last executing test programs:

23.33693982s ago: executing program 4 (id=238):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020b30100000000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402060602"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xffffff00, 0xffffff00, 'veth1_virt_wifi\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x41}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x80000000})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="ff004000", 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = syz_open_dev$loop(0x0, 0xd79, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$I2C(0x0, 0x0, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)

19.366882001s ago: executing program 4 (id=251):
syz_io_uring_setup(0x5d68, &(0x7f00000002c0)={0x0, 0x64a5, 0x200, 0x1, 0x5b}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
ioctl$int_in(r1, 0x40000000af01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x64, 0x0, 0xf7}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r6 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

16.173347334s ago: executing program 2 (id=260):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0xa32d}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x20000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0227009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
userfaultfd(0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
memfd_create(0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x0, 0x3, 0x34f})
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4})
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

15.61662359s ago: executing program 4 (id=261):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800000000000000", @ANYRES32, @ANYRESDEC], 0x48)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0)

15.018482273s ago: executing program 2 (id=264):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0xf, @private2={0xfc, 0x2, '\x00', 0x4}, 0x400}}, {{0xa, 0x4e24, 0xffffffff, @mcast1}}}, 0x108)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000))
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001400010028bd7000000000000a00a1fe", @ANYRES32=r5, @ANYBLOB="14000100ff05000000019efc12589260d9ac1df3e24de8d55963643fbf57bc9fc3580d589dd2b3f68a47ffbaaf551ed8dd221445db971a43185da16984b326702df0f2d53700"/79], 0x2c}}, 0x24000040)
socket(0x10, 0x803, 0x5e)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0)
r8 = getpid()
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000b0000000000000c4d5c1337fb0903000000070000000000000e0300000000000000002e00612e0008"], &(0x7f00000011c0)=""/4096, 0x3b, 0x1000, 0x0, 0x4, 0x10000, @value}, 0x28)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES16=r1, @ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18)
recvfrom$inet(r1, &(0x7f00000002c0)=""/111, 0x6f, 0x2000, &(0x7f0000000400)={0x2, 0x4e22, @local}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r12, 0x40044160, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001180)={r8, r11, 0x0, 0xd, &(0x7f0000001140)='/dev/net/tun\x00'}, 0x30)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffda1, 0x0, 0x0, 0x20, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff63, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4)

14.065113814s ago: executing program 2 (id=267):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000000200008f02000000000000", @ANYRES32, @ANYBLOB="006d19fe46c7b0fe50abb8bd98a3fb0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24014890}, 0x8000)
openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
chdir(0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0)
r5 = gettid()
timer_create(0x6, &(0x7f0000000000)={0x0, 0xd, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4)
connect$netrom(r2, 0x0, 0x0)

