last executing test programs:

20m33.469196725s ago: executing program 0 (id=152):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
readv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
ioperm(0x284, 0x7f, 0xe3)
r3 = memfd_secret(0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
fchmod(r3, 0x0)

20m31.950685668s ago: executing program 0 (id=156):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000280)={&(0x7f0000fff000/0x1000)=nil, 0x6, 0x2, 0x80})
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
io_setup(0xc, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x6, 0x0, 0xc8)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10)
r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x8, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
unshare(0x22020400)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
io_uring_enter(r6, 0x26c3, 0xfffffffb, 0x4c, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020)

20m31.644046846s ago: executing program 0 (id=160):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800090300000000000000000a008000fd00ff000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016010000010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x1000c840)

20m30.886104983s ago: executing program 0 (id=163):
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x182)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

20m27.78303786s ago: executing program 0 (id=174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
connect$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {0x1}, 0xfd}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES8, @ANYBLOB="2602c5e1c0eb5d5abdd72090d24220ec4ec3eca8ee54f24162c933b5dc6d2196bcd50cc14387e24217e55fdca5d1867f3b023266a7f8712782db30a17731b9011b23b9bb018abe19ecc244b9d0dabedf7bd49d4b56f6e43dcc726c1ffed133b163301e38967046d5d0f567c1a1e6e5b7803fd7282eb2e0c96b9d2148d9e3e35916f61cab7087783b9212e333be21851a10babb0db1909c42056494adfa7fe54c7468799ed0a32924317938e0b2d8899fafe04b5b1a9c45993395b88253afc8ae61b548d178b2e3278c5dedaf3ae29eacf8311eb0fbee3c9832abec9758f790a9dd36cd18ddc66c60", @ANYBLOB="e926e055c07a59a73f5206bda05495449c731104236f6fd655c5fab72e12c33e28c954594fd19779a0e57a08da1440a91fd113f52992860a00f4cbcfbda7733ac058be4420d2eb76d07ff5aedbc20ebcc47fccc177ed5cd4dbdef5391a823b8ee3e6a992c6dc657a71a7368c0de0f5c01db2ea17cf68cc775262719c89d7d3518c13b724519c284d60de079ae5aba125369b8d4758add1d95524a55882db310548e5a201f3719472f5fbbc03790885ee3c5c3d512634b357f573607e1e3a9eefc405d4ef6aaa71640862a0dbf4e5e8388c8299f6bb29d54df4b85fffb722a5f8d104b135720f146d", @ANYRES64=0x0, @ANYRES32=r2, @ANYRESDEC=r2], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x87}, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0)
ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0)
pread64(r3, &(0x7f0000000740)=""/167, 0xa7, 0xffffffff)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
socket$kcm(0x10, 0x2, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groqm_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'})
readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1000000000000254}, 0x480c0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

20m26.934136735s ago: executing program 0 (id=178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000013000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000100000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x0)

20m25.651272836s ago: executing program 32 (id=178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000013000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a01020000000000100000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x0)

5m28.074023796s ago: executing program 4 (id=3951):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x917, 0x0, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0x1, r5}})
io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e5, 0x2, 0x2, 0xf2})
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0x40045010, &(0x7f0000000300)=0x3)

5m27.139112578s ago: executing program 4 (id=3957):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x4, {0x0, 0x0, 0x0, {0x5, 0x1000, 0x5, 0xa8, 0x6bf2, 0xfffffffffffffffe, 0x6, 0x10, 0x4, 0x8000, 0x180000, 0x0, 0x0, 0xce}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x60840, 0x1d2)
prlimit64(r0, 0xa, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000300))
r3 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r3, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @raw_data="1ddd3aaaabd5e93373caf551db7eec0638fe582d3ba29fc79580ecc908169cb103733d5796c6844405a8be9aff8f20303b641d9bca05e4b6ca870e9c2516635f5af466b5330d5838902378e288eeb6429f6dc3b6e15baa87776a663cebac4d3d1cb9029bb4820a81bf77ea4e812c69283682171f56b7a2f6453bdec6b70421688ad3e0d273ffa9f9fa0996d7eca73dc21f3b5c688f08b0eab844c8f4e52e6d14437f1d1897f63e4e7505cff630091526a64b8567bda1f3a353f3e84b429ce4764e3fca9482f7c7c2"})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)

5m26.174628095s ago: executing program 4 (id=3960):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r2 = getpid()
r3 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f00000005c0))
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000300))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000340)=0x9, 0x2, 0xa0e305fed4c2a9f5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x2a, 0x9, 0x3, {0x5, @esp_ip4_spec={@loopback, @empty, 0x5, 0x40}, {0x0, @empty, 0x1, 0x4, [0xffffffa2, 0x1]}, @sctp_ip4_spec={@remote, @rand_addr=0x64010102, 0xc, 0x4e20, 0x6}, {0x0, @multicast, 0xd, 0x2, [0xe6, 0xa8]}, 0xd40, 0x7}, 0x3, [0x36c4ef47, 0x9, 0x4]}})
write$P9_RRENAMEAT(r1, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

5m24.670741221s ago: executing program 4 (id=3962):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040), 0x49)
listen(r0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), 0x0)
r1 = msgget$private(0x0, 0x9)
r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0xe, @string={0xe, 0x3, "ea5473764c42eaa9dc0af301"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={<r3=>r0, 0x3, 0x3, 0x79})
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000001500)={0x8, @sliced={0xffff, [0x9, 0xa89, 0xd, 0x9, 0x6, 0x68, 0x0, 0x10, 0xa, 0x8, 0x1, 0x4, 0x400, 0x6, 0x7, 0x1, 0xab67, 0xb, 0x1, 0x1, 0x7a7e, 0x6cf3, 0x8, 0x101, 0xf5df, 0x2, 0x80, 0x101, 0x7, 0x6, 0x2, 0x2, 0x9, 0xb908, 0xfff, 0x1ff, 0x1, 0x1ff, 0x81, 0x0, 0x0, 0x6, 0x8, 0x8, 0x2, 0x6, 0xe48b, 0x3], 0x40000000}})
fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, <r4=>0x0})
msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x26}, 0x0, 0x0, 0x8, 0xffffffffe95bf9a6, 0xffffffffff, 0x7, 0xfffffffffffffffc, 0x2, 0x9, 0x100, 0x0, r4})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_usb_connect(0x6, 0x41a, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010002e94eb0206d04af08af0a010203010902080401610240060904bd010d0d0d25030a2401db3e030201020a24050307763948894f090508000004030410070e3add19ec5809050d0240001a8dd0072501010006000905090208000704aa0725010004050009050e100004060005072501000904000905090800020e067fb20761ccab49ca1de714afcd3bea3a9cd25040235c2292b2f42c17d4a162facd42c6cd2f31301dbf4148092aa4fbb7be1ea50678f040a0da6b9ff1707a5150ef3701a9d17d9fc05c086bef3f01905a844f16f85e24d66f6f9381e12b4b9f34ce7e97180a56d9373702316814e7200d7b7c0ab6ed38a0564fe1e98cee515ebdaff2a85780ae55d0a81fc3219e808bbd1704b7b19adcf50deb42f97613d8aaea22f519ca375c39c6fdaf057a3d60ce7a836d48370953fcb70d019838b771d163df9a725cc375476b38b9856e40ff8541f3c51eeab0db4a316c71b66f37b29fec94922f4714a2d5b1f67709050004fc77fd810159090ae7bfac052b78c919b29d959ce591f1947f83c37e5824111ca2065f9249c9fa47c6d92bed33da2a6c92de377f8ebce9594142a41592837e56f6dc3b3d3476ab976b66fbd4a12cb1fc8958c92fafe019a878eeffcbd550090503102000f203020725018000000009050f08100009070c07250182044000072501819a62000905051000040403020108d5a2fe57f4c96706790125c5160d384b678f1c57216df797d2915a3801545bb6b260ddbffc77d909cd8d20cca055f8da8ef506280486adfa470dc0e3d9d520ca30930801a801d0f93811459fbf14c5ab5794b4694cb26ae89b4b215e8744399e0011a8541ec2f4b42bf2e7b920d75a61f02648743df21ffbf55946ee73b7899218cbeeb57ade49a8f8ec74d9ffa575c291392a1e2cd839887803ffc727048cf0cb8e4424c979e90f23803458ce1811521cf54673344ced588ee9a52b60a3311f8c13e24f9589a641cc2764615eaa207a049df7590c8a101b42ecd742e45b9814d51440955e6801caf1c0e91d1168dae4dd004e0028d5b4aa4beb7b0c536314911fb433714e2ad31b77c8beb417482c090506030002000945d70da4f547f18789b9263132fc9c7bb585b436079d6084d77197f86515ec02acb3e98fa53d3dbd68d9c76241f37a465be031edac19a3464fa3e740fe935b714e6588cedf1926c1e38c6a399870b5055e9634629f0aecca6dc9ad65ce56ff64611149afc0e80a38d550288743d84fd4ae30fc3525dec453b075abc5bfe1ca6b25de93a0d9731aed29c8555edc82f215014b83bbf29e899694b11515e6ca016a32fc5813c7457f7c9ca3ef4399a5474df3fbdbb9c60f3be754812b26125700fefb70e80b43b91ee3ca7665b01ffd3d0725018300000109050b0108000a08020725010208060009050700000403faf7072501020705000000000000000000abd2ff098fdd154ca256e5f8510b837c91cc5f2dd8dcacfda2c97c7e4fbcd89dc8393b1ba6ccba0d35729d3f9d1f04698d7b04ee56b34c3ed1e1fde0ac71ed9e191d72188f578242df51ef8da53935a67c707df9fee934f423d3647500eda07dcdd89bbe40b51c5ef0e800d2cf6500ccefb209bc09fb6e4ee585eda9c0d3595347f0eaf02810274d6e96b5a0ee8d63cbe4435b470c654611721489f10c88cfd433844c69d77d22d7a9"], &(0x7f0000000980)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x3, 0xd0, 0x2, 0x20, 0x8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x1, 0xf1, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x3, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x32}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x3, 0x5, 0x1], 0x7e}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x4, 0xf9, 0x6, 0x4, 0x1}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0x40, "038c"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x2, 0x1, "6ec2dac08dcd"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x4, 0x1, "ca28976a"}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x5, "e6b7bf"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x8, 0x1001}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x7f, 0x3, "933baa912195f001"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x4, '-', "eb6210"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfa, 0x2, 0x2, 0x3, 's', "ef45"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x1ff, 0x9, "9305bbd26b9e1a96"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x5, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7, 0x66, 0xe5, {0x7, 0x25, 0x1, 0x1, 0xff, 0x1}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xb2, 0xf6, 0x9, 0xff, 0xa}, 0x39, &(0x7f0000000340)={0x5, 0xf, 0x39, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x8c, 0x5, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "69d4fa8331ce9151e566c1d7adccf2b0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xb, 0x3a, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x40, 0xd, 0x62, 0x4}]}, 0x3, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x40a}}, {0xbb, &(0x7f0000001600)=@string={0xbb, 0x3, "548529fd025882950ec77b5ffcd07ca203ea0d0e950278516a2d77ff24f1656f0fee25caaace37a6eb718df03074f73a7fb77bd2e8ed2fe13e6f60b022310e6e96b3bcd42292d5b63a0c396b3cb6c90bb1e6f5e75428bcc5417b19f26278573ef7f458a1b93ffd1bdaa30450e16a60f9a39a3d040ba5a5792025cc928024034ec0dd26c61da3fda8d740c6951ff638b66e976a0664961652f81364a4ad22bfd5acf918a6d27c8ba655cbe7317343513dee5876e86bb4060237"}}]})
r8 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x10000000})
syz_usb_control_io$uac1(r6, &(0x7f0000000a80)={0x14, &(0x7f0000000a00)={0x40, 0x9, 0x19, {0x19, 0xf, "0fc55336fe3912f8743a353350cbe2dde19a6f5c10c277"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000ac0)={0x40, 0x8, 0x52, "dc8ec89dd2c65dd7b5027ab23cf1d628acc7f100f3925a6b27a0e97702ae2c19e80938b4037f1a3c5f9df1fc1bad5378627897e998180d3765a702d9570f305a8fa2ce28d4b72da0c1b158c720102ae636c3"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000bc0)={0x20, 0x81, 0x3, "17b3f5"}, &(0x7f0000000c00)={0x20, 0x82, 0x1, "cd"}, &(0x7f0000000c40)={0x20, 0x83, 0x3, '{\t\f'}, 0x0, &(0x7f0000000cc0)={0x20, 0x85, 0x3, "04995b"}})
syz_usb_control_io(r2, 0x0, &(0x7f00000013c0)={0x84, &(0x7f0000000f80)={0x40, 0xf, 0x6c, "dae9829cee3e189d4642e3987719a38070496925abcaa55589d5d11651262fcbdc5bce046ff819c4b5162ba13b089dbb9752987605809c38e043be8ed0ab7d27d1f08cb680378b0f7f2079bf0d792969cc7012dbccaeddf4401a1f7800276fd4a7abda7f048e60a2ef6b00cd"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000010c0)={0x20, 0x0, 0x8, {0x0, 0x0, [0xf000]}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0xf2}, &(0x7f0000001180)={0x40, 0xb, 0x2, "009d"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001200)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001240)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001280)={0x40, 0x19, 0x2, "18aa"}, &(0x7f00000012c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001300)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000001340)={0x40, 0x1e, 0x1, 0x2f}, &(0x7f0000001380)={0x40, 0x21, 0x1, 0x2}})
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x5c}}, 0x0)

5m20.310210986s ago: executing program 4 (id=3977):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, &(0x7f0000000cc0), 0x0}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r5], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
dup(0xffffffffffffffff)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

5m18.969073729s ago: executing program 4 (id=3978):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x8300)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000105002, 0x0)
dup(0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

5m3.924663023s ago: executing program 33 (id=3978):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x8300)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000105002, 0x0)
dup(0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

3m9.332118014s ago: executing program 2 (id=4408):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc000000040000000000000000000002030000000f0000000000000b0400548292d9b4eb6ab2d0872dce00000c00000000000001000000002c006902000000000500000d000000000300000002000000030000000300000008000000040000000e0000ff070000000e00000002000000090000000000000c03000000020000000600000501000000030000000b000000070000000000000002000000060000000b0000000300000014d500000900000000000000030000001000000002000000fbffffff0d00000004000000a5000000002e0000"], &(0x7f0000000100)=""/228, 0xd8, 0xe4, 0x0, 0xe439, 0x0, @void, @value}, 0x28)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
fchdir(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
sched_setaffinity(r1, 0x8, &(0x7f0000000380)=0x8001)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4)

3m6.967660879s ago: executing program 2 (id=4417):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m5.997042608s ago: executing program 2 (id=4419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="010023bd7000000020003b00000008000300", @ANYRES32=r1, @ANYBLOB="2b00330030b0f800ffffffffffff080211000000505050505050050010008f0110000d0001000103c8ecb60092003300802009000802110000010802110000005050505050509f0003000000000000006400001003010597054e4091e6e2ec4cef54c9a294df075c2e4b966575a70d860e2f4fa504a10b114a6fc96468b2283b4b439c9f4a3983742e32299e6d3fc6acdf030b25030007072a01042d1a768616020000000000000006004700110000000104"], 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x40, 0x5}}}}}, 0xfffffffffffffc33}, 0x1, 0x0, 0x0, 0x8014}, 0x2400c856)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x58, 0x0, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @private=0xa010100}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

3m4.43573602s ago: executing program 2 (id=4424):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4ba801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async, rerun: 64)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) (rerun: 64)
read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) (async)
close(r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x32, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r2}, 0x18) (async, rerun: 64)
ustat(0xb3c, 0x0) (rerun: 64)
r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x90088, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x10d811, 0x0) (async, rerun: 32)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1a1051, 0x0) (async, rerun: 32)
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x8101) (async)
mount$tmpfs(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
fchdir(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) (async)
r6 = gettid()
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x11, 0x1, @tid=r6}, &(0x7f0000000040)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

