_hcd: vhci_device speed not set
[   97.186217][ T5910] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[   97.212403][    T9] usb usb1-port1: unable to enumerate USB device
[   97.222541][   T24] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[   97.393046][   T30] audit: type=1400 audit(1755140341.735:218): avc:  denied  { ioctl } for  pid=6350 comm="syz.2.84" path="socket:[10760]" dev="sockfs" ino=10760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   97.434433][ T5910] usb 5-1: config 0 has no interfaces?
[   97.440583][ T5910] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   97.453962][   T30] audit: type=1400 audit(1755140341.805:219): avc:  denied  { unmount } for  pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   97.507252][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.542459][ T5910] usb 5-1: config 0 descriptor??
[   98.253293][ T6345] vhci_hcd: unknown pdu 2
[   98.385325][ T5924] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   98.456957][ T6364] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.601025][   T24] vhci_hcd: vhci_device speed not set
[   98.933235][   T24] usb 41-1: device descriptor read/64, error -71
[   98.935624][   T36] vhci_hcd: stop threads
[   98.951489][   T36] vhci_hcd: release socket
[   98.963745][   T36] vhci_hcd: disconnect device
[   99.833243][   T24] vhci_hcd: vhci_device speed not set
[   99.934882][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   99.950804][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   99.961822][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   99.971935][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   99.984945][ T5924] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   99.994039][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.003363][   T30] audit: type=1400 audit(1755140343.585:220): avc:  denied  { mounton } for  pid=6368 comm="syz.0.90" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  100.076497][    T9] usb 5-1: USB disconnect, device number 3
[  100.086495][ T5924] usb 3-1: config 0 descriptor??
[  100.334935][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'.
[  101.127527][ T5924] usbhid 3-1:0.0: can't add hid device: -71
[  102.229875][ T6383] tmpfs: Unknown parameter 'nr_inndes'
[  102.386231][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  102.520090][ T6379] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  102.627538][ T5924] usb 3-1: USB disconnect, device number 3
[  102.842020][ T6399] netlink: 988 bytes leftover after parsing attributes in process `syz.2.97'.
[  102.882399][ T6401] netlink: 'syz.4.98': attribute type 1 has an invalid length.
[  102.890141][ T6401] netlink: 172 bytes leftover after parsing attributes in process `syz.4.98'.
[  103.372850][   T30] audit: type=1400 audit(1755140347.735:221): avc:  denied  { ioctl } for  pid=6408 comm="syz.4.101" path="socket:[11828]" dev="sockfs" ino=11828 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  103.429877][   T30] audit: type=1400 audit(1755140347.765:222): avc:  denied  { read write } for  pid=6411 comm="syz.1.102" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.453096][   T30] audit: type=1400 audit(1755140347.765:223): avc:  denied  { open } for  pid=6411 comm="syz.1.102" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.619801][ T6417] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  103.707063][   T30] audit: type=1400 audit(1755140348.075:224): avc:  denied  { ioctl } for  pid=6411 comm="syz.1.102" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  103.737869][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.737880][   T30] audit: type=1400 audit(1755140348.075:225): avc:  denied  { create } for  pid=6421 comm="syz.0.104" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  103.842743][ T6427] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET)
[  103.852395][   T30] audit: type=1400 audit(1755140348.075:226): avc:  denied  { write } for  pid=6421 comm="syz.0.104" name="file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.189540][   T30] audit: type=1400 audit(1755140348.075:227): avc:  denied  { open } for  pid=6421 comm="syz.0.104" path="/25/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.227320][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.326909][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  104.335228][   T30] audit: type=1400 audit(1755140348.075:228): avc:  denied  { ioctl } for  pid=6421 comm="syz.0.104" path="/25/file0" dev="tmpfs" ino=152 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  104.340876][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  104.400674][   T30] audit: type=1400 audit(1755140348.105:229): avc:  denied  { create } for  pid=6411 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  104.422006][ T6427] netlink: 'syz.0.104': attribute type 39 has an invalid length.
[  104.438950][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  104.826422][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  104.847254][   T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  104.871950][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.913988][   T24] usb 3-1: Product: syz
[  104.937292][   T24] usb 3-1: Manufacturer: syz
[  104.949487][   T24] usb 3-1: SerialNumber: syz
[  104.987292][   T24] usb 3-1: config 0 descriptor??