13.877644695s ago: executing program 4 (id=269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioperm(0x0, 0x1, 0x1bf4)
fallocate(0xffffffffffffffff, 0x0, 0x4, 0x7)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="180400"/21, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000030000000200"/28], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x4, [@typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @fwd={0x1}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @volatile={0x9}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x2, 0x2}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @enum64={0x5, 0x8, 0x0, 0x13, 0x0, 0x2, [{0xc, 0xc, 0x3}, {0xb, 0x2, 0x10000}, {0x2, 0x6, 0x2}, {0x8, 0x2, 0x7}, {0x7, 0xfffffffb, 0x4}, {0xf, 0x1000, 0x7fffffff}, {0xd, 0x400, 0xcd}, {0x5, 0x5, 0x3}]}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x7, [{0xf, 0x2}, {0xe, 0x3, 0x4}, {0x9, 0x2, 0x1}, {0xf, 0x0, 0x1}]}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000380)=""/156, 0x12c, 0x9c, 0x1, 0x5, 0x0, @void, @value}, 0x28)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', r2, r4, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a00)={0xffffffffffffffff, &(0x7f0000000780)="73a21680f6e30cd254e04ab4ba5c83c862a629383b1adfb0af33acb2cce70a348d7369992e9c2196115ae74f47579ba58c82d27ee4f01a66b6743a4e3500163d803d750215eb3550e68b52f2a79b1fa56b3c2ed4bf04d35c7c77117a8c580a2cb1fbe0fa87678d6b1711cc73014d5922f1ae6d04e02a5968d8cb166bc4ad2e964b23a4e7be8b152cb5ade9562933ff50392e7305af3652482398b7945bb972e9fe6c35aa75524b85b2d2ae6ef3eae883254bb498accec196632a05841ffab3a36b9b9648b2bc7fda8ba6036bb4431e76794c8db1", &(0x7f0000001940)=""/130}, 0x20)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x8010, r3, 0xde90b000)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x50e, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f00000000c0)=0x13)
write(r9, &(0x7f0000000000)='#', 0x1)
ioctl$TCSETA(r9, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x401, 0x6, 0xffffffff00000000, 0x81, 0x2, 0x3}, &(0x7f0000001ac0)={0x1, 0x1, 0x3, 0x7fffffff, 0x3ff, 0x5, 0x4, 0x4}, &(0x7f0000001b00)={0x2, 0x6, 0x1, 0x2, 0xa, 0x5, 0x0, 0x8001}, &(0x7f0000001b40), &(0x7f0000001bc0)={&(0x7f0000001b80)={[0x4]}, 0x8})
ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f00000006c0)=0x5f)
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1a, 0x4004000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x4}, 0x14)
socket$inet6(0xa, 0x3, 0x6)
syz_emit_ethernet(0x82, &(0x7f0000000880)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080))
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000004c0)="b053a2b8f08e7a91dd7e9efc6cf0127f9483d6944a0b75719452e657517f2b475efd7ea91fd025be929ca277c39761ea3b1e1a68e9c00d1fd000cfcbacc767393a9e6a392d1255ce5a7829bd5018f7cf7e093320382113db7b1c3363ea39b1f399f5560e48536f7088a7ed37e6d03e2074d781a6a24c3a", &(0x7f0000000540)=""/33, &(0x7f0000000580)="e3be1b4f3be57916c32353bac657ce06acacb7396f6b83ce71c6f88eb266cae8b03fa2469f2bb57b7af81e", &(0x7f00000005c0)="f1b9be79f1244f2710d26d4a4be5640c41423cf53838ff46254ad026e87af773959d8ee04fddbf5dfcdfbef508b8e3e559e1653530bec49291901e1875cb76c1f695b0c73659b82aac42cb8e9c61dc8f3fcd17d5a490eeb888560aac4dff3c69420b4e52d3e190712a5d009dfae7ec18cb6fa5955096cd9c1d3ce3685317", 0x8, r8}, 0x38)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)

12.995391385s ago: executing program 1 (id=270):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xa32d}, {{0x0, 0x0, &(0x7f0000001a80)}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x20000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0227009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
userfaultfd(0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
memfd_create(0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x0, 0x3, 0x34f})
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4})
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000)

12.854364166s ago: executing program 3 (id=271):
syz_io_uring_setup(0x5d68, &(0x7f00000002c0)={0x0, 0x64a5, 0x200, 0x1, 0x5b}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
ioctl$int_in(r1, 0x40000000af01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x64, 0x0, 0xf7}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r6 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

12.683504863s ago: executing program 4 (id=273):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6)
setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), 0x4)

12.339670079s ago: executing program 1 (id=274):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0xa32d}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x20000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0227009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
userfaultfd(0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
memfd_create(0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x0, 0x3, 0x34f})
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4})
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

11.820801953s ago: executing program 0 (id=275):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x1c, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8004)

11.442011514s ago: executing program 1 (id=276):
ioperm(0x0, 0x2, 0x7e)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10)
connect$inet6(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x2, &(0x7f0000000040)={0x18, "ee792d2f5ac6bb2cc1f74c9217fc9ba2047361656b88acf01f15a9daf6825bcb90"}})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r6, 0x8b29, &(0x7f0000000040))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
dup2(r4, r4)

11.391214761s ago: executing program 0 (id=277):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x641, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8080)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x105000, 0x0)
ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000140)={0x0, 0x401})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)) (fail_nth: 2)

9.555517908s ago: executing program 4 (id=278):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
connect$inet6(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
dup2(r4, r4)

9.071578318s ago: executing program 1 (id=279):
syz_io_uring_setup(0x5d68, &(0x7f00000002c0)={0x0, 0x64a5, 0x200, 0x1, 0x5b}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
ioctl$int_in(r1, 0x40000000af01, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x37, 0x6, 0x10, 0x2, 0x64, 0x0, 0xf7}})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r6 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r6})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)

8.678589579s ago: executing program 3 (id=280):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.434803988s ago: executing program 3 (id=281):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xce)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000300)=@generic={0x3, 0x1, 0x1})
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004600002c0000000000069078ac1e0001ac14140d8903a20000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="070000005159960ec974628578e5f24681b6edea85aab119f088dbeb1ca9f92d0bd82d1ff59210e196"], 0x0)