3m3.461384561s ago: executing program 2 (id=4428):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x8000000)
r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0)
r2 = syz_open_dev$vcsa(0x0, 0x600000000000000, 0x40)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000a02"], 0x10}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000038000000000000010002fd395000000000000008953352c1319388709d3ca33d42086b42119c722423dc90281862eb92675ebe972daab228e75c8b8bbf6a500609ebde7205355b86aa5d47bb7cf5fc1290618f83b464e1a84d5e879d7976c8e7a0b149eab86cfc81b3a59d6536aa53b852334fe39562337647c793a5b90cccc7bef1a93ea15ff057ab372b3b7e30af002d1b04bb520ee74041e8f84137da9386691d642485c547fd61c37657318ebc8a5c0a56d836654be3237a453efbe77a0e26ad7a9"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5dfa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008090}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="010027bd7000000000001a00000006002100620000007c00228004"], 0xa0}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x53}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r9, &(0x7f0000000280)=""/176, 0xb0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x1, 0x7, {{0x23, 0x4, 0x2, 0x36, 0x8c, 0x64, 0x0, 0x81, 0x29, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x12, 0x0, [{0x4, 0x2}, {0x5, 0x6, "939c38a1"}, {0x7, 0x4, "879c"}]}, @generic={0x89, 0x6, "dba5584e"}, @noop, @timestamp_prespec={0x44, 0x34, 0x42, 0x3, 0xf, [{@rand_addr=0x64010101, 0x6}, {@remote}, {@multicast2, 0x6}, {@private=0xa010102, 0xd9e}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xa90}]}, @cipso={0x86, 0x6, 0x1}, @end, @timestamp_addr={0x44, 0xc, 0x85, 0x1, 0x0, [{@empty, 0x2}]}, @timestamp_prespec={0x44, 0x4, 0xc, 0x3, 0x3}, @timestamp_addr={0x44, 0x14, 0x5d, 0x1, 0x0, [{@local, 0x80}, {@multicast2, 0x2}]}]}}}}})
ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140))
r10 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r10, 0x5606, 0x4)

3m2.262101573s ago: executing program 2 (id=4430):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000000)=0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000700), 0x10000, 0xb5c21415486bcbc2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r2 = syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x54, 0x0, 0x1, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000feff4c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

3m1.919701218s ago: executing program 34 (id=4430):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40405515, &(0x7f0000000000)=0x3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000700), 0x10000, 0xb5c21415486bcbc2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r2 = syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0)
io_uring_enter(r2, 0x54, 0x0, 0x1, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000feff4c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)

7.885267259s ago: executing program 7 (id=5095):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, 0x0, 0x200048cc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r5, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

7.810895551s ago: executing program 3 (id=5096):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x18)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @empty, 0x8006, 0x7800, 0x5f1, 0x7fff}})
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9)
sendfile(r4, r5, 0x0, 0x8000002b)
r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d041cc7000000000001090224000100000000090400000103000000092100000001220500090481"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x6})
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

6.917337707s ago: executing program 6 (id=5097):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r2, 0x0, 0x100000007000000}, 0x38)

6.781633142s ago: executing program 7 (id=5098):
getxattr(0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x2, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e62, 0xffffff01, @mcast1, 0x5}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0x401, @remote, 0x7}}, 0x0, 0x0, 0x2d, 0x0, "805664a5855c5e0e9c139aa48d3c9bf3d97f16ccdc3668e17c697814643109843cec0cc901c64e0d41c5c170fe90c27674cb6791698d895e559cc675e6a062a12731ee3ac3599ab2e99633f92d6fd497"}, 0xd8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x400a101)

6.262057224s ago: executing program 7 (id=5100):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffc0]}, 0x8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0xfffffe2d)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0xf)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]})
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
close_range(r6, 0xffffffffffffffff, 0x0)

5.783797245s ago: executing program 6 (id=5102):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x7, 0x2, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1)

5.679265203s ago: executing program 6 (id=5103):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)

5.655393755s ago: executing program 6 (id=5104):
syz_usb_connect(0x5, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303", @ANYRESOCT], 0x0)
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x14, 0x1e, 0x201}, 0x14}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x18)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000000))
syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x26000)

5.321285929s ago: executing program 7 (id=5105):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x1f00, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

4.197643905s ago: executing program 7 (id=5107):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x115d, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x101000)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff5e, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r3, &(0x7f0000000a80)=[{&(0x7f0000000280)="5275ef", 0x3}], 0x1, 0xffffffff, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44090)
r4 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20)
syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="042c1101c900000000000000020201b401800500"], 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)

4.091219373s ago: executing program 5 (id=5108):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
readv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000040)=""/3, 0x3}], 0x2)
sendmsg$nl_route(r2, 0x0, 0x0)
ioperm(0x284, 0x7f, 0xe3)
r4 = memfd_secret(0x0)
r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil)
shmctl$IPC_RMID(r5, 0x0)
shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x7000)
fchmod(r4, 0x0)

3.800111114s ago: executing program 3 (id=5109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)

3.639176543s ago: executing program 1 (id=5110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x0, 0x10000000, 0x5, 0x4}, 0x1}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0xe4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.454171881s ago: executing program 1 (id=5111):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0)

3.453532392s ago: executing program 6 (id=5112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
syz_pidfd_open(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2, {0x700}}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)

3.438454175s ago: executing program 3 (id=5113):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, &(0x7f0000000cc0), 0x0}, 0x20)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
dup(r5)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.380629842s ago: executing program 3 (id=5114):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x4000000)

3.238590685s ago: executing program 1 (id=5115):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x143000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/fscreate\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x40, 0xfffff02c}, {0x6}]}, 0x10)
read$FUSE(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000240)='zonefs\x00', 0xc00000, &(0x7f0000000280)='attr/fscreate\x00')
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x77, 0x4, 0x0, 0x8000000000000401, 0x3, 0x248a, 0x0, 0x0, 0x200000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)

3.237447085s ago: executing program 3 (id=5116):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x3)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r5], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
dup(r7)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.324313665s ago: executing program 6 (id=5117):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x6, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f0000000540)})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3])
ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080))
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r7, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000001c0)=0x4)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f0000579000/0x2000)=nil, 0x2000})
syz_usb_connect(0x0, 0x3d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001040000000904000002e964c2000905040600000000000705dce6f3"], 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, <r10=>0xffffffffffffffff, 0x1})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f00005ca000/0x2000)=nil, 0x2000, 0xb, 0x2012, r11, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r12], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x44090)
r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001440), 0x69001, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r13, 0x3ba0, &(0x7f0000000480)={0x48, 0x8, r10, 0x0, 0x1fe, 0xe00, &(0x7f0000001480)="31bb4ec77ee0edf5a052e63ec7f79b3ab56d2c206e9c183499df90598e942f13cd9a2903a9d51fe4a07ebe6214d279e733874d16615bcb34cda1a44be72996af769eeebe39142eaf6b3744be4a86853813ae876b741b65c339f76441f04e8c34c428b5c9a6412dfc94af7cc2cb364274c9eb1595a1912dc107b889df1668051e6a27c07cb5f42f2d097acd8b95bf1d07139994056653c3cb83a1f756c5bd79374d81d10fffdd89cf613babd136c2ec27754fde021ecd84f4255881f3272a0f52f3b3ae232b0843e705daf97bd7c625a4f1c7ef9987515c7d33a8790047bb5daab6059e97253c1124b1e097f32cf3be7a04437da98bd749b391d21d374abe25c715604d562a4e163dc3bbc4568d558a04f361846bddc80c988302497546f62c0b1b7fe335af05668f50fc66fc2345f2fb4a13b72e762bcfe8977af9aab95e6d516a98bb0247b4cca89b2896867f81dae584118313c62fce1942952ebc75ff14e583bf1ace2101855cac909c53b2a5e129e6b6b780ecfa98d653aa0105fbd9d5c76906550af7f3f5b8cd612dc3d0823dd1ebf33ada49a82932365b869a0da45db213981589ad56b7b2f897469b1e73b1bd396f413074ad19a18dd095a2d3db75acdae5f5d8d486bff89c59277b0bfb89355d65ed97aadc56e6f81fe6abae5ab6b79e04e26bd7bdae87a68f8f6c9a034bfb7df2adf4dd81c29b57c3f5053a4d05728f148d8770ee7691f96a7c31038fc5285293e3c34c9eeb26e81bb8c95c2b4ae0ca4ccb662e3acfaf651d4798f94439e03d8d1b54fc3faedc43905163d508bd265c41da50aa16b0203a3e34f502124e6c1e8737947ebc95b6f880f6f47bd2660ba0d3d902f3b4256f6b28d4f6b41039c952afe0886b3a351e3c3ce92be7e2b8aec310ba61560bde3954120d15d775c0094eb61cb665c327c25a72ad14ec6731b36fdab273ef785794697a1ad02193dd70619a0389a51219f0a95cd836e9aba775e6ef38e872a1aaad500a9360f1164f3e98ef7a96690248c7b125383de41019f35d1de2a38bd90a5f60c6aa7b6bcc62c951330a49bf9b8932289de5542a143b987c4f01acd2665123d603942cc727757ac16e17ac55f4e39cea7b5da45b13e2b8dc00b60ecb9086f000e197908f81cf3ca8bae652b78bb80357df1e8f5357eff0e5db2541910e645fbcda847e569483c169daea6628f3c942f357757fb327da64cd6cde61e295fa5872bcd6834a06d65a6c253fb7cb004ca971b59e1aece01c544835e48f8ed2c9861aa2390d70dadd02c27b3e308d26f476b34dbdc67444c62ba10ab9646b326bc3ebf0f92c96c64cb6c5f3ed78a3be919a2a983790cf3578602f7b69258b2a6fc58046b08bdbcad58e2c9d7025e20a78fe58520f8e3aafdeb944edfa728a5fba1629dee808bf22e205e797f82c4bb50c40bbe660b899f39944520a58287620c87e766166bcb89f764d81c96f3804c7dbd17408bd7f765aec08dff46ba568073cd45060b646eb3215ec7ff511f769a0e5483f1dca9860ea21767f0fe68c45eb46396e418b25bd1065135e92e74cb8929f526ce293d002c354a9bb22b2dfbfcb5b0612d5f7625a559e85c3ac6f89790f78502df7b02f2affcdbbe2732a8632ae95e7a1a7388b6df19aafb2c6b94e985f26c159e2648ae1ce3cae0d176b060e152d003a439dcbe8463d462eb5e843bfd9c2b1e5b2d89e372100e96443e2e574fefcd2ed899ef6e12cc92dfdc3ff8eeba109fecb0f0f04d55fc148ab026a71976d9479999ee6fec731c144cc106668e703fab82d7061a36035b2221488d6f3d56ff1d552df990ae8a4a34a76bad5b7824bfd38df1065ef61cab967f7dea1a622b06f51b76441a6f218049959e988cc7f7e577a6c40db4dafed7bdc9ea52d4edb79b9d9a55d006d243af481d745ba62f7114d0f8aa14cd4e45899983cfc783c77cdce37cfbbe33fa369147880bfb7dea7e741d6c781eda3b84f383b6f3e0a14e58cf1302d2daebffbba86bebbc30abb16b47ed28f5b8d8a43f9aa9e0692e448a1ef4e16a73507a61cef339c6be89ce95ca399a3139b27bfbd0c93ff276e13345a93ee6a152e03f4dc107f3a862b68f6e6b4267f51903a81cc1b585b211a65307bd5573f13c955c1e179729fb361197bccbd5e4700f49f93a72948634e3b7882724b973b14dc168bed2538f81acd2ddc2bc9265a3729c50f92a1750d058102899cbca79b46cc11aea6363e740ef16587b7c45e685b7a8b7b8c3a7fe83d8e2d81ec86fd7e55d46688fc9002f2abf917062e5d10bf593a4ed80fa891057c8e360efe5cbec03c562cb9d947353cbda57383bf90c471f05e04745ba51b61ab347d04539f43408c3b5a998f71f36dec641fe6e4bb91367ec7d8d6cd3cb730803573b4cad5304ef7c60faa1c3105cea24f4fa65cedec131a814a9ba90d0830eedf9ddb4142bbf83a0609697199eebf1dc85bb5b8a9acc4617788589361d32caa0fa4776f37e11e3081bb3a4f88fdcc86a74d14c66276fe779f36475c902c395901f979a18d1740ac8bd56dcf56365fce544a8e0f7385dbd9e0c45dc93454ede05e8c069fddafd933d661e60f7c05b9efeaf601866eaa31393cad3e77d43401749ddd0690b68f6e785f4fea3dd4e68152ae269a16661f9b64549b974a415d1adc6f63a600d4af9e59473ed15c24bdef127428bf81f86fd4d7e0c0cf2ec29cf90351572e73a557a781322d729e29caddf5b8e49e3e5e27d111cc77c652a9da5d5ecf11ed6ea37b8e4e65ea499f9d084a89054761f46c778d60ef66a235414904a92a566aa9781177dc79aa727ee91aae76fc6f42f68e712db2052fd890ced01237bef531699f640fccef7c76c00d43c0d641be019298f2d18b02e230f1fa97be1ea1a3e9c7b7354d4753a7c5a16cc11efbb8b1ed27fedd9a09dcd4a16e496edb18495473bbc65d00696d572e0168d726d4551b72d6ddaebefa8ffe8eb8ea74e7628d18aac4eefe906217f2f714853834bdcb9098e5aea133787bdf89bd823977e085f00ce42841c2aae50c2d25003fc29cdef9ff63a86ff56a6bf5e4079b99cbe177fcdf83df61cb4f625c4c09adabda8730d343b47123ac7ce8bb2a02a11b76d60cbf12fb4e1d810b5fa4866fe3af57eb95de0f4a2c64b8e47b1ec490d4dac6f0fd8807f1b8de68ec6464c14850a2f5392726a657cb752a9ce1862eaa09edb99eb3361339e47256061296e353fe88c5f0f48adcfd1448ff5147ab72bf079aee5cd5db9a99a7c6dce61026e71bee7eac0c53d59e8b3df92b859dbb7de42c83b06f5351bc185f8f2bdee7576e6997d3c33e1292356803417518eabdc1c4ab9ce48d8225a7a6b6ff345ece2169e1d44ddc265d31d65a1fe424cde95c06ba38db2eaa1b3885c24d4ae406890859a00b6b897a143dd9a9be11701ad56d8c8fea930175980ccc1ca92bba2ead93e07f6e0edaa83217aa6db93c9c0d69bf7e8c95134eda2a9e4c9921f02ffe88adcbeaa9d30d8800187f056c5fb4748ab727c1f985d03e7fa6e32eb82cfd8bc74f3bdee3f9cbbeff224d7be84dc4ec3b18bc09ff618db548ac339284e54aa5479056a25060943ad1e0a8b163af504cbff63421b22559d6bc6c512ea6efa65d205998e16382283dc1bf253937b01166eb5787db87660c0cfcb978d3cc87fed5b0f426275d3efa8ce8fdc43b02793da2db569a65f809007543426ac636d354add7dfef2a630facb07dfe9b68b4fabf0aa08d22fb79c71f2876fdc3fe262f0e69e0bf3bf5809fe8069257e8de47f22cec88632ae148e15647946be3f03acd8481528e84c805b75c1dccd43830a662582d24ff9a826a427b94a3b0f11d96601e5925ecc91946b0984b078503e0a13c88a5d795fa7ac30ce93b477b238cd4092ff7ef9a6ac04f9f8753ef352af50755168119a56437f840e9612cdc17a4f93d3f2fbfd1d61bd40a14730d11238d0bab527f2526597f093070d0a7653660f3c011564691f3ff69e20ec73b0cb9df84b60d11760263735f799465cef870607ac1246f7c38fcdf9f301417ddadc2fc37a8ae59805038beaa98edbdf9f5001f3f7f0e36259b584a9ff6c5526c818c1798432f91e09fc1803d40feec71725122dc7cc7badc5eb67bed50382da58d53632718258c51e1886745d74624ee8ce43ad416908b97f1ccb8e020afedaada0438432a060e8bc6477cfa0d5ba13ca21ea93fbfe977e0e3ab0360aff422bae21c21c61bc3dc895f4ef8c0ad03860aada0eab0e087efa87e34e9269c2d4a3fbdad61fc214dd463c091b28e8265e3c38e53373b577a643e1a2d6e2e477fa1057ede21fb0d29a292780a06f4afde814002b6400e260b1a8fabed0fe20de12fdd4ddcd9863a2f065b6c04d1feb11b1f7c5fda211b17a5a4f2ffa66e15c3c95281ef91a952ae8e6bad9b57fea63f476ddf5cbe4694b662524de66eb49346f5f02b0379ed8f2d41b250d0f340f7cc28b96330778632cf2bb69b9926c055ed352413cfb14bafc57a8bf6dfd7f4fdc9a7d2939e9754d86b5b905387b5dd141cb7354f529c90eb52152bf34cec8cc380aed1e924a124a06d6a68d6df7de9bf699aa170af0f47203d83e89e0ff215e420eaeaa3593a23b41e04a1237b8c3b8123d7e5ce60f4355594d1c2bd2cff8677aa6532019cdb79363452f337bcedb5b12905cf253e22f7e82d7411c55d74525bf761c5529dcae6a7ffeecbdf1b1de19cee2aa18e2a3efebb32b3e023bea2dca94ccd30ce65a0cb0eb030365b71ed1d7762e9136066c006fd32bb9ee2312f6540ebde9d5d96639eba753b9a16ff1a7c25ffbe519e4f2c65abcb1655125f3cb44687455ed339cbb4fa480dc5685ee26a425b3f8732f796467fa230a677c008a3f852ccd45427e68ef972c1b134a43958453687516b805b904ad98b9a0f62bddb786c67572b14a40912776aae6e22ddcd5df40756e264497596de3436089860ba2abd550c14c1d1ecc3e7f86046546ae0661c4e9078f7bc613cdaab5583ace3d212c748c671b39bc94ce61f68b48ae5dfa62698100c06d51fa33d43dde913827fefb558", 0x4})