[  104.998612][   T24] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  105.088137][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  105.088154][   T30] audit: type=1400 audit(1755140349.455:235): avc:  denied  { unlink } for  pid=5845 comm="syz-executor" name="file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  105.381339][   T30] audit: type=1400 audit(1755140349.735:236): avc:  denied  { name_connect } for  pid=6445 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  106.155428][ T6405] qrtr: Invalid version 10
[  106.162001][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.170745][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.238677][   T24] scsi host1: usb-storage 3-1:0.0
[  106.282305][   T24] usb 3-1: USB disconnect, device number 4
[  106.397577][ T6454] netlink: 988 bytes leftover after parsing attributes in process `syz.0.109'.
[  106.753974][   T30] audit: type=1800 audit(1755140351.115:237): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.113" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  106.874687][ T6468] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[6468]
[  107.219702][   T30] audit: type=1400 audit(1755140351.585:238): avc:  denied  { relabelfrom } for  pid=6465 comm="syz.0.113" name="" dev="pipefs" ino=11109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  107.383963][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.114'.
[  107.467451][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[  107.684352][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[  107.702884][   T30] audit: type=1400 audit(1755140351.885:239): avc:  denied  { create } for  pid=6475 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.802063][   T30] audit: type=1400 audit(1755140351.885:240): avc:  denied  { connect } for  pid=6475 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  107.873037][   T30] audit: type=1400 audit(1755140351.955:241): avc:  denied  { bind } for  pid=6475 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  108.058740][   T30] audit: type=1400 audit(1755140351.965:242): avc:  denied  { write } for  pid=6475 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  109.850089][ T6503] netlink: 988 bytes leftover after parsing attributes in process `syz.4.122'.
[  110.268134][   T30] audit: type=1400 audit(1755140354.625:243): avc:  denied  { name_bind } for  pid=6502 comm="syz.3.121" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  111.111284][   T30] audit: type=1400 audit(1755140354.865:244): avc:  denied  { connect } for  pid=6505 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  111.264296][   T30] audit: type=1400 audit(1755140354.865:245): avc:  denied  { write } for  pid=6505 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  111.393730][ T6515] tmpfs: Unknown parameter 'nr_inndes'
[  111.549995][   T30] audit: type=1400 audit(1755140355.915:246): avc:  denied  { setopt } for  pid=6518 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  111.658241][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'.
[  111.873656][   T30] audit: type=1400 audit(1755140356.235:247): avc:  denied  { create } for  pid=6518 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  111.911934][ T6519] mkiss: ax0: crc mode is auto.
[  112.084132][   T30] audit: type=1326 audit(1755140356.445:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6518 comm="syz.4.126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6f2d8ebe9 code=0x0
[  112.574655][   T30] audit: type=1400 audit(1755140356.935:249): avc:  denied  { bind } for  pid=6518 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.620276][ T6516] syz.1.124 (6516): drop_caches: 2
[  112.652584][ T6530] NILFS (nullb0): couldn't find nilfs on the device
[  112.658850][   T30] audit: type=1400 audit(1755140356.995:250): avc:  denied  { mounton } for  pid=6529 comm="syz.0.129" path="/31/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  113.435135][   T30] audit: type=1400 audit(1755140357.775:251): avc:  denied  { bind } for  pid=6547 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  113.454726][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[  113.537489][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[  113.624417][   T30] audit: type=1400 audit(1755140357.955:252): avc:  denied  { accept } for  pid=6547 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  115.477818][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'.
[  115.645105][ T6584] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  115.651632][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  115.659073][ T6584] vhci_hcd vhci_hcd.0: Device attached
[  115.856472][   T24] vhci_hcd: vhci_device speed not set
[  115.878612][ T6585] tmpfs: Unknown parameter ''
[  115.915127][   T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  115.925443][ T5910] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  116.039424][ T6577] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.108556][ T5910] usb 3-1: config 0 has no interfaces?
[  116.146978][ T5910] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  116.174707][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.195840][ T5910] usb 3-1: config 0 descriptor??
[  116.428387][ T6586] vhci_hcd: unknown pdu 2
[  116.457770][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.470981][ T1076] vhci_hcd: stop threads
[  116.506323][   T24] vhci_hcd: vhci_device speed not set
[  116.904266][ T1076] vhci_hcd: release socket
[  116.909137][ T1076] vhci_hcd: disconnect device
[  117.018075][   T24] usb 37-1: device descriptor read/64, error -71
[  117.255235][   T24] vhci_hcd: vhci_device speed not set
[  118.353547][ T6612] netlink: 204 bytes leftover after parsing attributes in process `syz.1.151'.