8.14068599s ago: executing program 3 (id=282):
socket$netlink(0x10, 0x3, 0x12)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x201442, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x29, 0x2)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8ee2, 0x8, 0x2, 0x109}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r3)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0x7, &(0x7f0000000240)={0x2, 0x8f}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$cec(&(0x7f0000003300), 0x0, 0x40000)
ioctl$CEC_RECEIVE(r7, 0xc0386106, &(0x7f0000003340)={0x80000001, 0x9, 0x3, 0x2, 0x7, 0x3, "eb0f6cb62a4c4091dc7a9a10c4c39d3e", 0x13, 0x6, 0x8, 0x7, 0x16, 0x3, 0xf})
syz_genetlink_get_family_id$nl80211(0x0, r6)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006797904021043503bf650000000109021b0001000000000904db000102020b0109050f08c705400807"], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6)

8.035443295s ago: executing program 0 (id=283):
ioperm(0x0, 0x2, 0x7e)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0xff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x7f, 0x2, &(0x7f0000000040)={0x18, "ee792d2f5ac6bb2cc1f74c9217fc9ba2047361656b88acf01f15a9daf6825bcb90"}})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r5, 0x8b29, &(0x7f0000000040))

6.553694883s ago: executing program 0 (id=284):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xdfffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x1, 0x7, 0xf, 0x8}, 0x3, 0x40}, [{0x4f29, 0x1, 0xacc3, 0x9, 0x2, 0x2aaaa9c1}, {0x8, 0x3, 0x5, 0x8, 0x8000, 0x5}, {0x484c, 0x7, 0x6, 0x10000, 0x140000, 0xec0}, {0x2, 0x5, 0x401, 0xa, 0x7, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x7, 0xc}, {0x4, 0x6adc, 0x5a5, 0xe, 0xe, 0x9}, {0x9, 0x3, 0x4, 0x5, 0x4, 0x64}, {0xfffd, 0xffffff7f, 0xfffffffa, 0x3, 0x8}, {0x7, 0x1, 0x9, 0x80, 0xb44, 0xfffffff9}, {0x6, 0xfffffff9, 0x7fffffff, 0x32a8, 0xfffffffe, 0x1}, {0x1000, 0x8000, 0xffff6560, 0x8, 0x7, 0x3}, {0x7fffffff, 0x1, 0x800, 0x8, 0x2, 0x6}, {0xd28, 0xb1, 0x5, 0x2, 0x1, 0x6}, {0x34, 0x9, 0x6, 0xa13, 0x0, 0x1}, {0xc8c863be, 0x7fff, 0x7, 0x8, 0x19c372c2, 0x3bfc7233}, {0x2, 0x0, 0x10000, 0x5, 0x5, 0x5}, {0x6, 0x9, 0x1, 0x4, 0x921, 0x1000}, {0x6, 0x5ac5, 0x1, 0x304, 0xfff, 0x2d04}, {0x4, 0x9, 0xffff, 0x4, 0x1, 0x233}, {0x401, 0xffffffa6, 0x2, 0x7fffffff, 0xd9b, 0xfffffff9}, {0x8, 0x4db, 0x0, 0xe872, 0x3, 0xff}, {0x1, 0x9, 0xaddf, 0x200, 0x81a}, {0xd8, 0x10, 0x2, 0x7fffffff, 0x6, 0x4}, {0x1000, 0x3, 0x3, 0x1, 0x8}, {0x0, 0x8, 0x80000001, 0x9, 0x0, 0x2}, {0x5, 0x8, 0x8, 0x3ffc, 0x0, 0xe6c}, {0x6, 0x400, 0xffffff9e, 0x2, 0x40, 0x5}, {0x4, 0x9, 0xd91, 0x1, 0x6, 0x1}, {0xc, 0xff, 0x3, 0x1, 0xb, 0xb}, {0x0, 0x0, 0x0, 0x81, 0x6100, 0x9}, {0x7a2, 0x8, 0x2338, 0x2, 0x5, 0xfffffff9}, {0x7, 0xfffffbff, 0x6, 0x7, 0x1, 0x9}, {0x7f, 0x1, 0x7, 0x9, 0x7, 0x5}, {0x1000, 0x1, 0xfffffff8, 0x9, 0x4, 0x200}, {0x3, 0x2, 0x3, 0x3, 0xb, 0x2}, {0x43b3, 0x883e, 0x1, 0x3, 0xffffff80, 0x95b8}, {0x4, 0x243, 0x2, 0x400, 0xfffffffc, 0x80000001}, {0x8, 0xcf, 0x1, 0x0, 0x0, 0x6}, {0x400, 0x10, 0xa7, 0xc, 0x8, 0x1000}, {0x101, 0x5, 0x8, 0xa7, 0x7, 0xc84}, {0x4, 0x1, 0x5, 0x5, 0x2, 0x2}, {0x3, 0x9, 0x5, 0xffff, 0x7, 0xd}, {0x8, 0x9, 0xffffff39, 0x3, 0x8, 0x440}, {0x9, 0xb, 0x9, 0x2, 0x8, 0xa6fa}, {0xffff, 0x8ed, 0x9, 0x4, 0x3, 0x100}, {0x860, 0xfffffffb, 0xc0, 0x2, 0x9, 0x42d0}, {0xfffffffa, 0x1, 0x6, 0x8000, 0x1000, 0x40004}, {0x4, 0x90d2, 0x20000, 0x0, 0x8001, 0x646}, {0x1, 0x8, 0x0, 0x7, 0x9, 0x7}, {0x7ff, 0x0, 0x2, 0x9, 0x13d5, 0x6}, {0x3, 