1.445106922s ago: executing program 1 (id=5118):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r5, 0x80485dc1c126afb3, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

1.439373014s ago: executing program 5 (id=5119):
fsopen(0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0xfffd, 0x101, 0x100, 0x0, 0x4, 0x18, 0x36, "e75867a0aa45de15000000000000000000000028", "39e8799918f836f17fc65c8b001f00"})

1.407962999s ago: executing program 3 (id=5120):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000004c0)={0x1, @pix_mp={0x400, 0x2, 0x41595556, 0x2, 0x7, [{0x2, 0x80000001}, {0x401, 0x800}, {0x58, 0x5}, {0x4, 0x9}, {0x9fc, 0x2}, {0xffffffff, 0x8}, {0x10, 0x5}, {0x0, 0x52f429ad}], 0x9, 0x1, 0x0, 0x1, 0x3}})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
listen(r2, 0x80)
accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @null, @default, @null, @default, @netrom, @bcast, @netrom]}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0xb, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000140)={0x4})
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

1.289821538s ago: executing program 5 (id=5121):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}], 0x7, 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

390.257427ms ago: executing program 7 (id=5122):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (fail_nth: 2)

305.965119ms ago: executing program 5 (id=5123):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_to_bond\x00'})
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe)
close(r6)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x7f, @private2, 0xf1}, 0x1c)
add_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0)

146.117684ms ago: executing program 5 (id=5124):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x300, 0x1c3})

140.970609ms ago: executing program 1 (id=5125):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1f000000, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840)

43.80961ms ago: executing program 5 (id=5126):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz0\x00', {}, 0x0, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
readv(r1, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

0s ago: executing program 1 (id=5127):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x82100, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYRES64=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