[  118.636594][    T9] usb 3-1: USB disconnect, device number 5
[  118.944001][ T6624] tmpfs: Unknown parameter 'nr_inndes'
[  121.141703][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  121.141717][   T30] audit: type=1400 audit(1755140365.505:255): avc:  denied  { load_policy } for  pid=6653 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  121.169794][ T6655] SELinux: failed to load policy
[  122.169250][ T6666] syz.2.162 (6666): drop_caches: 2
[  122.437940][ T6664] syz.4.163 (6664): drop_caches: 2
[  123.205450][ T6674] fuse: Bad value for 'fd'
[  123.539743][ T6677] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  123.546291][ T6677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  123.554684][ T6677] vhci_hcd vhci_hcd.0: Device attached
[  123.685712][   T30] audit: type=1400 audit(1755140368.055:256): avc:  denied  { create } for  pid=6680 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  123.774715][ T5910] vhci_hcd: vhci_device speed not set
[  124.155312][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  124.240916][   T24] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  124.248618][ T5910] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  124.299431][ T6690] tmpfs: Unknown parameter 'nr_inndes'
[  124.501074][   T30] audit: type=1400 audit(1755140368.075:257): avc:  denied  { getopt } for  pid=6680 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  124.613871][   T30] audit: type=1400 audit(1755140368.925:258): avc:  denied  { sys_module } for  pid=6680 comm="syz.0.167" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  124.656590][   T24] usb 4-1: config 0 has no interfaces?
[  124.656743][    T9] usb 2-1: config 1 has an invalid interface number: 58 but max is 0
[  124.662080][   T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  124.662103][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.671399][    T9] usb 2-1: config 1 has no interface number 0
[  124.700507][    T9] usb 2-1: config 1 interface 58 has no altsetting 0
[  124.754640][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=fc.3c
[  124.766183][   T24] usb 4-1: config 0 descriptor??
[  124.791855][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.871290][    T9] usb 2-1: Product: syz
[  124.897952][   T30] audit: type=1400 audit(1755140369.255:259): avc:  denied  { open } for  pid=6698 comm="syz.4.173" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  124.933281][    T9] usb 2-1: Manufacturer: syz
[  124.948717][    T9] usb 2-1: SerialNumber: syz
[  124.994245][ T6678] vhci_hcd: unknown pdu 2
[  125.041237][ T2981] vhci_hcd: stop threads
[  125.055164][ T5910] vhci_hcd: vhci_device speed not set
[  125.060817][ T6677] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.069956][   T30] audit: type=1400 audit(1755140369.275:260): avc:  denied  { ioctl } for  pid=6698 comm="syz.4.173" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x4b46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  125.095875][ T2981] vhci_hcd: release socket
[  125.100575][ T2981] vhci_hcd: disconnect device
[  125.191365][   T24] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  125.212287][ T5910] usb 39-1: device descriptor read/64, error -71
[  125.275209][   T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  125.397336][   T24] usb 5-1: config 65 has an invalid interface number: 95 but max is 0
[  125.428367][ T5910] vhci_hcd: vhci_device speed not set
[  125.439232][   T24] usb 5-1: config 65 has no interface number 0
[  125.450872][   T24] usb 5-1: string descriptor 0 read error: -22
[  125.457299][   T43] usb 1-1: Using ep0 maxpacket: 32
[  125.467289][   T43] usb 1-1: config 0 has an invalid interface number: 209 but max is 0
[  125.476379][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  125.509492][   T43] usb 1-1: config 0 has no interface number 0
[  125.517922][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.541078][   T43] usb 1-1: New USB device found, idVendor=cecf, idProduct=cc7d, bcdDevice=85.3c
[  125.552455][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.561476][   T43] usb 1-1: Product: syz
[  125.566109][   T43] usb 1-1: Manufacturer: syz
[  125.572970][   T24] usbtest 5-1:65.95: Linux gadget zero
[  125.578667][   T24] usbtest 5-1:65.95: low-speed {control in/out} tests (+alt)
[  125.587403][   T43] usb 1-1: SerialNumber: syz
[  125.603701][   T43] usb 1-1: config 0 descriptor??
[  125.782248][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.791647][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.801529][ T1856] usb 5-1: USB disconnect, device number 4
[  125.811150][  T918] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  125.841420][ T5903] usb 1-1: USB disconnect, device number 7
[  126.012156][  T918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  126.085196][  T918] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  126.095266][  T918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  126.116286][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.131593][ T6709] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  126.197890][ T5903] usb 4-1: USB disconnect, device number 4
[  126.221904][  T918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  126.674409][    T9] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state.