0x0, 0x6, 0x347, 0x8000}, {0x7, 0x8, 0xb76a, 0x6, 0x2, 0x6}, {0x7ff, 0x200, 0x6e, 0xb4, 0x80a7, 0x8001}, {0xd, 0x8, 0x0, 0x1, 0x9, 0x1}, {0x3b, 0x4, 0x0, 0xe686, 0x9, 0x400000}, {0x2, 0x1, 0xf4, 0x7, 0x3, 0x1}, {0x80, 0x3, 0x6, 0x10001, 0x0, 0xffffffff}, {0xd93, 0xf5, 0x3, 0x1, 0x6, 0x2}, {0x2, 0x2, 0x3cd6, 0x4, 0x1, 0x9}, {0x3, 0x6, 0x0, 0x5, 0x10000, 0xffffff0f}, {0x7fff, 0x4, 0x8, 0x0, 0x6, 0x179436fe}, {0xb8a6, 0x0, 0x3, 0x9, 0x0, 0x51}, {0xe296, 0x7fff, 0x3, 0x2, 0xfff, 0xd}, {0x1, 0x6, 0x4, 0x6, 0x10000, 0xbd}, {0x9, 0x7f, 0x5744bcb9, 0x8, 0x10001, 0x8}, {0x2, 0x8, 0x6, 0x4, 0x2, 0xfb35}, {0x80000001, 0xb9a6, 0x1, 0x80, 0x1, 0x3f04}, {0x2, 0xffffffc0, 0xffff, 0x4, 0x300000, 0xc}, {0x2, 0x2, 0x8, 0x6, 0x5, 0xe1c4}, {0xfffffff6, 0x19, 0x3, 0x0, 0xab6f, 0x9}, {0x80000001, 0x6, 0x760d, 0x80, 0x2, 0x8f7}, {0x471800, 0x3, 0x7, 0x1, 0x8, 0x6}, {0xa000000, 0x9, 0x8, 0x8000, 0xe0, 0x401}, {0xc, 0x7f, 0x4, 0x2, 0x1, 0x200}, {0xdfd, 0x76, 0x6, 0x6c1f, 0x4, 0x8}, {0x7, 0x2, 0x3, 0xcc, 0x0, 0xe0}, {0x0, 0x3, 0x4, 0x2, 0x7, 0x3}, {0x8, 0x5, 0x9, 0x8, 0x3a4, 0x6}, {0xffc000, 0x10000, 0x1a4, 0x773, 0x2, 0xe2}, {0xe581, 0x8, 0x200, 0x9, 0xa9, 0x2}, {0x8, 0x7, 0x6, 0x4, 0x9, 0x3}, {0xa80, 0x6, 0x7fff, 0x2, 0xfffffff7, 0x2}, {0xa0, 0x81, 0xffff, 0xfffffffe, 0x17, 0x8}, {0x3, 0x2d5, 0x7, 0x0, 0xfffffffc, 0x80000001}, {0xe, 0x7, 0x0, 0x9, 0xffff, 0x200}, {0x9, 0x7ffffffa, 0x8, 0x9, 0x8, 0x5}, {0x7, 0x3, 0x80000000, 0x8, 0x1, 0xc246}, {0x3, 0x4, 0x1, 0xa, 0x1, 0x9}, {0xe3, 0x0, 0x0, 0x7, 0x400000, 0x1}, {0x0, 0x3, 0x81, 0xff, 0x14, 0x4}, {0x3, 0x8a8, 0x8, 0x978, 0x8, 0xfffffffe}, {0x10001, 0x8, 0x2, 0x80000001, 0x9d, 0xfffffc00}, {0x0, 0x5, 0x3, 0x9, 0x7, 0x8000}, {0x2, 0x8, 0x8, 0x0, 0x8, 0x6}, {0x4, 0x7, 0x7, 0x9, 0x7, 0x1000}, {0xfffffffa, 0x2, 0x5, 0x4, 0x3, 0xa}, {0x3, 0x66c, 0xfffff001, 0x4, 0x6, 0x5c}, {0x0, 0x9, 0x7, 0x480f, 0x6, 0x1000}, {0x7fffffff, 0x0, 0x7b, 0x7fff, 0x80000001, 0x401}, {0x6, 0x7ff, 0x407b, 0x800, 0x1, 0x5}, {0x6, 0x7b5, 0x2, 0x2, 0xfffffffc, 0x7bc9}, {0x750, 0x2, 0x41a2, 0x6, 0x5, 0x20}, {0xbc, 0x792c, 0xa4, 0x8, 0xb1c1, 0x3}, {0x800, 0x27, 0x9, 0x2, 0x4, 0x1}, {0x2, 0x8, 0x100, 0x9, 0xe, 0xfffffff9}, {0x39, 0x3, 0x101, 0x1, 0x4, 0x8}, {0x3, 0xecd, 0x80, 0x9, 0x100, 0xdcc}, {0x2, 0xab2c, 0x80000000, 0x1a, 0x87, 0xf}, {0x6, 0x7ff, 0x81, 0x0, 0x1, 0x800}, {0x9, 0x6, 0x7ffe, 0x200, 0x80000000, 0x7}, {0x10, 0x3, 0xdb, 0x400, 0x57, 0x1}, {0x8001, 0xffff, 0x3, 0x6, 0x2, 0x7}, {0x1, 0x10000, 0x1, 0x397a, 0x3, 0x7}, {0x80000001, 0x4, 0x5, 0xe6, 0x35c, 0x800}, {0x0, 0x101, 0x8, 0x401, 0x2, 0x7}, {0x9, 0x0, 0x23, 0x4, 0xe}, {0x10, 0x56c, 0xffff9586, 0xd, 0x9, 0xb}, {0x80000001, 0x7, 0x0, 0x2, 0x4, 0xe}, {0x7, 0x5, 0x80000001, 0xf8, 0x6, 0x2}, {0xa8, 0x101, 0x0, 0x7707, 0x5, 0x5}, {0x823, 0x9, 0x0, 0x5, 0x6f3, 0x800}, {0x3, 0x9, 0x1, 0x2, 0x2, 0x4}, {0x8, 0x0, 0x2, 0x80, 0x100, 0x612}, {0xfffff801, 0x1, 0xb, 0x7, 0x2, 0x453}, {0x8, 0x0, 0x1, 0x4, 0x0, 0x8}, {0x7, 0x7, 0x3, 0x9, 0x8, 0x7}, {0x1, 0x5, 0x5, 0x1, 0x48, 0x1}, {0x80, 0x9, 0x93e8, 0x7, 0x9, 0x7fffffff}], [{0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x1}, {0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {}, {0x4}, {0x3}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x6, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0xf}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x9, 0x1}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x9e6fab21fbfb7b49}, {0x3}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x500, 0x0}, 0x0)