b_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1214.109144][   T30] audit: type=1400 audit(1745174608.425:2466): avc:  denied  { setattr } for  pid=22179 comm="syz.3.4613" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1214.241421][ T6839] usb 6-1: USB disconnect, device number 88
[ 1214.298830][   T30] audit: type=1400 audit(1745174608.555:2467): avc:  denied  { write } for  pid=22181 comm="syz.6.4614" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1214.425837][   T30] audit: type=1400 audit(1745174608.555:2468): avc:  denied  { add_name } for  pid=22181 comm="syz.6.4614" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 1214.484646][   T30] audit: type=1400 audit(1745174608.555:2469): avc:  denied  { create } for  pid=22181 comm="syz.6.4614" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 1214.506602][   T30] audit: type=1400 audit(1745174608.555:2470): avc:  denied  { associate } for  pid=22181 comm="syz.6.4614" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1214.827926][T22193] syzkaller1: entered promiscuous mode
[ 1214.833745][T22193] syzkaller1: entered allmulticast mode
[ 1214.840070][ T5842] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1215.420217][ T5842] usb 6-1: Using ep0 maxpacket: 32
[ 1215.451276][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1215.469553][ T5842] usb 6-1: config 0 has no interface number 0
[ 1215.508575][ T5842] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1215.571380][ T5842] usb 6-1: config 0 interface 1 has no altsetting 0
[ 1215.580978][ T5842] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1215.683915][T22207] overlayfs: failed to resolve './bus': -2
[ 1215.766153][T22208] overlayfs: failed to resolve './file1': -2
[ 1216.080478][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.088501][ T5842] usb 6-1: Product: syz
[ 1216.092744][ T5842] usb 6-1: Manufacturer: syz
[ 1216.097333][ T5842] usb 6-1: SerialNumber: syz
[ 1216.106660][ T5842] usb 6-1: config 0 descriptor??
[ 1216.501493][ T5842] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1216.560153][T22218] overlayfs: missing 'lowerdir'
[ 1216.627075][ T5842] cx231xx 6-1:0.1: Failed to read PCB config
[ 1216.651645][ T5842] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[ 1216.799748][   T30] audit: type=1400 audit(1745174611.115:2471): avc:  denied  { connect } for  pid=22189 comm="syz.5.4616" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1216.825957][T22224] net_ratelimit: 11 callbacks suppressed
[ 1216.825968][T22224] IPv6: addrconf: prefix option has invalid lifetime
[ 1216.839941][ T5842] usb 6-1: USB disconnect, device number 89
[ 1216.923713][T22227] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1216.932771][T22227] tipc: Enabled bearer <udp:s>, priority 10
[ 1217.060045][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1217.330152][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1217.859959][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1218.389164][T22237] hub 6-0:1.0: USB hub found
[ 1218.590883][T22237] hub 6-0:1.0: 1 port detected
[ 1218.939971][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1219.989945][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1220.651134][T22261] hub 6-0:1.0: USB hub found
[ 1220.658496][T22261] hub 6-0:1.0: 1 port detected
[ 1220.732602][T22268] team0: Device gtp0 is of different type
[ 1221.020193][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1221.886530][T22274] overlayfs: missing 'lowerdir'
[ 1222.059952][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1222.070240][ T5842] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1222.087550][   T30] audit: type=1800 audit(1745174616.385:2472): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4644" name="SYSV798dd818" dev="tmpfs" ino=0 res=0 errno=0
[ 1222.262077][ T5842] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1222.272833][ T5842] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1222.296887][ T5842] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1222.404654][ T5842] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1222.419712][ T5842] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1222.474390][ T5842] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1222.500172][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1222.536633][ T5842] usb 8-1: Product: syz
[ 1222.554895][ T5842] usb 8-1: Manufacturer: syz
[ 1222.582068][ T5842] cdc_wdm 8-1:1.0: skipping garbage
[ 1222.587287][ T5842] cdc_wdm 8-1:1.0: skipping garbage
[ 1222.661206][ T5842] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1222.667280][ T5842] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1222.980544][   T30] audit: type=1400 audit(1745174617.285:2473): avc:  denied  { mount } for  pid=22288 comm="syz.1.4644" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1223.099956][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1223.207380][ T3079] usb 8-1: USB disconnect, device number 4
[ 1223.978409][T22305] input: syz1 as /devices/virtual/input/input82
[ 1224.115231][T22308] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4648'.
[ 1224.139171][   T30] audit: type=1400 audit(1745174618.445:2474): avc:  denied  { mount } for  pid=22307 comm="syz.7.4648" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1224.139945][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1224.212519][   T30] audit: type=1400 audit(1745174618.445:2475): avc:  denied  { remount } for  pid=22307 comm="syz.7.4648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1225.110936][   T30] audit: type=1400 audit(1745174618.455:2476): avc:  denied  { unmount } for  pid=21519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[ 1225.189972][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1225.666722][T22324] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4653'.
[ 1226.154288][   T30] audit: type=1400 audit(1745174620.475:2477): avc:  denied  { unmount } for  pid=16482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1226.219958][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1226.589814][T22331] tipc: Failed to obtain node identity
[ 1226.595463][T22331] tipc: Enabling of bearer <ib:ipvlan1> rejected, failed to enable media
[ 1226.720050][   T30] audit: type=1400 audit(1745174621.005:2478): avc:  denied  { getopt } for  pid=22329 comm="syz.7.4657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1226.870530][ T5842] libceph: connect (1)[c::]:6789 error -101
[ 1226.885637][ T5842] libceph: mon0 (1)[c::]:6789 connect error
[ 1227.190923][ T5842] libceph: connect (1)[c::]:6789 error -101
[ 1227.218060][ T5842] libceph: mon0 (1)[c::]:6789 connect error
[ 1227.259955][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1227.334809][T22333] ceph: No mds server is up or the cluster is laggy
[ 1227.751119][T22345] input: syz1 as /devices/virtual/input/input83
[ 1228.033661][T22351] overlayfs: failed to resolve './bus': -2
[ 1228.110560][T22352] overlayfs: failed to resolve './file1': -2
[ 1228.309970][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1228.734779][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4663'.
[ 1228.827431][T22343] wireguard0: entered promiscuous mode
[ 1228.837866][T22343] wireguard0: entered allmulticast mode
[ 1229.129966][ T3079] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[ 1229.338789][ T3079] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1229.340016][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1229.492891][ T3079] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1229.506043][T22358] netlink: 'syz.7.4663': attribute type 1 has an invalid length.
[ 1229.506043][ T3079] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1229.548452][ T3079] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1229.557884][T22358] netlink: 'syz.7.4663': attribute type 2 has an invalid length.
[ 1229.565906][ T3079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1229.579941][T22360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1229.589216][ T3079] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1229.596251][ T3079] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1229.604129][ T3079] cdc_wdm 4-1:1.0: skipping garbage
[ 1229.609431][ T3079] cdc_wdm 4-1:1.0: skipping garbage
[ 1229.638841][ T3079] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1229.654030][ T3079] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1230.139423][T22374] overlayfs: missing 'workdir'
[ 1230.379961][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1230.424789][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4669'.
[ 1230.541745][T22378] netlink: 'syz.7.4669': attribute type 10 has an invalid length.
[ 1230.549655][T22378] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4669'.
[ 1230.567079][T22378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.576129][T22378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.584847][T22378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.603650][T22378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1230.641042][T22378] team0: Port device geneve0 added
[ 1230.672674][T22378] CUSE: unknown device info "ÿ
"
[ 1230.677672][T22378] CUSE: zero length info key specified
[ 1231.419960][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1231.836116][T22386] Device name cannot be null; rc = [-22]
[ 1231.955029][ T5842] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1232.238948][   T30] audit: type=1400 audit(1745174626.555:2479): avc:  denied  { setattr } for  pid=22383 comm="syz.7.4672" path="socket:[78052]" dev="sockfs" ino=78052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1232.380079][ T5842] usb 6-1: Using ep0 maxpacket: 8
[ 1232.387409][ T5842] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1232.396937][ T5842] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[ 1232.406527][ T5842] usb 6-1: config 0 has no interface number 0
[ 1232.412752][ T5842] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1232.424536][ T5842] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1232.435515][ T5842] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1232.448792][ T5842] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1232.458036][ T5842] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[ 1232.466596][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1232.473728][ T5842] usb 6-1: Product: syz
[ 1232.478092][ T5842] usb 6-1: Manufacturer: syz
[ 1232.484906][ T5842] usb 6-1: config 0 descriptor??
[ 1232.491021][T22382] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1233.208214][ T5842] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input84
[ 1233.439826][ T3079] usb 4-1: USB disconnect, device number 88
[ 1233.499953][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1233.536668][ T5842] usb 6-1: USB disconnect, device number 90
[ 1233.542721][    C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[ 1234.100152][ T3079] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1234.309935][ T3079] usb 4-1: Using ep0 maxpacket: 8
[ 1234.330474][ T3079] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.378460][ T3079] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1234.539962][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1234.595552][ T3079] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1234.740946][T22409] mkiss: ax0: crc mode is auto.
[ 1235.285948][ T3079] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1235.295087][ T3079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.309159][ T3079] usb 4-1: Product: syz
[ 1235.320907][ T3079] usb 4-1: Manufacturer: syz
[ 1235.326310][ T3079] usb 4-1: SerialNumber: syz
[ 1235.579951][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1235.855737][ T3079] usb 4-1: config 0 descriptor??
[ 1235.866544][ T3079] powermate 4-1:0.0: probe with driver powermate failed with error -22
[ 1235.970168][T22421] overlayfs: missing 'workdir'
[ 1236.551443][T22426] overlayfs: failed to resolve './bus': -2
[ 1236.573544][T22426] overlayfs: failed to resolve './file1': -2
[ 1236.619949][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1237.044501][   T30] audit: type=1326 audit(1745174631.365:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.068361][   T30] audit: type=1326 audit(1745174631.365:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.092459][   T30] audit: type=1326 audit(1745174631.365:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0252d8e169 code=0x7ffc0000
[ 1237.116552][   T30] audit: type=1326 audit(1745174631.365:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.142408][   T30] audit: type=1326 audit(1745174631.365:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.298573][   T30] audit: type=1326 audit(1745174631.365:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.323488][   T30] audit: type=1326 audit(1745174631.365:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.333480][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4684'.
[ 1237.346951][   T30] audit: type=1326 audit(1745174631.365:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.347019][   T30] audit: type=1326 audit(1745174631.365:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.347057][   T30] audit: type=1326 audit(1745174631.365:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.347094][   T30] audit: type=1326 audit(1745174631.365:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.347131][   T30] audit: type=1326 audit(1745174631.365:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.347169][   T30] audit: type=1326 audit(1745174631.365:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.347206][   T30] audit: type=1326 audit(1745174631.365:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0252d85127 code=0x7ffc0000
[ 1237.347243][   T30] audit: type=1326 audit(1745174631.365:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22427 comm="syz.6.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0252d2a359 code=0x7ffc0000
[ 1237.380138][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1237.450633][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1237.497349][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1237.544458][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1237.573613][ T5842] usb 4-1: USB disconnect, device number 89
[ 1237.617272][T22431] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1237.625592][T22431] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1237.660160][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1237.804035][T22437] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1238.370391][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.415264][T22442] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1238.699940][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1238.985674][T22449] ptrace attach of "./syz-executor exec"[22450] was attempted by "./syz-executor exec"[22449]
[ 1239.130058][ T5842] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[ 1239.276069][T22456] netlink: 'syz.1.4690': attribute type 27 has an invalid length.
[ 1239.293437][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1239.305893][ T5842] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1239.319971][ T3079] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1239.327998][ T5842] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1239.343706][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.366025][ T5842] usb 4-1: config 0 descriptor??
[ 1239.379651][T22456] batman_adv: batadv0: Interface deactivated: dummy0
[ 1239.386285][ T5842] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1239.393124][ T5842] dvb-usb: bulk message failed: -22 (3/0)
[ 1239.410671][ T5842] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1239.423839][ T5842] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1239.430575][T22457] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1239.431176][ T5842] usb 4-1: media controller created
[ 1239.446353][T22457] 8021q: adding VLAN 0 to HW filter on device team0
[ 1239.447497][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1239.470765][ T5842] dvb-usb: bulk message failed: -22 (6/0)
[ 1239.482165][ T5842] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1239.485571][T22457] batman_adv: batadv0: Interface activated: dummy0
[ 1239.492263][ T5842] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input85
[ 1239.497073][ T3079] usb 7-1: Using ep0 maxpacket: 8
[ 1239.509839][ T5842] dvb-usb: schedule remote query interval to 150 msecs.
[ 1239.517940][ T3079] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1239.520357][ T5842] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1239.547622][ T3079] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1239.557624][ T3079] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1239.559343][T22457] batadv0: mtu less than device minimum
[ 1239.567700][ T3079] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1239.567822][ T3079] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1239.574520][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.606362][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.617187][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.627971][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.638746][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.649523][T22457] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1239.667728][T22447] dvb-usb: bulk message failed: -22 (2/0)
[ 1239.674884][ T5842] usb 4-1: USB disconnect, device number 90
[ 1239.678195][ T3079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.695294][ T5842] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1239.945906][ T3079] usb 7-1: usb_control_msg returned -32
[ 1239.954616][ T3079] usbtmc 7-1:16.0: can't read capabilities
[ 1240.783872][T22473] veth0_vlan: entered allmulticast mode
[ 1240.793107][T22473] veth0_vlan: left promiscuous mode
[ 1240.800738][T22473] veth0_vlan: entered promiscuous mode
[ 1240.821647][T22473] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4694'.
[ 1241.139527][T22475] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[ 1241.194918][T22475] /dev/nullb0: Can't open blockdev
[ 1241.953200][T22487] overlayfs: failed to resolve './bus': -2
[ 1242.028919][T22488] overlayfs: failed to resolve './file1': -2
[ 1242.478653][T16406] usb 7-1: USB disconnect, device number 9
[ 1242.860082][    C0] net_ratelimit: 17 callbacks suppressed
[ 1242.860095][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1242.940150][ T5842] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1243.022819][T22507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1243.409245][T22509] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1243.590227][ T5842] usb 6-1: Using ep0 maxpacket: 16
[ 1243.681978][ T5842] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1243.744419][ T5842] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1243.769767][ T5842] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1243.784704][ T5842] usb 6-1: config 1 has no interface number 1
[ 1243.790896][   T30] kauditd_printk_skb: 12 callbacks suppressed
[ 1243.790909][   T30] audit: type=1326 audit(1745174638.105:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.6.4705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0252d8e169 code=0x0
[ 1243.819905][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1243.826655][ T5842] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1243.844990][ T5842] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[ 1243.869974][ T5842] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1243.885939][ T5842] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1243.895295][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.898571][T22517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=54 sclass=netlink_tcpdiag_socket pid=22517 comm=syz.6.4705
[ 1243.903349][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1243.936158][ T5842] usb 6-1: Product: syz
[ 1243.942880][ T5842] usb 6-1: Manufacturer: syz
[ 1243.947741][ T5842] usb 6-1: SerialNumber: syz
[ 1243.992925][T22520] fuse: Unknown parameter 'ÿÿ'
[ 1244.047944][T22516] input: syz1 as /devices/virtual/input/input86
[ 1244.211009][ T5842] usb 6-1: USB disconnect, device number 91
[ 1244.385875][T22524] IPv4: Oversized IP packet from 172.20.20.24
[ 1244.392348][    C1] IPv4: Oversized IP packet from 172.20.20.24
[ 1244.398583][    C1] IPv4: Oversized IP packet from 172.20.20.24
[ 1244.789340][T22528] netlink: 'syz.6.4710': attribute type 10 has an invalid length.
[ 1244.818850][T22528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1244.939944][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1245.007312][T22530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4711'.
[ 1245.183910][T22530] netlink: 'syz.5.4711': attribute type 1 has an invalid length.
[ 1245.237535][T22530] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1245.292591][T22538] bond2: (slave gretap1): making interface the new active one
[ 1245.357183][T22538] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1245.443321][   T30] audit: type=1400 audit(1745174639.755:2508): avc:  denied  { mount } for  pid=22542 comm="syz.7.4715" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1245.553680][   T30] audit: type=1400 audit(1745174639.875:2509): avc:  denied  { unmount } for  pid=21519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 1245.980153][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1246.608695][ T3079] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1246.782127][ T3079] usb 6-1: Using ep0 maxpacket: 8
[ 1246.908022][T22579] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1246.959221][ T3079] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1246.988730][ T3079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.009056][ T3079] usb 6-1: Product: syz
[ 1247.019944][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1247.027309][ T3079] usb 6-1: Manufacturer: syz
[ 1247.037412][ T3079] usb 6-1: SerialNumber: syz
[ 1247.073805][ T3079] usb 6-1: config 0 descriptor??
[ 1248.059965][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1248.177177][ T3079] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110
[ 1248.210025][ T3079] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1248.880551][   T30] audit: type=1400 audit(1745174643.155:2510): avc:  denied  { audit_write } for  pid=22609 comm="syz.3.4736" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 1249.100007][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1249.107427][   T30] audit: type=1400 audit(1745174643.425:2511): avc:  denied  { ioctl } for  pid=22614 comm="syz.1.4739" path="socket:[78441]" dev="sockfs" ino=78441 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1249.134675][  T971] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1249.158687][T22619] tipc: Started in network mode
[ 1249.250990][T22619] tipc: Node identity 4, cluster identity 4711
[ 1249.257194][T22619] tipc: Node number set to 4
[ 1249.796159][  T971] usb 8-1: Using ep0 maxpacket: 8
[ 1249.806908][  T971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1249.825352][  T971] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1249.855649][  T971] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1249.871754][T22623] wireguard0: entered promiscuous mode
[ 1249.882243][T22623] wireguard0: entered allmulticast mode