[  126.690340][    T9] dvb-usb: bulk message failed: -22 (4/0)
[  126.715096][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  126.735151][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  126.740889][    T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  126.751137][  T918] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.758627][   T30] audit: type=1400 audit(1755140371.095:261): avc:  denied  { ioctl } for  pid=6716 comm="syz.4.177" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  126.805857][   T10] usb 3-1: USB disconnect, device number 6
[  126.862808][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  126.910507][    T9] dvb-usb: Technotrend TT-connect S-2400 error while loading driver (-19)
[  127.228784][  T918] usb 4-1: config 0 has no interfaces?
[  127.254637][    T9] usb 2-1: USB disconnect, device number 3
[  127.269635][  T918] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  127.305920][   T30] audit: type=1400 audit(1755140371.665:262): avc:  denied  { create } for  pid=6718 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  127.325723][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.405618][  T918] usb 4-1: config 0 descriptor??
[  127.608517][ T6722] tmpfs: Unknown parameter ''
[  127.675827][ T6717] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  127.703836][   T30] audit: type=1400 audit(1755140372.055:263): avc:  denied  { setopt } for  pid=6716 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  127.932614][   T30] audit: type=1400 audit(1755140372.105:264): avc:  denied  { create } for  pid=6711 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  127.963144][   T30] audit: type=1400 audit(1755140372.105:265): avc:  denied  { associate } for  pid=6711 comm="syz.3.176" name="freezer.self_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  127.986021][   T30] audit: type=1400 audit(1755140372.115:266): avc:  denied  { create } for  pid=6711 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  128.008822][   T30] audit: type=1400 audit(1755140372.275:267): avc:  denied  { write } for  pid=6716 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  128.043662][ T6718] delete_channel: no stack
[  129.308530][   T30] audit: type=1400 audit(1755140373.675:268): avc:  denied  { read } for  pid=6739 comm="syz.2.183" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.316805][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[  129.410465][   T30] audit: type=1400 audit(1755140373.675:269): avc:  denied  { open } for  pid=6739 comm="syz.2.183" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.512663][   T30] audit: type=1400 audit(1755140373.675:270): avc:  denied  { ioctl } for  pid=6739 comm="syz.2.183" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  129.541215][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.571225][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.702725][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.718185][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.325870][    T9] usb 4-1: USB disconnect, device number 5
[  130.915395][  T918] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  131.095720][ T6770] syz.3.191 (6770): drop_caches: 2
[  131.147439][  T918] usb 3-1: config 1 interface 0 has no altsetting 0
[  131.156107][  T918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40
[  131.165392][  T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.175234][  T918] usb 3-1: Product: syz
[  131.180355][  T918] usb 3-1: Manufacturer: 쇐踣Ȱ韋ᠧ濞ὠ웖䟥㰁辸䉂鼰ꌯ騜犮䝰豈ﯳ饹ⓝꗴ뫰⇱葘锧ィ⎢殼鎾㳃
[  131.198872][  T918] usb 3-1: SerialNumber: syz
[  132.735870][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.742206][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.885622][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  133.197840][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.244387][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.244853][  T918] usbhid 3-1:1.0: can't add hid device: -71
[  133.274341][ T6783] tmpfs: Unknown parameter 'nr_innd'
[  133.303094][  T918] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  133.319375][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  133.335607][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  133.355298][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  133.364487][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.591315][   T24] usb 2-1: config 0 descriptor??
[  133.744866][  T918] usb 3-1: USB disconnect, device number 7
[  134.672048][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  134.689746][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  134.689761][   T30] audit: type=1400 audit(1755140378.625:273): avc:  denied  { read } for  pid=6791 comm="syz.4.198" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  134.889289][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  134.915078][    T9] usb 4-1: Using ep0 maxpacket: 32
[  134.925591][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  134.944889][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  135.208902][   T24] usb 2-1: USB disconnect, device number 4
[  136.438864][    T9] usb 4-1: can't read configurations, error -61
[  136.587302][   T30] audit: type=1400 audit(1755140378.625:274): avc:  denied  { open } for  pid=6791 comm="syz.4.198" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  136.632433][   T30] audit: type=1400 audit(1755140378.635:275): avc:  denied  { ioctl } for  pid=6791 comm="syz.4.198" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  136.715127][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  136.945306][    T9] usb 4-1: Using ep0 maxpacket: 32
[  136.960107][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  136.984846][    T9] usb 4-1: can't read configurations, error -61
[  137.001817][    T9] usb usb4-port1: attempt power cycle
[  137.215254][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'.