5.845885631s ago: executing program 0 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_emit_ethernet(0xa0, &(0x7f0000000180)={@broadcast, @link_local, @void, {@x25={0x805, {0x1, 0x5, 0xf3, "3b6771c68c64ca3335973adf0f0404d870c7df5a6b64a1fb5d7d9653902d9862c3bd6983f6d92a2680d0d0b22b73316ba47bea962f170b36d9b43290c343507de5e23ec0f44ff979a265b18538b30410ebd0affd0097d36e612d77bc19c8cc17db48368a70114845d5fba112a20a3deff5e9f728b8cc6ac6240784929ae20a16de69ef026a384cbec36850af790d21"}}}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r4 = fsmount(r3, 0x0, 0x101)
write$dsp(r4, &(0x7f00000000c0)="066d1229d0da6a5b66707743fc67a4b88fb6225e6fada690f83170be7b6bd7af42", 0x21)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc})
open_by_handle_at(r3, &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xd54d, 0x4}, 0xc924, 0x1}}, 0x8840)
r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r7, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0x7, 0x0, 0xfffffefc})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000000c0)="f257a8ea7bc273dfaeab96850806", 0xe, 0x4010, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r11, 0x10c, 0x8, &(0x7f0000000000)=0x1000007, 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000140)=0x8)