[ 1249.910436][ T5842] usb 6-1: USB disconnect, device number 92
[ 1249.925084][  T971] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1249.951899][  T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.140041][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1250.201082][  T971] usb 8-1: Product: syz
[ 1250.218056][  T971] usb 8-1: Manufacturer: syz
[ 1250.240508][  T971] usb 8-1: SerialNumber: syz
[ 1250.284848][  T971] usb 8-1: config 0 descriptor??
[ 1250.292922][  T971] usb 8-1: can't set config #0, error -71
[ 1250.306473][  T971] usb 8-1: USB disconnect, device number 5
[ 1251.030005][T16406] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1251.161707][T16406] usb 7-1: device descriptor read/64, error -71
[ 1251.179939][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1251.282332][T22643] syzkaller1: entered promiscuous mode
[ 1251.304564][T22643] syzkaller1: entered allmulticast mode
[ 1251.331895][T22645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4746'.
[ 1251.400028][T16406] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1251.498218][T22649] netlink: 'syz.7.4749': attribute type 27 has an invalid length.
[ 1251.629950][T16406] usb 7-1: device descriptor read/64, error -71
[ 1251.741667][T16406] usb usb7-port1: attempt power cycle
[ 1251.826883][T22653] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1252.130004][T16406] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1252.162757][T16406] usb 7-1: device descriptor read/8, error -71
[ 1252.229956][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1252.349953][T22649] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.358985][T22649] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.787682][T16406] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1252.818102][T22649] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.844105][T22649] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.898255][T16406] usb 7-1: device descriptor read/8, error -71
[ 1253.036978][T16406] usb usb7-port1: unable to enumerate USB device
[ 1253.228113][T22650] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1253.243382][T22650] 8021q: adding VLAN 0 to HW filter on device team0
[ 1253.258414][T22650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1253.273897][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1254.300289][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1255.349938][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1256.379941][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1256.685317][T22697] overlayfs: failed to resolve './bus': -2
[ 1256.760343][T22698] overlayfs: failed to resolve './file1': -2
[ 1257.192598][T22708] FAULT_INJECTION: forcing a failure.
[ 1257.192598][T22708] name failslab, interval 1, probability 0, space 0, times 0
[ 1257.205332][T22708] CPU: 1 UID: 0 PID: 22708 Comm: syz.3.4765 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1257.205356][T22708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1257.205367][T22708] Call Trace:
[ 1257.205373][T22708]  <TASK>
[ 1257.205380][T22708]  dump_stack_lvl+0x16c/0x1f0
[ 1257.205409][T22708]  should_fail_ex+0x512/0x640
[ 1257.205427][T22708]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1257.205456][T22708]  should_failslab+0xc2/0x120
[ 1257.205476][T22708]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1257.205502][T22708]  ? io_uring_alloc_task_context+0xa1/0x690
[ 1257.205529][T22708]  io_uring_alloc_task_context+0xa1/0x690
[ 1257.205554][T22708]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1257.205576][T22708]  ? get_pid_task+0x106/0x250
[ 1257.205602][T22708]  __io_uring_add_tctx_node+0x2dd/0x500
[ 1257.205624][T22708]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1257.205649][T22708]  ? __fget_files+0x20e/0x3c0
[ 1257.205669][T22708]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1257.205693][T22708]  __do_sys_io_uring_enter+0x123a/0x1630
[ 1257.205724][T22708]  ? __fget_files+0x20e/0x3c0
[ 1257.205740][T22708]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1257.205768][T22708]  ? fput+0x70/0xf0
[ 1257.205788][T22708]  ? ksys_write+0x1b9/0x240
[ 1257.205804][T22708]  ? __pfx_ksys_write+0x10/0x10
[ 1257.205826][T22708]  do_syscall_64+0xcd/0x260
[ 1257.205851][T22708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1257.205867][T22708] RIP: 0033:0x7fda6f38e169
[ 1257.205883][T22708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1257.205899][T22708] RSP: 002b:00007fda6d1f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1257.205917][T22708] RAX: ffffffffffffffda RBX: 00007fda6f5b6080 RCX: 00007fda6f38e169
[ 1257.205928][T22708] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003
[ 1257.205938][T22708] RBP: 00007fda6d1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1257.205948][T22708] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1257.205958][T22708] R13: 0000000000000001 R14: 00007fda6f5b6080 R15: 00007ffdd796fdd8
[ 1257.205981][T22708]  </TASK>
[ 1257.429953][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1258.459936][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1258.564067][T22720] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4768'.
[ 1258.753959][T22720] netlink: 'syz.3.4768': attribute type 27 has an invalid length.
[ 1259.499976][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1260.087224][T22720] tipc: Resetting bearer <eth:gre0>
[ 1260.540036][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1260.597817][T22720] tipc: Resetting bearer <eth:team0>
[ 1260.621589][T22720] batman_adv: batadv0: Interface deactivated: dummy0
[ 1260.632734][T22720] veth0_vlan: left allmulticast mode
[ 1260.724842][T22724] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1260.749684][T22724] 8021q: adding VLAN 0 to HW filter on device team0
[ 1260.756757][T22724] tipc: Resetting bearer <eth:team0>
[ 1260.763111][T22724] batman_adv: batadv0: Interface activated: dummy0
[ 1260.769642][T22724] batadv0: mtu less than device minimum
[ 1260.776291][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.787531][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.798884][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.810160][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.821515][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.832834][T22724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1260.855742][T22039] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[ 1261.590156][T22033] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1261.610642][T22039] usb 7-1: device descriptor read/all, error -71
[ 1261.730860][T22757] input: syz1 as /devices/virtual/input/input87
[ 1261.760210][T22033] usb 8-1: Using ep0 maxpacket: 8
[ 1261.776051][T22033] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1261.803221][T22033] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1261.904995][T22759] wireguard0: entered promiscuous mode
[ 1261.911973][T22759] wireguard0: entered allmulticast mode
[ 1261.933942][T22033] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1262.022027][T22767] overlayfs: failed to resolve './bus': -2
[ 1262.103029][T22768] overlayfs: failed to resolve './file1': -2
[ 1262.396651][T22033] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1262.405862][T22033] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.429421][T22033] usb 8-1: Product: syz
[ 1262.446425][T22033] usb 8-1: Manufacturer: syz
[ 1262.467183][T22033] usb 8-1: SerialNumber: syz
[ 1262.504785][T22033] usb 8-1: config 0 descriptor??
[ 1262.593800][T22774] netlink: 'syz.5.4780': attribute type 1 has an invalid length.
[ 1262.602354][T22774] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4780'.
[ 1262.647606][   T30] audit: type=1400 audit(1745174656.965:2512): avc:  denied  { bind } for  pid=22776 comm="syz.5.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1262.782272][T22033] powermate 8-1:0.0: probe with driver powermate failed with error -22
[ 1263.059792][T22786] FAULT_INJECTION: forcing a failure.
[ 1263.059792][T22786] name failslab, interval 1, probability 0, space 0, times 0
[ 1263.072772][T22786] CPU: 0 UID: 0 PID: 22786 Comm: syz.1.4784 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1263.072796][T22786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1263.072807][T22786] Call Trace:
[ 1263.072814][T22786]  <TASK>
[ 1263.072821][T22786]  dump_stack_lvl+0x16c/0x1f0
[ 1263.072848][T22786]  should_fail_ex+0x512/0x640
[ 1263.072866][T22786]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1263.072880][T22786]  should_failslab+0xc2/0x120
[ 1263.072892][T22786]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1263.072903][T22786]  ? __alloc_skb+0x2b2/0x380
[ 1263.072918][T22786]  __alloc_skb+0x2b2/0x380
[ 1263.072929][T22786]  ? __pfx___alloc_skb+0x10/0x10
[ 1263.072940][T22786]  ? __pfx_rtnl_fdb_add+0x10/0x10
[ 1263.072959][T22786]  netlink_ack+0x15d/0xb80
[ 1263.072978][T22786]  netlink_rcv_skb+0x347/0x440
[ 1263.072993][T22786]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1263.073008][T22786]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1263.073030][T22786]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1263.073046][T22786]  netlink_unicast+0x53a/0x7f0
[ 1263.073062][T22786]  ? __pfx_netlink_unicast+0x10/0x10
[ 1263.073080][T22786]  netlink_sendmsg+0x8d1/0xdd0
[ 1263.073097][T22786]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1263.073117][T22786]  ____sys_sendmsg+0xa95/0xc70
[ 1263.073133][T22786]  ? copy_msghdr_from_user+0x10a/0x160
[ 1263.073151][T22786]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1263.073173][T22786]  ___sys_sendmsg+0x134/0x1d0
[ 1263.073187][T22786]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1263.073216][T22786]  __sys_sendmsg+0x16d/0x220
[ 1263.073229][T22786]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1263.073246][T22786]  ? rcu_is_watching+0x12/0xc0
[ 1263.073263][T22786]  do_syscall_64+0xcd/0x260
[ 1263.073278][T22786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1263.073289][T22786] RIP: 0033:0x7f453118e169
[ 1263.073298][T22786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1263.073309][T22786] RSP: 002b:00007f4531f20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1263.073319][T22786] RAX: ffffffffffffffda RBX: 00007f45313b5fa0 RCX: 00007f453118e169
[ 1263.073326][T22786] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1263.073332][T22786] RBP: 00007f4531f20090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.073338][T22786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.073344][T22786] R13: 0000000000000000 R14: 00007f45313b5fa0 R15: 00007ffe8ebcb748
[ 1263.073357][T22786]  </TASK>
[ 1263.659946][    C0] net_ratelimit: 16 callbacks suppressed
[ 1263.659963][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1263.767276][ T6839] usb 8-1: USB disconnect, device number 6
[ 1264.044511][T22796] Cannot find del_set index 4 as target
[ 1264.662888][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4790'.
[ 1264.699932][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1265.022942][   T30] audit: type=1326 audit(1745174659.265:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22810 comm="syz.3.4794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6f38e169 code=0x0
[ 1265.166402][T22817] Invalid ELF header magic: != ELF
[ 1265.509758][   T30] audit: type=1400 audit(1745174659.475:2514): avc:  denied  { module_load } for  pid=22812 comm="syz.5.4792" path="/299/bus" dev="tmpfs" ino=1671 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[ 1265.532878][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1265.607602][   T30] audit: type=1400 audit(1745174659.925:2515): avc:  denied  { append } for  pid=22820 comm="syz.7.4796" name="nbd7" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1265.631239][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1265.723923][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4796'.
[ 1265.739963][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1266.549263][T22835] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4796'.
[ 1266.563729][T22835] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4796'.
[ 1266.592722][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4800'.
[ 1266.779940][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1267.061671][T22844] hub 6-0:1.0: USB hub found
[ 1267.075439][T22844] hub 6-0:1.0: 1 port detected
[ 1267.241339][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4804'.
[ 1267.288332][T22851] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 2, id = 0
[ 1267.819973][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1268.344793][T22865] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[ 1268.859967][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1269.088746][T22876] netlink: 'syz.6.4814': attribute type 10 has an invalid length.
[ 1269.265138][T22883] FAULT_INJECTION: forcing a failure.
[ 1269.265138][T22883] name failslab, interval 1, probability 0, space 0, times 0
[ 1269.281851][T22883] CPU: 0 UID: 0 PID: 22883 Comm: syz.6.4817 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1269.281868][T22883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1269.281874][T22883] Call Trace:
[ 1269.281878][T22883]  <TASK>
[ 1269.281883][T22883]  dump_stack_lvl+0x16c/0x1f0
[ 1269.281901][T22883]  should_fail_ex+0x512/0x640
[ 1269.281913][T22883]  ? fs_reclaim_acquire+0xae/0x150
[ 1269.281929][T22883]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1269.281944][T22883]  should_failslab+0xc2/0x120
[ 1269.281956][T22883]  __kmalloc_noprof+0xd2/0x510
[ 1269.281970][T22883]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1269.281987][T22883]  ? tomoyo_profile+0x47/0x60
[ 1269.281998][T22883]  tomoyo_path_number_perm+0x245/0x580
[ 1269.282011][T22883]  ? tomoyo_path_number_perm+0x237/0x580
[ 1269.282026][T22883]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1269.282040][T22883]  ? find_held_lock+0x2b/0x80
[ 1269.282065][T22883]  ? find_held_lock+0x2b/0x80
[ 1269.282078][T22883]  ? hook_file_ioctl_common+0x145/0x410
[ 1269.282091][T22883]  ? __fget_files+0x20e/0x3c0
[ 1269.282103][T22883]  security_file_ioctl+0x9b/0x240
[ 1269.282121][T22883]  __x64_sys_ioctl+0xb7/0x200
[ 1269.282137][T22883]  do_syscall_64+0xcd/0x260
[ 1269.282152][T22883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.282163][T22883] RIP: 0033:0x7f0252d8e169
[ 1269.282172][T22883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1269.282183][T22883] RSP: 002b:00007f0253be4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1269.282193][T22883] RAX: ffffffffffffffda RBX: 00007f0252fb5fa0 RCX: 00007f0252d8e169
[ 1269.282200][T22883] RDX: 0000200000000080 RSI: 00000000c010640c RDI: 0000000000000003
[ 1269.282206][T22883] RBP: 00007f0253be4090 R08: 0000000000000000 R09: 0000000000000000
[ 1269.282212][T22883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1269.282218][T22883] R13: 0000000000000000 R14: 00007f0252fb5fa0 R15: 00007ffc6a896e38
[ 1269.282231][T22883]  </TASK>
[ 1269.282236][T22883] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1269.899975][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1270.939945][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1271.319929][   T30] audit: type=1400 audit(1745174665.635:2516): avc:  denied  { search } for  pid=22898 comm="syz.3.4822" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 1271.979927][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1272.104659][T22909] xt_policy: neither incoming nor outgoing policy selected
[ 1272.810459][ T6839] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1273.000183][ T6839] usb 4-1: Using ep0 maxpacket: 32
[ 1273.019971][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1273.382624][ T6839] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1273.430058][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 245, changing to 11
[ 1273.450148][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 58613, setting to 1024
[ 1273.472580][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1273.488301][T18317] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1273.496621][ T6839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1273.513157][ T6839] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1273.529905][ T6839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.545768][ T6839] usb 4-1: Product: syz
[ 1273.555869][ T6839] usb 4-1: Manufacturer: syz
[ 1273.563818][ T6839] usb 4-1: SerialNumber: syz
[ 1273.571897][ T6839] usb 4-1: config 0 descriptor??
[ 1273.620560][  T971] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1273.780013][  T971] usb 7-1: Using ep0 maxpacket: 8
[ 1273.791060][  T971] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1273.807628][  T971] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1273.817787][  T971] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1273.833147][  T971] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1273.853742][  T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.861890][  T971] usb 7-1: Product: syz
[ 1273.866090][  T971] usb 7-1: Manufacturer: syz
[ 1273.873901][  T971] usb 7-1: SerialNumber: syz
[ 1273.885153][  T971] usb 7-1: config 0 descriptor??
[ 1273.893318][  T971] powermate 7-1:0.0: probe with driver powermate failed with error -22
[ 1273.993900][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.006678][ T6839] input input88: Device does not respond to id packet M
[ 1274.022842][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.037137][ T6839] input input88: Device does not respond to id packet P
[ 1274.052861][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.059935][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1274.074898][ T6839] input input88: Device does not respond to id packet B
[ 1274.089587][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.106595][ T6839] input input88: Device does not respond to id packet N
[ 1274.114766][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.128727][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.148155][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.157733][ T6839] iforce 4-1:0.0: usb_submit_urb failed: -71
[ 1274.167571][ T6839] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88
[ 1274.189713][ T6839] usb 4-1: USB disconnect, device number 91
[ 1274.565546][   T30] audit: type=1400 audit(1745174668.885:2517): avc:  denied  { bind } for  pid=22932 comm="syz.7.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1275.011864][   T30] audit: type=1400 audit(1745174669.335:2518): avc:  denied  { create } for  pid=22945 comm="syz.5.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[ 1275.099937][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1275.597548][T16485] Bluetooth: hci5: command 0x1003 tx timeout
[ 1275.610644][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1275.712917][  T971] usb 7-1: USB disconnect, device number 16
[ 1276.139945][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1277.179940][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1278.220003][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1279.259958][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1279.892846][T22985] netlink: 'syz.1.4847': attribute type 1 has an invalid length.
[ 1280.272607][T22994] FAULT_INJECTION: forcing a failure.
[ 1280.272607][T22994] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1280.288379][T22994] CPU: 0 UID: 0 PID: 22994 Comm: syz.1.4851 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1280.288405][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1280.288416][T22994] Call Trace:
[ 1280.288422][T22994]  <TASK>
[ 1280.288430][T22994]  dump_stack_lvl+0x16c/0x1f0
[ 1280.288457][T22994]  should_fail_ex+0x512/0x640
[ 1280.288480][T22994]  _copy_to_user+0x32/0xd0
[ 1280.288502][T22994]  simple_read_from_buffer+0xcb/0x170
[ 1280.288530][T22994]  proc_fail_nth_read+0x197/0x270
[ 1280.288557][T22994]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1280.288582][T22994]  ? rw_verify_area+0xcf/0x680
[ 1280.288603][T22994]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1280.288627][T22994]  vfs_read+0x1de/0xc70
[ 1280.288652][T22994]  ? __pfx___mutex_lock+0x10/0x10
[ 1280.288673][T22994]  ? __pfx_vfs_read+0x10/0x10
[ 1280.288703][T22994]  ? __fget_files+0x20e/0x3c0
[ 1280.288725][T22994]  ksys_read+0x12a/0x240
[ 1280.288738][T22994]  ? __pfx_ksys_read+0x10/0x10
[ 1280.288768][T22994]  do_syscall_64+0xcd/0x260
[ 1280.288791][T22994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.288808][T22994] RIP: 0033:0x7f453118cb7c
[ 1280.288820][T22994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1280.288835][T22994] RSP: 002b:00007f4531f20030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1280.288857][T22994] RAX: ffffffffffffffda RBX: 00007f45313b5fa0 RCX: 00007f453118cb7c
[ 1280.288868][T22994] RDX: 000000000000000f RSI: 00007f4531f200a0 RDI: 0000000000000004
[ 1280.288877][T22994] RBP: 00007f4531f20090 R08: 0000000000000000 R09: 0000000000000000
[ 1280.288886][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1280.288895][T22994] R13: 0000000000000000 R14: 00007f45313b5fa0 R15: 00007ffe8ebcb748
[ 1280.288917][T22994]  </TASK>
[ 1280.470444][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1280.491892][T22997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4849'.
[ 1280.596944][T23000] syzkaller1: entered promiscuous mode
[ 1280.606050][T23000] syzkaller1: entered allmulticast mode
[ 1281.499931][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1281.710976][T23011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1282.539922][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1283.242397][   T30] audit: type=1400 audit(1745174677.565:2519): avc:  denied  { map } for  pid=23026 comm="syz.3.4862" path="socket:[81060]" dev="sockfs" ino=81060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1283.416329][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4864'.
[ 1283.579951][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1283.617346][T23034] bond3: entered promiscuous mode
[ 1283.649993][T23034] bond3: entered allmulticast mode
[ 1284.052146][T23050] syzkaller1: entered promiscuous mode
[ 1284.062906][T23050] syzkaller1: entered allmulticast mode
[ 1284.350066][ T6839] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1284.600364][ T6839] usb 7-1: Using ep0 maxpacket: 32
[ 1284.613407][ T6839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1284.619925][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1284.649663][ T6839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1284.678085][ T6839] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1284.893722][ T6839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.903784][ T6839] usb 7-1: config 0 descriptor??
[ 1285.659985][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1285.708694][ T6839] hub 7-1:0.0: USB hub found
[ 1285.719124][ T6839] hub 7-1:0.0: 1 port detected
[ 1286.148629][ T5830] Bluetooth: hci0: unexpected event for opcode 0x0804
[ 1286.164194][   T30] audit: type=1400 audit(1745174680.485:2520): avc:  denied  { getopt } for  pid=23052 comm="syz.6.4870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1286.287180][T23074] FAULT_INJECTION: forcing a failure.
[ 1286.287180][T23074] name failslab, interval 1, probability 0, space 0, times 0