[  137.363304][ T6822] tipc: Started in network mode
[  137.380755][ T6822] tipc: Node identity ac14140f, cluster identity 4711
[  137.391626][ T6822] tipc: New replicast peer: 255.255.255.255
[  137.441475][ T6822] tipc: Enabled bearer <udp:s>, priority 10
[  137.485453][  T918] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  137.920971][  T918] usb 5-1: config 0 has no interfaces?
[  137.931074][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  137.977459][ T6830] tmpfs: Unknown parameter 'nr_innd'
[  137.985952][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.023289][  T918] usb 5-1: config 0 descriptor??
[  138.077054][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'.
[  138.255450][   T30] audit: type=1400 audit(1755140382.595:276): avc:  denied  { read write } for  pid=6839 comm="syz.2.212" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  138.790131][  T918] tipc: Node number set to 2886997007
[  138.802207][   T30] audit: type=1400 audit(1755140382.595:277): avc:  denied  { open } for  pid=6839 comm="syz.2.212" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  139.187373][ T6847] tmpfs: Unknown parameter 'nr_inndes'
[  139.555398][   T30] audit: type=1400 audit(1755140383.915:278): avc:  denied  { read } for  pid=6852 comm="syz.1.217" path="socket:[14146]" dev="sockfs" ino=14146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  139.604190][   T30] audit: type=1400 audit(1755140383.965:279): avc:  denied  { name_bind } for  pid=6852 comm="syz.1.217" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  139.684213][   T30] audit: type=1400 audit(1755140384.045:280): avc:  denied  { read write } for  pid=6855 comm="syz.2.216" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  139.711019][   T30] audit: type=1400 audit(1755140384.045:281): avc:  denied  { read } for  pid=6855 comm="syz.2.216" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  139.737363][   T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  139.743229][   T30] audit: type=1400 audit(1755140384.045:282): avc:  denied  { write open } for  pid=6855 comm="syz.2.216" path="/46/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  139.748302][ T6856] block device autoloading is deprecated and will be removed.
[  139.768499][ T6859] block device autoloading is deprecated and will be removed.
[  139.781177][   T30] audit: type=1400 audit(1755140384.045:283): avc:  denied  { open } for  pid=6855 comm="syz.2.216" path="/46/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  139.925287][   T43] usb 4-1: Using ep0 maxpacket: 32
[  139.959944][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.445703][  T918] usb 5-1: USB disconnect, device number 5
[  140.457527][   T43] usb 4-1: config 0 has no interfaces?
[  140.487802][   T43] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  140.501313][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.814063][   T43] usb 4-1: config 0 descriptor??
[  141.004988][   T30] audit: type=1400 audit(1755140385.365:284): avc:  denied  { execute } for  pid=6874 comm="syz.1.221" path="/36/cpu.stat" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  141.549261][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'.
[  141.872777][   T30] audit: type=1400 audit(1755140386.225:285): avc:  denied  { create } for  pid=6850 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  142.024139][   T30] audit: type=1400 audit(1755140386.325:286): avc:  denied  { create } for  pid=6850 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  142.301168][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[  142.351215][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[  142.710024][   T30] audit: type=1400 audit(1755140387.075:287): avc:  denied  { create } for  pid=6903 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  142.817292][   T30] audit: type=1400 audit(1755140387.075:288): avc:  denied  { ioctl } for  pid=6903 comm="syz.1.227" path="socket:[14364]" dev="sockfs" ino=14364 ioctlcmd=0x8947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  143.262685][   T43] usb 4-1: USB disconnect, device number 9
[  143.369806][ T6913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  143.655097][  T918] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  143.859299][  T918] usb 5-1: config 0 has no interfaces?
[  143.888038][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.911899][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.465855][  T918] usb 5-1: config 0 descriptor??
[  144.646796][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'.