5.499488367s ago: executing program 3 (id=286):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/44, 0x10b8c}], 0x1}}], 0x1, 0x2001, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x5, &(0x7f0000000200)=0x1)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)

5.447024159s ago: executing program 1 (id=287):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xa32d}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x20000, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0227009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
userfaultfd(0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
memfd_create(0x0, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x0, 0x3, 0x34f})
ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4})
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)

4.165100681s ago: executing program 2 (id=288):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
r4 = openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x28001, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106442, &(0x7f0000000240))

2.028876185s ago: executing program 3 (id=289):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x8, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r5)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b})
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001580)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r6, 0x1000)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x1000)
r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000001c0)={0x7, @raw_data="3c68b8b6d35f7606d9613d90769c91e8b6f10080407b7768f0ef49d1ddb92ec52c18750b962d1365fad20340e10c26ae34e0f14d4ebc351598e235b51e7050c216af9e11741141cba67938a8286097abae464d598bd4f6a8ba0628800371dde87cfbe1b47fc86da23f7f03bc29bb7538f746017fbc2a0a3a466193aecd8a2bb45cd3b52fc6b1f0cd3517707c2a53a624c3c36e43d28d97f949af3374ce02f7e73f6d34b89c50c1e26b80641014deb45160e28320191528ffb027013be60140dd0c4a8845625d0e64"})

1.100914642s ago: executing program 1 (id=290):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xffffff80, 0x3}]}, 0xc, 0x3)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000068000100030000000000008000000000000000000c000200010000000600000006000300e0"], 0x2c}}, 0x4004)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x20000840)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008c410cf8a00000000000109022400010000000309040000fd0300020009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002206"], 0x0}, 0x0)

513.53848ms ago: executing program 2 (id=291):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

38.679822ms ago: executing program 0 (id=292):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0xfffe, 0xa0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80802000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x24, 0x2, 0x0, 0x20, 0x0, 0x1}}, 0x50)

0s ago: executing program 2 (id=293):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)

kernel console output (not intermixed with test programs):