[ 1286.300428][T23074] CPU: 0 UID: 0 PID: 23074 Comm: syz.1.4875 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1286.300452][T23074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1286.300463][T23074] Call Trace:
[ 1286.300469][T23074]  <TASK>
[ 1286.300475][T23074]  dump_stack_lvl+0x16c/0x1f0
[ 1286.300504][T23074]  should_fail_ex+0x512/0x640
[ 1286.300522][T23074]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1286.300550][T23074]  should_failslab+0xc2/0x120
[ 1286.300569][T23074]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1286.300594][T23074]  ? io_wq_create+0xcc/0xa30
[ 1286.300623][T23074]  io_wq_create+0xcc/0xa30
[ 1286.300651][T23074]  io_uring_alloc_task_context+0x211/0x690
[ 1286.300676][T23074]  ? __pfx_io_uring_alloc_task_context+0x10/0x10
[ 1286.300698][T23074]  ? __pfx_io_wq_submit_work+0x10/0x10
[ 1286.300722][T23074]  ? __pfx_io_wq_free_work+0x10/0x10
[ 1286.300759][T23074]  __io_uring_add_tctx_node+0x2dd/0x500
[ 1286.300782][T23074]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1286.300807][T23074]  ? __fget_files+0x20e/0x3c0
[ 1286.300825][T23074]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1286.300848][T23074]  __do_sys_io_uring_enter+0x123a/0x1630
[ 1286.300878][T23074]  ? __fget_files+0x20e/0x3c0
[ 1286.300894][T23074]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1286.300923][T23074]  ? fput+0x70/0xf0
[ 1286.300943][T23074]  ? ksys_write+0x1b9/0x240
[ 1286.300957][T23074]  ? __pfx_ksys_write+0x10/0x10
[ 1286.300970][T23074]  ? rcu_is_watching+0x12/0xc0
[ 1286.300998][T23074]  do_syscall_64+0xcd/0x260
[ 1286.301024][T23074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1286.301042][T23074] RIP: 0033:0x7f453118e169
[ 1286.301057][T23074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1286.301074][T23074] RSP: 002b:00007f452ef91038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1286.301090][T23074] RAX: ffffffffffffffda RBX: 00007f45313b6080 RCX: 00007f453118e169
[ 1286.301100][T23074] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003
[ 1286.301110][T23074] RBP: 00007f452ef91090 R08: 0000000000000000 R09: 0000000000000000
[ 1286.301121][T23074] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1286.301131][T23074] R13: 0000000000000001 R14: 00007f45313b6080 R15: 00007ffe8ebcb748
[ 1286.301154][T23074]  </TASK>
[ 1286.700032][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1287.232436][ T6839] hub 7-1:0.0: activate --> -90
[ 1287.336490][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4877'.
[ 1287.740016][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1287.797009][T23091] FAULT_INJECTION: forcing a failure.
[ 1287.797009][T23091] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1287.817362][T23069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1287.830284][T23091] CPU: 1 UID: 0 PID: 23091 Comm: syz.7.4878 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1287.830303][T23091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1287.830310][T23091] Call Trace:
[ 1287.830314][T23091]  <TASK>
[ 1287.830319][T23091]  dump_stack_lvl+0x16c/0x1f0
[ 1287.830337][T23091]  should_fail_ex+0x512/0x640
[ 1287.830351][T23091]  _copy_from_iter+0x2a4/0x15b0
[ 1287.830365][T23091]  ? __alloc_skb+0x200/0x380
[ 1287.830378][T23091]  ? __pfx__copy_from_iter+0x10/0x10
[ 1287.830391][T23091]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1287.830413][T23091]  netlink_sendmsg+0x829/0xdd0
[ 1287.830429][T23091]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1287.830449][T23091]  ____sys_sendmsg+0xa95/0xc70
[ 1287.830466][T23091]  ? copy_msghdr_from_user+0x10a/0x160
[ 1287.830478][T23091]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1287.830501][T23091]  ___sys_sendmsg+0x134/0x1d0
[ 1287.830514][T23091]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1287.830543][T23091]  __sys_sendmsg+0x16d/0x220
[ 1287.830557][T23091]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1287.830578][T23091]  do_syscall_64+0xcd/0x260
[ 1287.830594][T23091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.830605][T23091] RIP: 0033:0x7f3818d8e169
[ 1287.830615][T23091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1287.830625][T23091] RSP: 002b:00007f3816bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1287.830635][T23091] RAX: ffffffffffffffda RBX: 00007f3818fb6160 RCX: 00007f3818d8e169
[ 1287.830642][T23091] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000006
[ 1287.830648][T23091] RBP: 00007f3816bf6090 R08: 0000000000000000 R09: 0000000000000000
[ 1287.830654][T23091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1287.830660][T23091] R13: 0000000000000001 R14: 00007f3818fb6160 R15: 00007fff80c7c538
[ 1287.830673][T23091]  </TASK>
[ 1288.019027][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1288.108674][T23069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1288.145908][  T971] usb 7-1: USB disconnect, device number 17
[ 1288.148991][ T6839] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[ 1288.456184][T23106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1288.779927][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1289.819938][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1289.893635][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4889'.
[ 1289.934576][T23128] netlink: 'syz.6.4889': attribute type 27 has an invalid length.
[ 1289.990098][ T6839] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1290.152023][ T6839] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1290.161749][ T5880] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1290.169324][ T6839] usb 4-1: New USB device strings: Mfr=33, Product=0, SerialNumber=0
[ 1290.184253][ T6839] usb 4-1: Manufacturer: syz
[ 1290.198747][ T6839] usb 4-1: config 0 descriptor??
[ 1290.320728][ T5880] usb 6-1: Using ep0 maxpacket: 16
[ 1290.329148][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1290.343053][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1290.362140][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1290.426120][ T5880] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1290.487457][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.501417][ T5880] usb 6-1: config 0 descriptor??
[ 1290.506830][T23131] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1290.608934][T23132] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1290.633219][T23132] 8021q: adding VLAN 0 to HW filter on device team0
[ 1290.644647][T23132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1290.859934][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1291.063135][T23141] input: syz1 as /devices/virtual/input/input90
[ 1291.234628][ T5880] HID 045e:07da: Invalid code 65791 type 1
[ 1291.312696][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input91
[ 1291.374186][T23130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1291.395123][T23130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1291.670640][ T6839] pegasus 4-1:0.0: probe with driver pegasus failed with error -32
[ 1291.705872][ T5880] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[ 1291.732372][ T5880] usb 6-1: USB disconnect, device number 93
[ 1291.900002][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1292.676867][T23162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1292.939925][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1293.054345][   T30] audit: type=1400 audit(1745174687.285:2521): avc:  denied  { link } for  pid=23161 comm="syz.6.4898" name="#1eb" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1293.076700][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1293.730207][ T5880] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1293.979950][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1294.056743][  T971] usb 4-1: USB disconnect, device number 92
[ 1294.599721][ T5880] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1294.608399][ T5880] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1294.629262][ T5880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1294.639037][ T5880] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1294.650422][ T5880] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1294.752574][ T5880] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1294.761882][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1294.769989][ T5880] usb 8-1: Product: syz
[ 1294.774252][ T5880] usb 8-1: Manufacturer: syz
[ 1294.787214][ T5880] cdc_wdm 8-1:1.0: skipping garbage
[ 1294.792803][ T5880] cdc_wdm 8-1:1.0: skipping garbage
[ 1294.842943][ T5880] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1294.861375][ T5880] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1295.019925][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1295.199913][T23188] wireguard0: entered promiscuous mode
[ 1295.222302][T23188] wireguard0: entered allmulticast mode
[ 1295.561879][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1295.609166][T23196] FAULT_INJECTION: forcing a failure.
[ 1295.609166][T23196] name failslab, interval 1, probability 0, space 0, times 0
[ 1295.622415][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1295.740015][T23196] CPU: 1 UID: 0 PID: 23196 Comm: syz.3.4907 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1295.740041][T23196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1295.740051][T23196] Call Trace:
[ 1295.740057][T23196]  <TASK>
[ 1295.740064][T23196]  dump_stack_lvl+0x16c/0x1f0
[ 1295.740094][T23196]  should_fail_ex+0x512/0x640
[ 1295.740113][T23196]  ? fs_reclaim_acquire+0xae/0x150
[ 1295.740139][T23196]  ? tomoyo_encode2+0x100/0x3e0
[ 1295.740162][T23196]  should_failslab+0xc2/0x120
[ 1295.740182][T23196]  __kmalloc_noprof+0xd2/0x510
[ 1295.740199][T23196]  ? d_absolute_path+0x136/0x1a0
[ 1295.740226][T23196]  tomoyo_encode2+0x100/0x3e0
[ 1295.740252][T23196]  tomoyo_encode+0x29/0x50
[ 1295.740275][T23196]  tomoyo_realpath_from_path+0x18f/0x6e0
[ 1295.740307][T23196]  tomoyo_path_number_perm+0x245/0x580
[ 1295.740327][T23196]  ? tomoyo_path_number_perm+0x237/0x580
[ 1295.740350][T23196]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1295.740372][T23196]  ? find_held_lock+0x2b/0x80
[ 1295.740416][T23196]  ? find_held_lock+0x2b/0x80
[ 1295.740436][T23196]  ? hook_file_ioctl_common+0x145/0x410
[ 1295.740459][T23196]  ? __fget_files+0x20e/0x3c0
[ 1295.740480][T23196]  security_file_ioctl+0x9b/0x240
[ 1295.740505][T23196]  __x64_sys_ioctl+0xb7/0x200
[ 1295.740531][T23196]  do_syscall_64+0xcd/0x260
[ 1295.740555][T23196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.740572][T23196] RIP: 0033:0x7fda6f38e169
[ 1295.740586][T23196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1295.740601][T23196] RSP: 002b:00007fda70189038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1295.740618][T23196] RAX: ffffffffffffffda RBX: 00007fda6f5b5fa0 RCX: 00007fda6f38e169
[ 1295.740629][T23196] RDX: 0000200000000080 RSI: 00000000c100565c RDI: 0000000000000003
[ 1295.740640][T23196] RBP: 00007fda70189090 R08: 0000000000000000 R09: 0000000000000000
[ 1295.740650][T23196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1295.740659][T23196] R13: 0000000000000000 R14: 00007fda6f5b5fa0 R15: 00007ffdd796fdd8
[ 1295.740683][T23196]  </TASK>
[ 1295.744276][T23196] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1295.960757][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1295.966782][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1296.042368][   T30] audit: type=1400 audit(1745174690.355:2522): avc:  denied  { connect } for  pid=23197 comm="syz.5.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1296.070051][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1296.082514][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'.
[ 1296.108564][T23205] macvtap1: entered promiscuous mode
[ 1296.120711][T23205] vlan0: entered promiscuous mode
[ 1296.137889][T23205] vlan0: left promiscuous mode
[ 1296.485060][ T5880] libceph: connect (1)[c::]:6789 error -101
[ 1296.501525][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[ 1296.594472][T23192] ceph: No mds server is up or the cluster is laggy
[ 1296.700447][   T30] audit: type=1400 audit(1745174691.015:2523): avc:  denied  { ioctl } for  pid=23207 comm="syz.5.4910" path="/newroot/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1296.755112][   T30] audit: type=1400 audit(1745174691.075:2524): avc:  denied  { shutdown } for  pid=23207 comm="syz.5.4910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1296.797977][T22033] usb 8-1: USB disconnect, device number 7
[ 1296.866465][T23215] netlink: 'syz.7.4913': attribute type 4 has an invalid length.
[ 1297.099994][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1298.140134][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1298.770381][T23247] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1298.785137][T23247] overlayfs: overlapping lowerdir path
[ 1299.000077][  T971] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1299.029959][ T5880] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1299.179939][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1299.210056][ T5880] usb 8-1: Using ep0 maxpacket: 16
[ 1299.219389][ T5880] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.236007][  T971] usb 4-1: config 0 has an invalid interface number: 121 but max is 0
[ 1299.239754][ T5880] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1299.337125][ T5880] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1299.347182][ T5880] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1299.359670][ T5880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1299.364146][T23258] netlink: 'syz.6.4928': attribute type 11 has an invalid length.
[ 1299.369031][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.384820][ T5880] usb 8-1: Product: syz
[ 1299.389149][ T5880] usb 8-1: Manufacturer: syz
[ 1299.389273][  T971] usb 4-1: config 0 has no interface number 0
[ 1299.393748][ T5880] usb 8-1: SerialNumber: syz
[ 1299.404985][  T971] usb 4-1: config 0 interface 121 has no altsetting 0
[ 1299.409934][T23258] netlink: 'syz.6.4928': attribute type 4 has an invalid length.
[ 1299.427218][T23258] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4928'.
[ 1299.817238][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1299.838530][  T971] usb 4-1: New USB device found, idVendor=10d6, idProduct=a300, bcdDevice=f0.c3
[ 1299.839089][   T30] audit: type=1326 audit(1745174694.155:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23241 comm="syz.7.4924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3818d8e169 code=0x0
[ 1299.885043][  T971] usb 4-1: New USB device strings: Mfr=198, Product=2, SerialNumber=3
[ 1299.926966][  T971] usb 4-1: Product: syz
[ 1300.019683][  T971] usb 4-1: Manufacturer: syz
[ 1300.031604][  T971] usb 4-1: SerialNumber: syz
[ 1300.132285][  T971] usb 4-1: config 0 descriptor??
[ 1300.187404][ T5880] usb 8-1: USB disconnect, device number 8
[ 1300.219928][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1300.415638][T23273] wireguard0: entered promiscuous mode
[ 1300.421411][T23273] wireguard0: entered allmulticast mode
[ 1300.457658][T23239] netlink: 'syz.3.4922': attribute type 1 has an invalid length.
[ 1300.576178][  T971] usb 4-1: USB disconnect, device number 93
[ 1300.730462][T22033] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1300.879964][T22033] usb 7-1: Using ep0 maxpacket: 8
[ 1300.888254][T22033] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1300.897454][T22033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.905706][T22033] usb 7-1: Product: syz
[ 1300.910138][T22033] usb 7-1: Manufacturer: syz
[ 1300.918514][T22033] usb 7-1: SerialNumber: syz
[ 1300.931561][T22033] usb 7-1: config 0 descriptor??
[ 1301.196801][   T30] audit: type=1400 audit(1745174695.515:2526): avc:  denied  { setopt } for  pid=23284 comm="syz.5.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1301.260208][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1301.465028][ T5974] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1301.643734][ T5974] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 1301.699036][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1301.799377][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1301.917485][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1301.941913][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1301.961623][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1301.980276][T22033] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110
[ 1301.989722][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1301.997780][T22033] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1302.018733][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.038851][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.053293][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.061171][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.070438][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.081423][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.095735][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.106139][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.117406][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.125042][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.134347][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.145619][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.153499][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.162610][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.173912][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.299927][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1302.757346][ T5974] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1302.766467][ T5974] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1302.777475][ T5974] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1302.785922][ T5974] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1302.795194][ T5974] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1302.803590][ T5974] usb 6-1: Product: syz
[ 1302.807831][ T5974] usb 6-1: Manufacturer: syz
[ 1302.817857][ T5974] usb 6-1: SerialNumber: syz
[ 1302.831682][ T5974] usb 6-1: config 0 descriptor??
[ 1302.847304][ T5974] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 1302.873772][T23303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1303.339919][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1303.357608][ T5880] usb 6-1: USB disconnect, device number 94
[ 1303.364257][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'.
[ 1303.386305][T23311] netlink: 'syz.3.4943': attribute type 27 has an invalid length.
[ 1303.400069][ T6839] usb 7-1: USB disconnect, device number 18
[ 1303.431808][ T5880] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 1303.477559][T23311] tipc: Resetting bearer <eth:gre0>
[ 1304.436857][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1304.509513][T23337] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4950'.
[ 1304.527729][T23311] tipc: Resetting bearer <eth:team0>
[ 1304.563202][T23311] batman_adv: batadv0: Interface deactivated: dummy0
[ 1304.755728][T23312] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1304.986942][T23312] 8021q: adding VLAN 0 to HW filter on device team0
[ 1305.029244][T23312] tipc: Resetting bearer <eth:team0>
[ 1305.039503][T23312] batman_adv: batadv0: Interface activated: dummy0
[ 1305.046258][T23312] batadv0: mtu less than device minimum
[ 1305.052745][T23312] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1305.064084][T23312] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1305.075113][T23312] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1305.085912][T23312] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1305.152487][T23324] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[ 1305.279371][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'.
[ 1305.498584][T23347] kvm: pic: non byte write
[ 1305.505890][T23347] kvm: MWAIT instruction emulated as NOP!
[ 1305.548659][    C0] net_ratelimit: 16 callbacks suppressed
[ 1305.548680][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1306.124394][T23356] input: syz1 as /devices/virtual/input/input93
[ 1306.339349][   T30] audit: type=1400 audit(1745174700.485:2527): avc:  denied  { mounton } for  pid=23362 comm="syz.3.4958" path="/410/file0" dev="ramfs" ino=82432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1306.363664][T22039] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1306.650225][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1307.034646][T22039] usb 6-1: Using ep0 maxpacket: 8
[ 1307.054238][T22039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1307.077571][ T6839] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1307.115955][T22039] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15
[ 1307.130916][T22039] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1307.192956][T22039] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[ 1307.277920][T22039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.370517][ T6839] usb 8-1: Using ep0 maxpacket: 8
[ 1307.507925][ T6839] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1307.543455][T22039] usb 6-1: Product: syz
[ 1307.563987][T22039] usb 6-1: Manufacturer: syz
[ 1307.568612][T22039] usb 6-1: SerialNumber: syz
[ 1307.573315][ T6839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.589528][ T6839] usb 8-1: Product: syz
[ 1307.595058][ T6839] usb 8-1: Manufacturer: syz
[ 1307.601881][T22039] usb 6-1: config 0 descriptor??
[ 1307.612164][ T6839] usb 8-1: SerialNumber: syz
[ 1307.624071][T22039] powermate 6-1:0.0: probe with driver powermate failed with error -22
[ 1307.649309][ T6839] usb 8-1: config 0 descriptor??
[ 1307.666195][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4963'.
[ 1307.698155][T23384] netlink: 'syz.6.4963': attribute type 27 has an invalid length.
[ 1307.761572][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1308.252173][T23385] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1308.259801][T23385] 8021q: adding VLAN 0 to HW filter on device team0
[ 1308.268928][T23385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1308.799476][ T6839] dvb_usb_rtl28xxu 8-1:0.0: chip type detection failed -110
[ 1308.811470][ T6839] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1308.873370][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1308.942797][T22033] usb 6-1: USB disconnect, device number 95
[ 1309.352389][  T971] usb 8-1: USB disconnect, device number 9
[ 1309.518599][T23404] input: syz1 as /devices/virtual/input/input94
[ 1309.621318][T23407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1309.862616][T23425] SET target dimension over the limit!
[ 1309.909516][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4974'.
[ 1309.930933][T23428] netlink: 'syz.7.4974': attribute type 27 has an invalid length.
[ 1309.985193][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1310.049470][T22033] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1310.179827][T23432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1310.187870][T23432] 8021q: adding VLAN 0 to HW filter on device team0