[  146.224373][   T30] audit: type=1326 audit(1755140390.585:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.311209][   T30] audit: type=1326 audit(1755140390.585:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.363991][  T918] usb 5-1: USB disconnect, device number 6
[  146.455195][   T30] audit: type=1326 audit(1755140390.735:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.480174][   T30] audit: type=1326 audit(1755140390.745:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.505716][   T30] audit: type=1326 audit(1755140390.745:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.529398][   T30] audit: type=1326 audit(1755140390.745:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.614154][   T30] audit: type=1326 audit(1755140390.755:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  146.832038][ T6961] (syz.1.239,6961,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  146.840705][ T6961] (syz.1.239,6961,1):ocfs2_fill_super:1177 ERROR: status = -22
[  146.853872][ T6961] overlayfs: missing 'workdir'
[  146.914369][   T30] audit: type=1326 audit(1755140390.755:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  147.005764][   T30] audit: type=1326 audit(1755140390.765:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  147.100602][   T30] audit: type=1326 audit(1755140390.765:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6950 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f3ee2f8ebe9 code=0x7ffc0000
[  147.825835][ T5910] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  147.857456][ T5910] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  149.589866][ T6984] /dev/nullb0: Can't open blockdev
[  149.735585][ T6992] FAULT_INJECTION: forcing a failure.
[  149.735585][ T6992] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  149.751871][ T6992] CPU: 0 UID: 0 PID: 6992 Comm: syz.4.249 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) 
[  149.751897][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  149.751907][ T6992] Call Trace:
[  149.751913][ T6992]  <TASK>
[  149.751920][ T6992]  dump_stack_lvl+0x16c/0x1f0
[  149.751941][ T6992]  should_fail_ex+0x512/0x640
[  149.751965][ T6992]  _copy_to_user+0x32/0xd0
[  149.751990][ T6992]  rng_dev_read+0x1ea/0x810
[  149.752013][ T6992]  ? __pfx_virtio_read+0x10/0x10
[  149.752035][ T6992]  ? __pfx_rng_dev_read+0x10/0x10
[  149.752059][ T6992]  ? bpf_lsm_file_permission+0x9/0x10
[  149.752081][ T6992]  ? security_file_permission+0x71/0x210
[  149.752108][ T6992]  ? rw_verify_area+0xcf/0x6c0
[  149.752134][ T6992]  ? __pfx_rng_dev_read+0x10/0x10
[  149.752155][ T6992]  vfs_read+0x1e4/0xcf0
[  149.752177][ T6992]  ? __pfx_vfs_read+0x10/0x10
[  149.752192][ T6992]  ? find_held_lock+0x2b/0x80
[  149.752214][ T6992]  ? __fget_files+0x204/0x3c0
[  149.752237][ T6992]  ? __fget_files+0x20e/0x3c0
[  149.752263][ T6992]  ksys_read+0x12a/0x250
[  149.752280][ T6992]  ? __pfx_ksys_read+0x10/0x10
[  149.752304][ T6992]  do_syscall_64+0xcd/0x4c0
[  149.752324][ T6992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.752342][ T6992] RIP: 0033:0x7fa6f2d8ebe9
[  149.752356][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.752372][ T6992] RSP: 002b:00007fa6f0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  149.752389][ T6992] RAX: ffffffffffffffda RBX: 00007fa6f2fb5fa0 RCX: 00007fa6f2d8ebe9
[  149.752400][ T6992] RDX: 00000000ffffff13 RSI: 0000200000000440 RDI: 0000000000000003
[  149.752410][ T6992] RBP: 00007fa6f0ff6090 R08: 0000000000000000 R09: 0000000000000000
[  149.752420][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  149.752430][ T6992] R13: 00007fa6f2fb6038 R14: 00007fa6f2fb5fa0 R15: 00007ffd64ab5a78
[  149.752453][ T6992]  </TASK>
[  149.964610][ T6972] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x56529
[  149.998946][ T6972] memcg:ffff888140492700
[  150.003192][ T6972] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  150.010939][ T6972] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[  150.020245][ T6972] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888140492700
[  150.028832][ T6972] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  150.039043][ T6972] page_owner tracks the page as allocated