[ 1310.196473][T23432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1310.211774][T22033] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1310.227189][T22033] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[ 1310.248254][T23433] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1310.255219][T22033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1310.264961][T23433] bond0: (slave bond1): Enslaving as an active interface with an up link
[ 1310.278824][T22033] usb 4-1: config 0 descriptor??
[ 1310.728662][T22033] corsair-cpro 0003:1B1C:1D00.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.3-1/input0
[ 1310.801105][T22033] corsair-cpro 0003:1B1C:1D00.0019: probe with driver corsair-cpro failed with error -38
[ 1311.002481][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1311.062359][T22033] usb 4-1: USB disconnect, device number 94
[ 1311.077980][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'.
[ 1311.097038][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1311.589096][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1311.597578][   T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1311.618926][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.643613][   T24] usb 7-1: Product: syz
[ 1311.662910][   T24] usb 7-1: Manufacturer: syz
[ 1311.686616][   T24] usb 7-1: SerialNumber: syz
[ 1311.702008][   T24] usb 7-1: config 0 descriptor??
[ 1311.728158][T23460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4984'.
[ 1312.070133][   T52] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1312.208821][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1312.238531][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4986'.
[ 1312.273111][T23466] bond4: entered promiscuous mode
[ 1312.281081][T23466] bond4: entered allmulticast mode
[ 1312.337387][   T52] usb 4-1: device descriptor read/64, error -71
[ 1312.549608][T23469] FAULT_INJECTION: forcing a failure.
[ 1312.549608][T23469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1312.563957][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.5.4987 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1312.563980][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1312.563990][T23469] Call Trace:
[ 1312.563995][T23469]  <TASK>
[ 1312.564001][T23469]  dump_stack_lvl+0x16c/0x1f0
[ 1312.564022][T23469]  should_fail_ex+0x512/0x640
[ 1312.564043][T23469]  _copy_from_user+0x2e/0xd0
[ 1312.564063][T23469]  copy_msghdr_from_user+0x98/0x160
[ 1312.564084][T23469]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1312.564113][T23469]  ___sys_sendmsg+0xfe/0x1d0
[ 1312.564126][T23469]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1312.564153][T23469]  __sys_sendmsg+0x16d/0x220
[ 1312.564175][T23469]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1312.564202][T23469]  ? rcu_is_watching+0x12/0xc0
[ 1312.564228][T23469]  do_syscall_64+0xcd/0x260
[ 1312.564250][T23469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1312.564263][T23469] RIP: 0033:0x7f3357b8e169
[ 1312.564272][T23469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1312.564282][T23469] RSP: 002b:00007f33559f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1312.564293][T23469] RAX: ffffffffffffffda RBX: 00007f3357db5fa0 RCX: 00007f3357b8e169
[ 1312.564299][T23469] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[ 1312.564305][T23469] RBP: 00007f33559f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1312.564311][T23469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1312.564324][T23469] R13: 0000000000000000 R14: 00007f3357db5fa0 R15: 00007ffc0df64418
[ 1312.564345][T23469]  </TASK>
[ 1312.625947][   T52] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1312.629951][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.748372][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.812990][   T24] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110
[ 1312.825744][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4988'.
[ 1312.835195][T23472] netlink: 'syz.5.4988': attribute type 27 has an invalid length.
[ 1312.854367][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1312.873951][T23472] bond3: left promiscuous mode
[ 1312.878711][T23472] bond3: left allmulticast mode
[ 1312.887417][T23472] bond4: left promiscuous mode
[ 1312.893342][T23472] bond4: left allmulticast mode
[ 1312.898445][ T5953] lo speed is unknown, defaulting to 1000
[ 1312.904564][ T5953] syz0: Port: 1 Link DOWN
[ 1312.908912][ T5953] lo speed is unknown, defaulting to 1000
[ 1312.958780][   T24] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1312.960189][T23472] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1312.981484][T23472] 8021q: adding VLAN 0 to HW filter on device team0
[ 1313.007176][T23472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1313.036954][ T5953] lo speed is unknown, defaulting to 1000
[ 1313.044270][ T5953] syz0: Port: 1 Link ACTIVE
[ 1313.049050][ T5953] lo speed is unknown, defaulting to 1000
[ 1313.065927][   T52] usb 4-1: device descriptor read/64, error -71
[ 1313.182247][   T52] usb usb4-port1: attempt power cycle
[ 1313.241146][T23479] input: syz0 as /devices/virtual/input/input95
[ 1313.244627][T23477] xt_CT: No such helper "syz1"
[ 1313.320653][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1313.331836][   T30] audit: type=1400 audit(1745174707.033:2528): avc:  denied  { connect } for  pid=23474 comm="syz.7.4989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1313.449290][T23485] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[ 1313.497054][T23487] overlayfs: missing 'lowerdir'
[ 1313.545702][   T52] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1313.577952][   T52] usb 4-1: device descriptor read/8, error -71
[ 1313.685884][  T971] usb 7-1: USB disconnect, device number 19
[ 1313.823137][ T5953] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1313.856130][   T52] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1313.909079][   T52] usb 4-1: device descriptor read/8, error -71
[ 1314.379550][   T52] usb usb4-port1: unable to enumerate USB device
[ 1314.432509][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1314.468871][ T5953] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1314.494468][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.506377][ T5953] usb 6-1: config 0 descriptor??
[ 1314.515401][ T5953] cp210x 6-1:0.0: cp210x converter detected
[ 1314.621709][T23501] FAULT_INJECTION: forcing a failure.
[ 1314.621709][T23501] name failslab, interval 1, probability 0, space 0, times 0
[ 1314.634461][T23501] CPU: 1 UID: 0 PID: 23501 Comm: syz.7.4998 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1314.634485][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1314.634496][T23501] Call Trace:
[ 1314.634503][T23501]  <TASK>
[ 1314.634510][T23501]  dump_stack_lvl+0x16c/0x1f0
[ 1314.634537][T23501]  should_fail_ex+0x512/0x640
[ 1314.634555][T23501]  ? __kmalloc_cache_noprof+0x57/0x3e0
[ 1314.634581][T23501]  should_failslab+0xc2/0x120
[ 1314.634602][T23501]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1314.634628][T23501]  ? __io_uring_add_tctx_node+0x132/0x500
[ 1314.634654][T23501]  __io_uring_add_tctx_node+0x132/0x500
[ 1314.634675][T23501]  ? __pfx___io_uring_add_tctx_node+0x10/0x10
[ 1314.634700][T23501]  ? __fget_files+0x20e/0x3c0
[ 1314.634718][T23501]  __io_uring_add_tctx_node_from_submit+0x89/0x130
[ 1314.634742][T23501]  __do_sys_io_uring_enter+0x123a/0x1630
[ 1314.634772][T23501]  ? __fget_files+0x20e/0x3c0
[ 1314.634788][T23501]  ? __pfx___do_sys_io_uring_enter+0x10/0x10
[ 1314.634817][T23501]  ? fput+0x70/0xf0
[ 1314.634837][T23501]  ? ksys_write+0x1b9/0x240
[ 1314.634851][T23501]  ? __pfx_ksys_write+0x10/0x10
[ 1314.634872][T23501]  do_syscall_64+0xcd/0x260
[ 1314.634898][T23501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1314.634916][T23501] RIP: 0033:0x7f3818d8e169
[ 1314.634929][T23501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1314.634946][T23501] RSP: 002b:00007f3819b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1314.634962][T23501] RAX: ffffffffffffffda RBX: 00007f3818fb6080 RCX: 00007f3818d8e169
[ 1314.634973][T23501] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003
[ 1314.634983][T23501] RBP: 00007f3819b0f090 R08: 0000000000000000 R09: 0000000000000000
[ 1314.634993][T23501] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[ 1314.635002][T23501] R13: 0000000000000001 R14: 00007f3818fb6080 R15: 00007fff80c7c538
[ 1314.635024][T23501]  </TASK>
[ 1315.485274][T23491] gtp0: entered promiscuous mode
[ 1315.541361][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5000'.
[ 1315.550848][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1315.571911][T23506] netlink: 'syz.3.5000': attribute type 27 has an invalid length.
[ 1315.860948][T23506] tipc: Resetting bearer <eth:gre0>
[ 1315.868560][ T5953] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1316.067623][   T52] usb 6-1: USB disconnect, device number 96
[ 1316.084181][   T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1316.277593][   T52] cp210x 6-1:0.0: device disconnected
[ 1316.297424][T23506] tipc: Resetting bearer <eth:team0>
[ 1316.656291][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1316.764424][T23506] batman_adv: batadv0: Interface deactivated: dummy0
[ 1316.879869][T23511] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1316.890907][T23511] 8021q: adding VLAN 0 to HW filter on device team0
[ 1316.908409][T23511] tipc: Resetting bearer <eth:team0>
[ 1316.916756][T23511] batman_adv: batadv0: Interface activated: dummy0
[ 1316.926098][T23511] batadv0: mtu less than device minimum
[ 1316.933378][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1316.945277][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1316.957311][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1316.968176][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1316.978963][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1316.989749][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1317.000536][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1317.011318][T23511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1317.201378][   T52] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1317.384128][   T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1317.392514][   T52] usb 7-1: config 0 has an invalid interface number: 172 but max is 0
[ 1317.400995][   T52] usb 7-1: config 0 has no interface number 0
[ 1317.409586][   T52] usb 7-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de
[ 1317.418697][   T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.426765][   T52] usb 7-1: Product: syz
[ 1317.430964][   T52] usb 7-1: Manufacturer: syz
[ 1317.435589][   T52] usb 7-1: SerialNumber: syz
[ 1317.449581][   T52] usb 7-1: config 0 descriptor??
[ 1317.459596][   T52] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[ 1317.467507][   T52] dvb-usb: bulk message failed: -22 (4/0)
[ 1317.473311][   T52] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1317.484538][   T52] dvb-usb: bulk message failed: -22 (5/0)
[ 1317.490610][   T52] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1317.517107][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1317.527149][   T52] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0)
[ 1317.535467][   T52] usb 7-1: media controller created
[ 1317.543973][ T5953] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1317.571039][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1317.583329][   T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1317.592443][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.609981][   T24] usb 4-1: config 0 descriptor??
[ 1317.620027][   T52] ttusb2: set interface to alts=3 failed
[ 1317.628584][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1317.738164][   T52] DVB: Unable to find symbol tda10086_attach()
[ 1317.744462][   T52] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0'
[ 1317.763047][   T52] dvb-usb: bulk message failed: -22 (4/0)
[ 1317.772034][   T52] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1317.785046][   T52] dvb-usb: bulk message failed: -22 (5/0)
[ 1317.797928][   T52] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1317.800108][ T5953] usb 6-1: Using ep0 maxpacket: 8
[ 1317.810242][   T52] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected.
[ 1317.816786][ T5953] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1317.829566][   T52] usb 7-1: USB disconnect, device number 20
[ 1317.831353][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.831373][ T5953] usb 6-1: Product: syz
[ 1317.849892][ T5953] usb 6-1: Manufacturer: syz
[ 1317.855059][ T5953] usb 6-1: SerialNumber: syz
[ 1317.862051][ T5953] usb 6-1: config 0 descriptor??
[ 1317.869982][   T24] gp8psk: usb in 128 operation failed.
[ 1317.885290][   T24] gp8psk: usb in 137 operation failed.
[ 1317.891827][   T52] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1317.903613][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1317.916426][   T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1317.925237][   T24] usb 4-1: media controller created
[ 1317.942014][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1317.957916][   T24] gp8psk_fe: Frontend attached
[ 1317.962896][   T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1317.970916][   T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1318.223143][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1318.248672][   T24] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1318.472085][   T24] usb 4-1: USB disconnect, device number 99
[ 1318.520658][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1318.570513][   T52] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1318.857112][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5012'.
[ 1318.967082][ T5953] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110
[ 1319.036175][ T5953] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1319.195532][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1319.206562][   T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1319.216411][   T52] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1319.225543][   T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.235550][   T52] usb 7-1: config 0 descriptor??
[ 1319.419596][   T30] audit: type=1400 audit(1745174712.721:2529): avc:  denied  { getopt } for  pid=23549 comm="syz.1.5013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1319.487458][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5014'.
[ 1319.498416][T23553] netlink: 'syz.3.5014': attribute type 1 has an invalid length.
[ 1319.506308][T23553] netlink: 'syz.3.5014': attribute type 2 has an invalid length.
[ 1319.800543][T23542] mmap: syz.6.5011 (23542): VmData 25841664 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 1319.834436][   T52] usbhid 7-1:0.0: can't add hid device: -71
[ 1319.840385][   T52] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1319.874234][   T52] usb 7-1: USB disconnect, device number 21
[ 1319.909625][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5017'.
[ 1319.921058][T23561] netlink: 'syz.6.5017': attribute type 27 has an invalid length.
[ 1320.154686][T23562] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1320.162046][T23562] 8021q: adding VLAN 0 to HW filter on device team0
[ 1320.315747][T23550] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1320.338705][T23550] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1320.343232][T22740] usb 6-1: USB disconnect, device number 97
[ 1320.611941][ T5953] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1321.331683][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.356434][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1321.446860][ T5953] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1321.481610][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1321.502090][ T5953] usb 4-1: SerialNumber: syz
[ 1321.616569][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[ 1321.639466][T23572] CIFS: Unable to determine destination address
[ 1322.215245][    C0] net_ratelimit: 17 callbacks suppressed
[ 1322.215263][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1322.232657][ T5953] usb 4-1: 0:2 : does not exist
[ 1322.241887][ T5953] usb 4-1: unit 5 not found!
[ 1322.254210][ T5953] usb 4-1: USB disconnect, device number 100
[ 1322.609749][T23586] input: syz1 as /devices/virtual/input/input96
[ 1322.714345][T23588] netlink: 'syz.5.5024': attribute type 1 has an invalid length.
[ 1322.722286][T23588] FAULT_INJECTION: forcing a failure.
[ 1322.722286][T23588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1322.737362][T23588] CPU: 0 UID: 0 PID: 23588 Comm: syz.5.5024 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1322.737392][T23588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1322.737402][T23588] Call Trace:
[ 1322.737407][T23588]  <TASK>
[ 1322.737413][T23588]  dump_stack_lvl+0x16c/0x1f0
[ 1322.737440][T23588]  should_fail_ex+0x512/0x640
[ 1322.737461][T23588]  _copy_from_user+0x2e/0xd0
[ 1322.737482][T23588]  kstrtouint_from_user+0xd6/0x1d0
[ 1322.737504][T23588]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1322.737526][T23588]  ? __lock_acquire+0xaa4/0x1ba0
[ 1322.737552][T23588]  proc_fail_nth_write+0x83/0x250
[ 1322.737577][T23588]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1322.737609][T23588]  vfs_write+0x25c/0x1180
[ 1322.737632][T23588]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1322.737660][T23588]  ? __pfx___mutex_lock+0x10/0x10
[ 1322.737684][T23588]  ? __pfx_vfs_write+0x10/0x10
[ 1322.737716][T23588]  ? __fget_files+0x20e/0x3c0
[ 1322.737739][T23588]  ksys_write+0x12a/0x240
[ 1322.737753][T23588]  ? __pfx_ksys_write+0x10/0x10
[ 1322.737766][T23588]  ? rcu_is_watching+0x12/0xc0
[ 1322.737792][T23588]  do_syscall_64+0xcd/0x260
[ 1322.737815][T23588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1322.737832][T23588] RIP: 0033:0x7f3357b8cc1f
[ 1322.737845][T23588] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1322.737861][T23588] RSP: 002b:00007f33559f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1322.737875][T23588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3357b8cc1f
[ 1322.737885][T23588] RDX: 0000000000000001 RSI: 00007f33559f60a0 RDI: 0000000000000004
[ 1322.737894][T23588] RBP: 00007f33559f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1322.737903][T23588] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 1322.737912][T23588] R13: 0000000000000000 R14: 00007f3357db5fa0 R15: 00007ffc0df64418
[ 1322.737934][T23588]  </TASK>
[ 1322.996053][   T30] audit: type=1400 audit(1745174716.041:2530): avc:  denied  { append } for  pid=23589 comm="syz.7.5025" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1323.019528][   T30] audit: type=1400 audit(1745174716.041:2531): avc:  denied  { ioctl } for  pid=23589 comm="syz.7.5025" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1323.057050][T23592] FAULT_INJECTION: forcing a failure.
[ 1323.057050][T23592] name failslab, interval 1, probability 0, space 0, times 0
[ 1323.070005][T23592] CPU: 0 UID: 0 PID: 23592 Comm: syz.6.5026 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1323.070029][T23592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1323.070038][T23592] Call Trace:
[ 1323.070044][T23592]  <TASK>
[ 1323.070050][T23592]  dump_stack_lvl+0x16c/0x1f0
[ 1323.070077][T23592]  should_fail_ex+0x512/0x640
[ 1323.070101][T23592]  should_failslab+0xc2/0x120
[ 1323.070120][T23592]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1323.070139][T23592]  ? skb_clone+0x190/0x3f0
[ 1323.070162][T23592]  skb_clone+0x190/0x3f0
[ 1323.070184][T23592]  netlink_deliver_tap+0xabd/0xd30
[ 1323.070212][T23592]  netlink_unicast+0x5df/0x7f0
[ 1323.070238][T23592]  ? __pfx_netlink_unicast+0x10/0x10
[ 1323.070268][T23592]  netlink_sendmsg+0x8d1/0xdd0
[ 1323.070295][T23592]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1323.070329][T23592]  ____sys_sendmsg+0xa95/0xc70
[ 1323.070355][T23592]  ? copy_msghdr_from_user+0x10a/0x160
[ 1323.070384][T23592]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1323.070421][T23592]  ___sys_sendmsg+0x134/0x1d0
[ 1323.070443][T23592]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1323.070498][T23592]  __sys_sendmsg+0x16d/0x220
[ 1323.070519][T23592]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1323.070547][T23592]  ? rcu_is_watching+0x12/0xc0
[ 1323.070575][T23592]  do_syscall_64+0xcd/0x260
[ 1323.070600][T23592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.070617][T23592] RIP: 0033:0x7f0252d8e169
[ 1323.070631][T23592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1323.070647][T23592] RSP: 002b:00007f0253be4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1323.070663][T23592] RAX: ffffffffffffffda RBX: 00007f0252fb5fa0 RCX: 00007f0252d8e169
[ 1323.070673][T23592] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[ 1323.070683][T23592] RBP: 00007f0253be4090 R08: 0000000000000000 R09: 0000000000000000
[ 1323.070693][T23592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1323.070703][T23592] R13: 0000000000000000 R14: 00007f0252fb5fa0 R15: 00007ffc6a896e38
[ 1323.070726][T23592]  </TASK>
[ 1323.299472][T23596] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1323.315181][T23596] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1323.315187][T23592] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5026'.
[ 1323.332010][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1323.769699][T23612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5034'.
[ 1323.872120][T23612] bond0: option ad_select: unable to set because the bond device is up
[ 1324.144433][   T30] audit: type=1400 audit(1745174717.136:2532): avc:  denied  { map } for  pid=23616 comm="syz.6.5035" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1324.438992][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1325.130853][T23636] FAULT_INJECTION: forcing a failure.
[ 1325.130853][T23636] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.155242][T23636] CPU: 0 UID: 0 PID: 23636 Comm: syz.7.5040 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1325.155269][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1325.155278][T23636] Call Trace:
[ 1325.155283][T23636]  <TASK>
[ 1325.155290][T23636]  dump_stack_lvl+0x16c/0x1f0
[ 1325.155317][T23636]  should_fail_ex+0x512/0x640
[ 1325.155339][T23636]  should_failslab+0xc2/0x120
[ 1325.155359][T23636]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1325.155378][T23636]  ? skb_clone+0x190/0x3f0
[ 1325.155404][T23636]  skb_clone+0x190/0x3f0
[ 1325.155425][T23636]  netlink_deliver_tap+0xabd/0xd30
[ 1325.155453][T23636]  netlink_unicast+0x6b2/0x7f0
[ 1325.155483][T23636]  ? __pfx_netlink_unicast+0x10/0x10
[ 1325.155513][T23636]  netlink_ack+0x696/0xb80
[ 1325.155543][T23636]  netlink_rcv_skb+0x347/0x440
[ 1325.155566][T23636]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1325.155590][T23636]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1325.155627][T23636]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1325.155654][T23636]  netlink_unicast+0x53a/0x7f0
[ 1325.155680][T23636]  ? __pfx_netlink_unicast+0x10/0x10
[ 1325.155711][T23636]  netlink_sendmsg+0x8d1/0xdd0
[ 1325.155738][T23636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1325.155770][T23636]  ____sys_sendmsg+0xa95/0xc70
[ 1325.155796][T23636]  ? copy_msghdr_from_user+0x10a/0x160
[ 1325.155816][T23636]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1325.155853][T23636]  ___sys_sendmsg+0x134/0x1d0
[ 1325.155875][T23636]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1325.155925][T23636]  __sys_sendmsg+0x16d/0x220
[ 1325.155945][T23636]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1325.155972][T23636]  ? rcu_is_watching+0x12/0xc0
[ 1325.156000][T23636]  do_syscall_64+0xcd/0x260
[ 1325.156026][T23636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.156043][T23636] RIP: 0033:0x7f3818d8e169
[ 1325.156058][T23636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1325.156075][T23636] RSP: 002b:00007f3819b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1325.156097][T23636] RAX: ffffffffffffffda RBX: 00007f3818fb5fa0 RCX: 00007f3818d8e169
[ 1325.156108][T23636] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000004
[ 1325.156118][T23636] RBP: 00007f3819b30090 R08: 0000000000000000 R09: 0000000000000000
[ 1325.156128][T23636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1325.156138][T23636] R13: 0000000000000000 R14: 00007f3818fb5fa0 R15: 00007fff80c7c538
[ 1325.156162][T23636]  </TASK>
[ 1325.561510][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1326.211171][T23647] hub 6-0:1.0: USB hub found
[ 1326.235413][T23647] hub 6-0:1.0: 1 port detected
[ 1326.657909][T23660] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1326.667508][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1326.854234][T23657] lo speed is unknown, defaulting to 1000
[ 1326.968816][T23665] FAULT_INJECTION: forcing a failure.
[ 1326.968816][T23665] name failslab, interval 1, probability 0, space 0, times 0
[ 1326.981702][T23665] CPU: 0 UID: 0 PID: 23665 Comm: syz.1.5047 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1326.981726][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1326.981735][T23665] Call Trace:
[ 1326.981741][T23665]  <TASK>
[ 1326.981747][T23665]  dump_stack_lvl+0x16c/0x1f0
[ 1326.981769][T23665]  should_fail_ex+0x512/0x640
[ 1326.981781][T23665]  ? fs_reclaim_acquire+0xae/0x150
[ 1326.981797][T23665]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 1326.981813][T23665]  should_failslab+0xc2/0x120
[ 1326.981825][T23665]  __kmalloc_noprof+0xd2/0x510
[ 1326.981839][T23665]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 1326.981855][T23665]  ? tomoyo_profile+0x47/0x60
[ 1326.981866][T23665]  tomoyo_path_number_perm+0x245/0x580
[ 1326.981879][T23665]  ? tomoyo_path_number_perm+0x237/0x580
[ 1326.981893][T23665]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1326.981907][T23665]  ? find_held_lock+0x2b/0x80
[ 1326.981924][T23665]  ? irqentry_exit+0x3b/0x90
[ 1326.981946][T23665]  ? find_held_lock+0x2b/0x80
[ 1326.981958][T23665]  ? hook_file_ioctl_common+0x145/0x410
[ 1326.981972][T23665]  ? __fget_files+0x20e/0x3c0
[ 1326.981985][T23665]  security_file_ioctl+0x9b/0x240
[ 1326.982001][T23665]  __x64_sys_ioctl+0xb7/0x200
[ 1326.982017][T23665]  do_syscall_64+0xcd/0x260
[ 1326.982033][T23665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.982043][T23665] RIP: 0033:0x7f453118e169
[ 1326.982052][T23665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1326.982064][T23665] RSP: 002b:00007f452eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1326.982075][T23665] RAX: ffffffffffffffda RBX: 00007f45313b6080 RCX: 00007f453118e169
[ 1326.982081][T23665] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000005
[ 1326.982088][T23665] RBP: 00007f452eff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1326.982094][T23665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1326.982100][T23665] R13: 0000000000000000 R14: 00007f45313b6080 R15: 00007ffe8ebcb748
[ 1326.982113][T23665]  </TASK>
[ 1326.982133][T23665] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1327.222042][T23665] hub 6-0:1.0: USB hub found
[ 1327.243256][T23665] hub 6-0:1.0: 1 port detected
[ 1327.483794][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5049'.
[ 1327.774348][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1328.119912][T23677] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1328.364872][T23679] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1328.886601][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1329.559197][T23696] netlink: 'syz.6.5056': attribute type 2 has an invalid length.
[ 1329.567388][T23696] netlink: 'syz.6.5056': attribute type 1 has an invalid length.
[ 1329.998013][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1331.002985][  T971] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1331.109948][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1331.165476][  T971] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1331.178472][  T971] usb 7-1: too many configurations: 25, using maximum allowed: 8
[ 1331.207373][  T971] usb 7-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb
[ 1331.216899][  T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.225014][  T971] usb 7-1: Product: syz
[ 1331.235321][  T971] usb 7-1: Manufacturer: syz
[ 1331.324155][  T971] usb 7-1: SerialNumber: syz
[ 1331.330851][  T971] usb 7-1: config 0 descriptor??
[ 1331.812766][T23718] dvmrp0: entered allmulticast mode
[ 1331.816475][  T971] usb 7-1: USB disconnect, device number 22
[ 1332.073033][   T30] audit: type=1400 audit(1745174724.563:2533): avc:  denied  { watch } for  pid=23725 comm="syz.3.5067" path="/428/control" dev="tmpfs" ino=2432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1332.102346][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5067'.
[ 1332.104313][T23726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5067'.
[ 1332.123681][T23728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5067'.
[ 1332.133111][T23727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5067'.
[ 1332.221689][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1333.333494][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1333.424057][T23755] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1333.667311][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'.
[ 1333.839537][T23767] ptrace attach of "./syz-executor exec"[20030] was attempted by "./syz-executor exec"[23767]
[ 1334.143726][T23769] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1334.157589][T23769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1334.171870][T23769] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[ 1334.195314][T23769] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 1334.349611][   T30] audit: type=1400 audit(1745174726.649:2534): avc:  denied  { ioctl } for  pid=23770 comm="syz.5.5083" path="socket:[83520]" dev="sockfs" ino=83520 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1334.445299][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1335.067826][T23780] lo speed is unknown, defaulting to 1000
[ 1335.386272][   T24] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1335.557198][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1336.136812][   T24] usb 6-1: config 64 descriptor has 1 excess byte, ignoring
[ 1336.144418][   T24] usb 6-1: config 64 has 0 interfaces, different from the descriptor's value: 2
[ 1336.157655][   T24] usb 6-1: string descriptor 0 read error: -22
[ 1336.165277][   T24] usb 6-1: New USB device found, idVendor=1199, idProduct=901f, bcdDevice=eb.98
[ 1336.178629][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.668939][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1337.019915][   T24] usb 6-1: USB disconnect, device number 98
[ 1337.250677][T23816] netlink: 'syz.3.5096': attribute type 2 has an invalid length.
[ 1337.780946][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1337.848579][T23816] : entered promiscuous mode
[ 1338.272687][   T24] usb 4-1: new full-speed USB device number 101 using dummy_hcd
[ 1338.684100][   T24] usb 4-1: config 0 has an invalid interface number: 129 but max is 0
[ 1338.803418][   T24] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1338.892613][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1338.959156][   T24] usb 4-1: config 0 has no interface number 1
[ 1338.981115][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1339.041334][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00
[ 1339.050514][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1339.074678][   T30] audit: type=1326 audit(1745174730.970:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23831 comm="syz.7.5100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3818d8e169 code=0x0
[ 1339.122041][   T24] usb 4-1: config 0 descriptor??
[ 1339.146387][   T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1339.192666][  T971] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1339.352291][  T971] usb 6-1: Using ep0 maxpacket: 8
[ 1339.360049][  T971] usb 6-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[ 1339.370501][  T971] usb 6-1: config 0 has an invalid interface number: 150 but max is 64
[ 1339.380579][  T971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1339.394851][  T971] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[ 1339.404646][  T971] usb 6-1: config 0 has no interface number 0
[ 1339.413014][  T971] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1339.426164][  T971] usb 6-1: config 0 interface 150 has no altsetting 0
[ 1339.433118][  T971] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[ 1339.442262][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1339.451473][  T971] usb 6-1: config 0 descriptor??
[ 1339.526394][   T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1339.694533][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1339.703119][   T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 1339.719140][  T971] usb 6-1: USB disconnect, device number 99
[ 1339.721678][   T24] usb 7-1: config 179 has no interface number 0
[ 1339.731439][   T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 1339.743185][   T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 1339.754630][   T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 55, changing to 9
[ 1339.766145][   T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8496, setting to 1024
[ 1339.777726][   T24] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1339.859526][T23846] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1340.004498][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1340.198995][   T24] usb 7-1: config 179 interface 65 has no altsetting 0
[ 1340.205898][   T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1340.214991][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1340.225754][T23842] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[ 1340.243957][   T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input97
[ 1340.293412][ T5182] input input97: unable to receive magic message: -110
[ 1340.312858][ T5182] input input97: unable to receive magic message: -32
[ 1340.323939][ T5182] input input97: unable to receive magic message: -32
[ 1340.341408][ T5182] input input97: unable to receive magic message: -32
[ 1340.697228][T23842] input input97: unable to receive magic message: -32
[ 1340.854802][   T52] usb 7-1: USB disconnect, device number 23
[ 1340.860794][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1340.876653][   T52] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1341.041453][   T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1341.086096][T22740] usb 4-1: USB disconnect, device number 101
[ 1341.126913][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1341.212575][   T24] usb 8-1: Using ep0 maxpacket: 16
[ 1341.266279][   T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1341.276742][   T24] usb 8-1: config 0 has no interfaces?
[ 1341.283732][   T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1341.295559][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1341.304953][   T24] usb 8-1: SerialNumber: syz
[ 1341.321294][   T24] usb 8-1: config 0 descriptor??
[ 1342.228097][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1343.159533][T23879] zonefs: Unknown parameter 'attr/fscreate'
[ 1343.339970][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1343.682013][  T971] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1343.852224][  T971] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1343.934689][  T971] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1343.992721][  T971] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1344.048821][  T971] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C
[ 1344.070403][T22033] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1344.119208][  T971] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243
[ 1344.184071][  T971] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[ 1344.248436][  T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.256662][  T971] usb 7-1: Product: syz
[ 1344.261127][T22033] usb 4-1: device descriptor read/64, error -71
[ 1344.272508][  T971] usb 7-1: Manufacturer: syz
[ 1344.277191][  T971] usb 7-1: SerialNumber: syz
[ 1344.287907][T23882] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1344.351641][ T5953] usb 8-1: USB disconnect, device number 10
[ 1344.421693][  T971] usb 7-1: ucan: probing device on interface #0
[ 1344.437801][  T971] usb 7-1: ucan: invalid out_ep MaxPacketSize
[ 1344.451724][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[ 1344.464820][  T971] usb 7-1: ucan: probe failed; try to update the device firmware
[ 1344.527309][T22033] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1344.642566][   T30] audit: type=1400 audit(1745174736.311:2536): avc:  denied  { map } for  pid=23881 comm="syz.6.5117" path="socket:[83722]" dev="sockfs" ino=83722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1344.667689][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'.
[ 1344.677272][T22033] usb 4-1: device descriptor read/64, error -71
[ 1344.731638][  T971] usb 7-1: USB disconnect, device number 24
[ 1344.798948][T22033] usb usb4-port1: attempt power cycle
[ 1344.890680][T23898] FAULT_INJECTION: forcing a failure.
[ 1344.890680][T23898] name failslab, interval 1, probability 0, space 0, times 0
[ 1344.900391][T23908] input: syz0 as /devices/virtual/input/input98
[ 1344.914892][T23898] CPU: 0 UID: 0 PID: 23898 Comm: syz.7.5122 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1344.914916][T23898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1344.914927][T23898] Call Trace:
[ 1344.914933][T23898]  <TASK>
[ 1344.914940][T23898]  dump_stack_lvl+0x16c/0x1f0
[ 1344.914966][T23898]  should_fail_ex+0x512/0x640
[ 1344.914983][T23898]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[ 1344.915010][T23898]  should_failslab+0xc2/0x120
[ 1344.915029][T23898]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[ 1344.915046][T23898]  ? __alloc_skb+0x2b2/0x380
[ 1344.915069][T23898]  __alloc_skb+0x2b2/0x380
[ 1344.915088][T23898]  ? __pfx___alloc_skb+0x10/0x10
[ 1344.915109][T23898]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 1344.915137][T23898]  netlink_alloc_large_skb+0x69/0x130
[ 1344.915161][T23898]  netlink_sendmsg+0x6a1/0xdd0
[ 1344.915187][T23898]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1344.915219][T23898]  ____sys_sendmsg+0xa95/0xc70
[ 1344.915244][T23898]  ? copy_msghdr_from_user+0x10a/0x160
[ 1344.915264][T23898]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1344.915299][T23898]  ___sys_sendmsg+0x134/0x1d0
[ 1344.915320][T23898]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1344.915370][T23898]  __sys_sendmsg+0x16d/0x220
[ 1344.915390][T23898]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1344.915417][T23898]  ? rcu_is_watching+0x12/0xc0
[ 1344.915445][T23898]  do_syscall_64+0xcd/0x260
[ 1344.915469][T23898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1344.915486][T23898] RIP: 0033:0x7f3818d8e169
[ 1344.915499][T23898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1344.915514][T23898] RSP: 002b:00007f3819b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1344.915530][T23898] RAX: ffffffffffffffda RBX: 00007f3818fb5fa0 RCX: 00007f3818d8e169
[ 1344.915542][T23898] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[ 1344.915552][T23898] RBP: 00007f3819b30090 R08: 0000000000000000 R09: 0000000000000000
[ 1344.915562][T23898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1344.915572][T23898] R13: 0000000000000000 R14: 00007f3818fb5fa0 R15: 00007fff80c7c538
[ 1344.915595][T23898]  </TASK>
[ 1345.134407][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1345.135528][T23910] ------------[ cut here ]------------
[ 1345.146356][T23910] platform vkms: [drm] vblank wait timed out on crtc 0
[ 1345.154420][T23910] WARNING: CPU: 1 PID: 23910 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.165075][T23910] Modules linked in:
[ 1345.169429][T23910] CPU: 1 UID: 0 PID: 23910 Comm: syz.1.5127 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1345.181526][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1345.191632][T23910] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.197541][T23910] Code: ed 0f 84 12 02 00 00 e8 88 3e 4c fc 48 89 ef e8 40 67 8d 00 44 89 e1 4c 89 ea 48 c7 c7 80 0f 0a 8c 48 89 c6 e8 db cc 0b fc 90 <0f> 0b 90 90 e9 4e fe ff ff e8 5c 3e 4c fc 48 89 ef e8 34 06 06 06
[ 1345.217202][T23910] RSP: 0018:ffffc9000475fb20 EFLAGS: 00010286
[ 1345.223313][T23910] RAX: 0000000000000000 RBX: ffff8881437ea000 RCX: ffffc9002100c000
[ 1345.231288][T23910] RDX: 0000000000080000 RSI: ffffffff817ae005 RDI: 0000000000000001
[ 1345.239300][T23910] RBP: ffff8881437d4010 R08: 0000000000000001 R09: 0000000000000000
[ 1345.247402][T23910] R10: 0000000000000001 R11: 000000000003e890 R12: 0000000000000000
[ 1345.255520][T23910] R13: ffff88814179ce40 R14: 1ffff920008ebf67 R15: 000000000001384e
[ 1345.263495][T23910] FS:  00007f4531f206c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000
[ 1345.272462][T23910] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1345.279074][T23910] CR2: 00007f452eff6d58 CR3: 0000000025384000 CR4: 00000000003526f0
[ 1345.287090][T23910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1345.295058][T23910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1345.303048][T23910] Call Trace:
[ 1345.306322][T23910]  <TASK>
[ 1345.309290][T23910]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[ 1345.314930][T23910]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1345.321028][T23910]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1345.326232][T23910]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1345.332070][T23910]  ? drm_vblank_get+0x150/0x290
[ 1345.336927][T23910]  drm_fb_helper_ioctl+0x156/0x1a0
[ 1345.342080][T23910]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[ 1345.345704][T22033] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1345.347723][T23910]  do_fb_ioctl+0x3d2/0x7e0
[ 1345.359796][T23910]  ? __pfx_do_fb_ioctl+0x10/0x10
[ 1345.364956][T23910]  ? do_vfs_ioctl+0x512/0x1990
[ 1345.369774][T23910]  ? selinux_file_ioctl+0x180/0x270
[ 1345.375261][T23910]  fb_ioctl+0xe5/0x150
[ 1345.379313][T23910]  ? __pfx_fb_ioctl+0x10/0x10
[ 1345.383381][T22033] usb 4-1: device descriptor read/8, error -71
[ 1345.384217][T23910]  __x64_sys_ioctl+0x190/0x200
[ 1345.394870][T23910]  do_syscall_64+0xcd/0x260
[ 1345.399373][T23910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1345.405286][T23910] RIP: 0033:0x7f453118e169
[ 1345.409699][T23910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1345.429436][T23910] RSP: 002b:00007f4531f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1345.437875][T23910] RAX: ffffffffffffffda RBX: 00007f45313b5fa0 RCX: 00007f453118e169
[ 1345.445851][T23910] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005
[ 1345.453853][T23910] RBP: 00007f4531210a68 R08: 0000000000000000 R09: 0000000000000000
[ 1345.461866][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1345.469861][T23910] R13: 0000000000000000 R14: 00007f45313b5fa0 R15: 00007ffe8ebcb748
[ 1345.477849][T23910]  </TASK>
[ 1345.480927][T23910] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1345.488200][T23910] CPU: 1 UID: 0 PID: 23910 Comm: syz.1.5127 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1345.500261][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1345.510315][T23910] Call Trace:
[ 1345.513588][T23910]  <TASK>
[ 1345.516509][T23910]  dump_stack_lvl+0x3d/0x1f0
[ 1345.521104][T23910]  panic+0x71c/0x800
[ 1345.524991][T23910]  ? __pfx_panic+0x10/0x10
[ 1345.529399][T23910]  ? show_trace_log_lvl+0x29b/0x3e0
[ 1345.534606][T23910]  ? drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.539887][T23910]  check_panic_on_warn+0xab/0xb0
[ 1345.544819][T23910]  __warn+0xf6/0x3c0
[ 1345.548709][T23910]  ? drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.553993][T23910]  report_bug+0x3c3/0x580
[ 1345.558324][T23910]  ? drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.563616][T23910]  handle_bug+0x184/0x210
[ 1345.567947][T23910]  exc_invalid_op+0x17/0x50
[ 1345.572450][T23910]  asm_exc_invalid_op+0x1a/0x20
[ 1345.577295][T23910] RIP: 0010:drm_wait_one_vblank+0x2f6/0x5b0
[ 1345.583184][T23910] Code: ed 0f 84 12 02 00 00 e8 88 3e 4c fc 48 89 ef e8 40 67 8d 00 44 89 e1 4c 89 ea 48 c7 c7 80 0f 0a 8c 48 89 c6 e8 db cc 0b fc 90 <0f> 0b 90 90 e9 4e fe ff ff e8 5c 3e 4c fc 48 89 ef e8 34 06 06 06
[ 1345.602790][T23910] RSP: 0018:ffffc9000475fb20 EFLAGS: 00010286
[ 1345.608844][T23910] RAX: 0000000000000000 RBX: ffff8881437ea000 RCX: ffffc9002100c000
[ 1345.616797][T23910] RDX: 0000000000080000 RSI: ffffffff817ae005 RDI: 0000000000000001
[ 1345.624750][T23910] RBP: ffff8881437d4010 R08: 0000000000000001 R09: 0000000000000000
[ 1345.632702][T23910] R10: 0000000000000001 R11: 000000000003e890 R12: 0000000000000000
[ 1345.640652][T23910] R13: ffff88814179ce40 R14: 1ffff920008ebf67 R15: 000000000001384e
[ 1345.648612][T23910]  ? __warn_printk+0x1a5/0x350
[ 1345.653364][T23910]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[ 1345.658981][T23910]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1345.665038][T23910]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1345.670223][T23910]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1345.676015][T23910]  ? drm_vblank_get+0x150/0x290
[ 1345.680848][T23910]  drm_fb_helper_ioctl+0x156/0x1a0
[ 1345.685944][T23910]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[ 1345.691558][T23910]  do_fb_ioctl+0x3d2/0x7e0
[ 1345.695958][T23910]  ? __pfx_do_fb_ioctl+0x10/0x10
[ 1345.700883][T23910]  ? do_vfs_ioctl+0x512/0x1990
[ 1345.705658][T23910]  ? selinux_file_ioctl+0x180/0x270
[ 1345.710850][T23910]  fb_ioctl+0xe5/0x150
[ 1345.714900][T23910]  ? __pfx_fb_ioctl+0x10/0x10
[ 1345.719558][T23910]  __x64_sys_ioctl+0x190/0x200
[ 1345.724308][T23910]  do_syscall_64+0xcd/0x260
[ 1345.728801][T23910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1345.734678][T23910] RIP: 0033:0x7f453118e169
[ 1345.739081][T23910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1345.758669][T23910] RSP: 002b:00007f4531f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1345.767063][T23910] RAX: ffffffffffffffda RBX: 00007f45313b5fa0 RCX: 00007f453118e169
[ 1345.775014][T23910] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005
[ 1345.782965][T23910] RBP: 00007f4531210a68 R08: 0000000000000000 R09: 0000000000000000
[ 1345.790916][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1345.798865][T23910] R13: 0000000000000000 R14: 00007f45313b5fa0 R15: 00007ffe8ebcb748
[ 1345.806827][T23910]  </TASK>
[ 1345.810022][T23910] Kernel Offset: disabled
[ 1345.814322][T23910] Rebooting in 86400 seconds..