[  150.044854][ T6972] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6972, tgid 6967 (syz.1.242), ts 149964574828, free_ts 149726924157
[  150.065616][ T6972]  post_alloc_hook+0x1c0/0x230
[  150.070364][ T6972]  get_page_from_freelist+0x132b/0x38e0
[  150.075891][ T6972]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  150.081752][ T6972]  alloc_pages_mpol+0x1fb/0x550
[  150.086590][ T6972]  folio_alloc_noprof+0x20/0x2d0
[  150.091509][ T6972]  filemap_alloc_folio_noprof+0x3a1/0x470
[  150.097214][ T6972]  page_cache_ra_order+0x4e1/0xd70
[  150.102300][ T6972]  filemap_fault+0x152e/0x2930
[  150.107070][ T6972]  __do_fault+0x10a/0x490
[  150.111383][ T6972]  do_pte_missing+0x1a6/0x3ba0
[  150.116140][ T6972]  __handle_mm_fault+0x152a/0x2a50
[  150.122249][ T6972]  handle_mm_fault+0x589/0xd10
[  150.127042][ T6972]  do_user_addr_fault+0x7a6/0x1370
[  150.132126][ T6972]  exc_page_fault+0x5c/0xb0
[  150.136617][ T6972]  asm_exc_page_fault+0x26/0x30
[  150.141438][ T6972] page last free pid 15 tgid 15 stack trace:
[  150.147409][ T6972]  __free_frozen_pages+0x7d5/0x10f0
[  150.152590][ T6972]  tlb_remove_table_rcu+0x116/0x1a0
[  150.157804][ T6972]  rcu_core+0x79c/0x1530
[  150.162018][ T6972]  handle_softirqs+0x216/0x8e0
[  150.167169][ T6972]  run_ksoftirqd+0x3a/0x60
[  150.171582][ T6972]  smpboot_thread_fn+0x3f4/0xae0
[  150.357890][ T6972]  kthread+0x3c5/0x780
[  150.384792][ T6972]  ret_from_fork+0x5d7/0x6f0
[  150.393121][ T6972]  ret_from_fork_asm+0x1a/0x30
[  150.575164][ T5910] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  150.598075][ T6972] ------------[ cut here ]------------
[  150.603532][ T6972] kernel BUG at mm/filemap.c:867!
[  150.650355][ T6972] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  150.656780][ T6972] CPU: 1 UID: 0 PID: 6972 Comm: syz.1.242 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) 
[  150.668669][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  150.678709][ T6972] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[  150.684675][ T6972] Code: 7a c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48
[  150.704256][ T6972] RSP: 0018:ffffc900041bf200 EFLAGS: 00010246
[  150.710303][ T6972] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e050000
[  150.718251][ T6972] RDX: 0000000000080000 RSI: ffffffff81f3189a RDI: ffff8880320a0444
[  150.726198][ T6972] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[  150.734147][ T6972] R10: ffffffff90ab3597 R11: 0000000000000001 R12: 0000000000000002
[  150.742091][ T6972] R13: ffffea0001594a40 R14: 0000000000000000 R15: 00000000000003b4
[  150.750036][ T6972] FS:  00007f0e5d77a6c0(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000
[  150.758946][ T6972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.765511][ T6972] CR2: 00002000000bd038 CR3: 0000000027df4000 CR4: 00000000003526f0
[  150.773458][ T6972] Call Trace:
[  150.776714][ T6972]  <TASK>
[  150.779623][ T6972]  ? rcu_is_watching+0x12/0xc0
[  150.784369][ T6972]  ? __pfx___filemap_add_folio+0x10/0x10
[  150.789983][ T6972]  filemap_add_folio+0x10e/0x220
[  150.794897][ T6972]  ? __pfx_filemap_add_folio+0x10/0x10
[  150.800341][ T6972]  ? css_rstat_updated+0x1c2/0x510
[  150.805436][ T6972]  page_cache_ra_order+0x5a7/0xd70
[  150.810535][ T6972]  filemap_fault+0x152e/0x2930
[  150.815275][ T6972]  ? __pfx_filemap_fault+0x10/0x10
[  150.820366][ T6972]  ? __pfx_filemap_map_pages+0x10/0x10
[  150.825799][ T6972]  __do_fault+0x10a/0x490
[  150.830104][ T6972]  ? __pfx_filemap_map_pages+0x10/0x10
[  150.835536][ T6972]  do_pte_missing+0x1a6/0x3ba0
[  150.840281][ T6972]  ? find_held_lock+0x2b/0x80
[  150.844937][ T6972]  ? __handle_mm_fault+0x14fd/0x2a50
[  150.850206][ T6972]  __handle_mm_fault+0x152a/0x2a50
[  150.855299][ T6972]  ? mt_find+0x3ef/0xa30
[  150.859521][ T6972]  ? __pfx___handle_mm_fault+0x10/0x10
[  150.864959][ T6972]  ? __pfx_mt_find+0x10/0x10
[  150.869531][ T6972]  ? find_vma+0xbf/0x140
[  150.873750][ T6972]  ? __pfx_find_vma+0x10/0x10
[  150.878408][ T6972]  handle_mm_fault+0x589/0xd10
[  150.883152][ T6972]  ? __bpf_trace_exceptions+0x1/0x40
[  150.888420][ T6972]  do_user_addr_fault+0x7a6/0x1370
[  150.893507][ T6972]  ? rcu_is_watching+0x12/0xc0
[  150.898250][ T6972]  exc_page_fault+0x5c/0xb0
[  150.902726][ T6972]  asm_exc_page_fault+0x26/0x30
[  150.907553][ T6972] RIP: 0010:__put_user_nocheck_4+0x3/0x10
[  150.913249][ T6972] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 07 6d 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  150.932832][ T6972] RSP: 0018:ffffc900041bf9f8 EFLAGS: 00050246
[  150.938875][ T6972] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000003c4030
[  150.946823][ T6972] RDX: 0000000000080000 RSI: ffffffff8962ccd3 RDI: 0000000000000005
[  150.954777][ T6972] RBP: ffffc900041bfd98 R08: 0000000000000005 R09: 0000000000000000
[  150.962727][ T6972] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000
[  150.970676][ T6972] R13: 00002000003c4000 R14: ffffc900041bfddc R15: 0000000000000002
[  150.978625][ T6972]  ? ____sys_recvmsg+0x2e3/0x6b0
[  150.983547][ T6972]  ____sys_recvmsg+0x2ee/0x6b0
[  150.988288][ T6972]  ? __pfx_____sys_recvmsg+0x10/0x10
[  150.993552][ T6972]  ? kfree+0x24f/0x4d0
[  150.997863][ T6972]  ? rcu_is_watching+0x12/0xc0
[  151.002607][ T6972]  ___sys_recvmsg+0x114/0x1a0
[  151.007281][ T6972]  ? __pfx____sys_recvmsg+0x10/0x10
[  151.012458][ T6972]  ? __pfx___might_resched+0x10/0x10
[  151.017725][ T6972]  do_recvmmsg+0x2fe/0x750
[  151.022116][ T6972]  ? __pfx_do_recvmmsg+0x10/0x10
[  151.027028][ T6972]  ? __pfx_css_rstat_updated+0x10/0x10
[  151.032474][ T6972]  ? find_held_lock+0x2b/0x80
[  151.037131][ T6972]  __x64_sys_recvmmsg+0x22a/0x280
[  151.042131][ T6972]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  151.047657][ T6972]  do_syscall_64+0xcd/0x4c0
[  151.052137][ T6972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.058003][ T6972] RIP: 0033:0x7f0e5c98ebe9
[  151.062396][ T6972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.081977][ T6972] RSP: 002b:00007f0e5d77a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  151.090363][ T6972] RAX: ffffffffffffffda RBX: 00007f0e5cbb6090 RCX: 00007f0e5c98ebe9
[  151.098309][ T6972] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  151.106254][ T6972] RBP: 00007f0e5ca11e19 R08: 0000000000000000 R09: 0000000000000000
[  151.114200][ T6972] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  151.122145][ T6972] R13: 00007f0e5cbb6128 R14: 00007f0e5cbb6090 R15: 00007fffb5773b78
[  151.130109][ T6972]  </TASK>
[  151.133106][ T6972] Modules linked in:
[  151.137716][ T6972] ---[ end trace 0000000000000000 ]---
[  151.165198][ T6972] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[  151.174813][ T6972] Code: 7a c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 95 7a c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 7e 7a c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 70 7a c8 ff 48
[  151.199133][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'.
[  151.280153][ T5910] usb 4-1: config 0 has no interfaces?
[  151.288016][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.251'.
[  151.345220][ T5910] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.362691][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.382120][ T5910] usb 4-1: config 0 descriptor??
[  151.430992][ T6972] RSP: 0018:ffffc900041bf200 EFLAGS: 00010246
[  151.444969][ T6972] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc9000e050000
[  151.589421][ T6972] RDX: 0000000000080000 RSI: ffffffff81f3189a RDI: ffff8880320a0444
[  151.615118][ T6972] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[  151.637576][ T6972] R10: ffffffff90ab3597 R11: 0000000000000001 R12: 0000000000000002
[  151.982427][ T6972] R13: ffffea0001594a40 R14: 0000000000000000 R15: 00000000000003b4
[  152.159036][ T6972] FS:  00007f0e5d77a6c0(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000
[  152.178239][ T6972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.186111][ T6972] CR2: 000055558680d5c8 CR3: 0000000027df4000 CR4: 00000000003526f0
[  152.197309][ T6972] Kernel panic - not syncing: Fatal exception
[  152.203571][ T6972] Kernel Offset: disabled
[  152.207868][ T6972] Rebooting in 86400 seconds..