   61.016538][ T5823] veth0_macvtap: entered promiscuous mode
[   61.027594][ T5823] veth1_macvtap: entered promiscuous mode
[   61.052793][ T5817] veth0_vlan: entered promiscuous mode
[   61.073745][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.082598][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.096590][ T5811] veth0_vlan: entered promiscuous mode
[   61.103491][ T5808] veth0_vlan: entered promiscuous mode
[   61.120294][ T5817] veth1_vlan: entered promiscuous mode
[   61.135132][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.146011][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.157891][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.167527][ T5811] veth1_vlan: entered promiscuous mode
[   61.186702][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.197172][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.208895][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.218435][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.225876][ T5808] veth1_vlan: entered promiscuous mode
[   61.235194][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.250338][   T30] audit: type=1400 audit(1746249807.314:112): avc:  denied  { mounton } for  pid=5809 comm="syz-executor" path="/root/syzkaller.qVSrJQ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   61.274350][ T5817] veth0_macvtap: entered promiscuous mode
[   61.288460][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.297414][   T30] audit: type=1400 audit(1746249807.314:113): avc:  denied  { mount } for  pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   61.302973][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.322150][   T30] audit: type=1400 audit(1746249807.314:114): avc:  denied  { mounton } for  pid=5809 comm="syz-executor" path="/root/syzkaller.qVSrJQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   61.328721][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.355820][   T30] audit: type=1400 audit(1746249807.314:115): avc:  denied  { mount } for  pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   61.363451][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.388612][   T30] audit: type=1400 audit(1746249807.314:116): avc:  denied  { mounton } for  pid=5809 comm="syz-executor" path="/root/syzkaller.qVSrJQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   61.428294][   T30] audit: type=1400 audit(1746249807.314:117): avc:  denied  { mounton } for  pid=5809 comm="syz-executor" path="/root/syzkaller.qVSrJQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   61.435609][ T5817] veth1_macvtap: entered promiscuous mode
[   61.460653][   T30] audit: type=1400 audit(1746249807.314:118): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   61.483788][   T30] audit: type=1400 audit(1746249807.354:119): avc:  denied  { mounton } for  pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   61.487177][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.511936][   T30] audit: type=1400 audit(1746249807.354:120): avc:  denied  { mount } for  pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=6136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   61.561790][ T5811] veth0_macvtap: entered promiscuous mode
[   61.577528][ T5808] veth0_macvtap: entered promiscuous mode
[   61.609260][ T5808] veth1_macvtap: entered promiscuous mode
[   61.630416][ T5811] veth1_macvtap: entered promiscuous mode
[   61.650524][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.662352][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.674554][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.685342][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.697529][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.728923][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.739908][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.749850][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.760919][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.772353][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.797056][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.798988][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.819527][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.821776][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.837878][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.849240][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.166017][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.182304][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.192198][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.206410][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.216796][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.217500][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.218385][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.244156][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.244178][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.244186][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.244198][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.244206][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.244217][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.245612][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.250049][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.250075][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.250094][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.250112][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.251111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   62.263611][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.263630][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.263637][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.263646][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.263652][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.263661][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.263668][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.263677][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.265036][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.553016][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.564635][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.579146][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.593549][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.604769][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.620788][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.630613][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.645063][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.655497][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.680264][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.696030][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.724255][ T5821] Bluetooth: hci0: command tx timeout
[   62.727934][ T5814] Bluetooth: hci1: command tx timeout
[   62.729838][ T5126] Bluetooth: hci2: command tx timeout
[   62.777819][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.787571][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.796432][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.805695][ T5126] Bluetooth: hci3: command tx timeout
[   62.805831][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.811144][ T5821] Bluetooth: hci4: command tx timeout
[   62.844850][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.855523][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.895798][ T5900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.974322][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.006126][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.037301][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.050041][ T5906] FAULT_INJECTION: forcing a failure.
[   63.050041][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   63.068195][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.109053][ T5906] CPU: 1 UID: 0 PID: 5906 Comm: syz.4.5 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[   63.109077][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   63.109087][ T5906] Call Trace:
[   63.109092][ T5906]  <TASK>
[   63.109098][ T5906]  dump_stack_lvl+0x16c/0x1f0
[   63.109122][ T5906]  should_fail_ex+0x512/0x640
[   63.109146][ T5906]  _copy_from_user+0x2e/0xd0
[   63.109169][ T5906]  move_addr_to_kernel+0x65/0x170
[   63.109193][ T5906]  __sys_sendto+0x1be/0x510
[   63.109217][ T5906]  ? __pfx___sys_sendto+0x10/0x10
[   63.109248][ T5906]  ? count_memcg_events_mm.constprop.0+0x138/0x340
[   63.109291][ T5906]  __x64_sys_sendto+0xe0/0x1c0
[   63.109313][ T5906]  ? do_syscall_64+0x91/0x260
[   63.109333][ T5906]  ? lockdep_hardirqs_on+0x7c/0x110
[   63.109352][ T5906]  do_syscall_64+0xcd/0x260
[   63.109374][ T5906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.109391][ T5906] RIP: 0033:0x7f54b79907fc
[   63.109404][ T5906] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[   63.109418][ T5906] RSP: 002b:00007f54b8814ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[   63.109433][ T5906] RAX: ffffffffffffffda RBX: 00007f54b8814fc0 RCX: 00007f54b79907fc
[   63.109443][ T5906] RDX: 0000000000000020 RSI: 00007f54b8815010 RDI: 0000000000000005
[   63.109453][ T5906] RBP: 0000000000000000 R08: 00007f54b8814f14 R09: 000000000000000c
[   63.109462][ T5906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[   63.109471][ T5906] R13: 00007f54b8814f68 R14: 00007f54b8815010 R15: 0000000000000000
[   63.109492][ T5906]  </TASK>
[   63.127694][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.323215][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.492803][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.510056][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.544031][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.563776][ T5914] netlink: 'syz.0.10': attribute type 2 has an invalid length.
[   63.574396][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.597316][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   64.250425][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   64.347374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   64.557702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   64.609860][ T5927] affs: No valid root block on device nullb0
[   64.762427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   64.801741][ T5821] Bluetooth: hci2: command tx timeout
[   64.801750][ T5814] Bluetooth: hci0: command tx timeout
[   64.801824][ T5126] Bluetooth: hci1: command tx timeout
[   64.881725][ T5126] Bluetooth: hci3: command tx timeout
[   64.881796][ T5814] Bluetooth: hci4: command tx timeout
[   64.967889][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   65.697744][   T30] kauditd_printk_skb: 98 callbacks suppressed
[   65.706879][   T30] audit: type=1400 audit(1746249811.764:219): avc:  denied  { read } for  pid=5932 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   65.833818][   T30] audit: type=1400 audit(1746249811.904:220): avc:  denied  { create } for  pid=5942 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.843401][ T5944] 9pnet_fd: Insufficient options for proto=fd
[   66.164915][   T30] audit: type=1400 audit(1746249811.904:221): avc:  denied  { ioctl } for  pid=5942 comm="syz.3.14" path="socket:[7963]" dev="sockfs" ino=7963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.236089][   T30] audit: type=1400 audit(1746249811.904:222): avc:  denied  { bind } for  pid=5942 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.301084][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.330963][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   66.439701][   T30] audit: type=1400 audit(1746249811.904:223): avc:  denied  { write } for  pid=5942 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.481523][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   66.491590][   T30] audit: type=1400 audit(1746249812.234:224): avc:  denied  { create } for  pid=5932 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   66.748386][   T30] audit: type=1400 audit(1746249812.234:225): avc:  denied  { create } for  pid=5932 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   66.769488][   T30] audit: type=1400 audit(1746249812.234:226): avc:  denied  { getopt } for  pid=5932 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   66.790633][   T30] audit: type=1400 audit(1746249812.314:227): avc:  denied  { lock } for  pid=5948 comm="syz.1.16" path="socket:[6988]" dev="sockfs" ino=6988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[   66.829071][   T30] audit: type=1400 audit(1746249812.594:228): avc:  denied  { ioctl } for  pid=5952 comm="syz.2.17" path="socket:[7990]" dev="sockfs" ino=7990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   67.761093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   67.855345][ T5960] IPv6: NLM_F_CREATE should be specified when creating new route
[   67.877382][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   67.986223][ T5945] IPVS: starting estimator thread 0...
[   68.051187][   T91] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.074361][ T5975] Debayer A: =================  START STATUS  =================
[   68.082397][ T5975] Debayer A: Debayer Mean Window Size: 3
[   68.088182][ T5975] Debayer A: ==================  END STATUS  ==================
[   68.101195][ T5974] IPVS: using max 56 ests per chain, 134400 per kthread
[   68.134303][ T5975] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   68.245105][ T5975] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   68.424345][   T91] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   68.451255][   T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.587960][ T5981] ieee802154 phy0 wpan0: encryption failed: -22
[   68.913182][   T91] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.930909][   T91] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   69.030218][   T91] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   69.041438][   T91] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   69.055469][   T91] usb 5-1: Manufacturer: syz
[   69.138534][   T91] usb 5-1: config 0 descriptor??
[   69.542097][ T5992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=5992 comm=syz.2.27
[   69.580704][   T91] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[   69.602435][   T91] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[   69.661849][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'.
[   69.670607][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'.
[   70.345871][   T91] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[   70.492349][ T6002] raw_sendmsg: syz.2.29 forgot to set AF_INET. Fix it!
[   70.992347][   T30] kauditd_printk_skb: 27 callbacks suppressed
[   70.992361][   T30] audit: type=1400 audit(1746249817.064:256): avc:  denied  { write } for  pid=5965 comm="syz.4.15" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   71.020896][    C1] vkms_vblank_simulate: vblank timer overrun
[   71.062293][   T30] audit: type=1400 audit(1746249817.104:257): avc:  denied  { create } for  pid=5965 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.065277][ T6012] netlink: 192 bytes leftover after parsing attributes in process `syz.2.33'.
[   71.081974][   T30] audit: type=1400 audit(1746249817.104:258): avc:  denied  { ioctl } for  pid=5965 comm="syz.4.15" path="socket:[8253]" dev="sockfs" ino=8253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.093478][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[   71.126115][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   71.135126][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'.
[   71.146411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[   71.736792][ T5860] usb 5-1: USB disconnect, device number 2
[   71.745237][   T30] audit: type=1400 audit(1746249817.104:259): avc:  denied  { write } for  pid=5965 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.808703][   T30] audit: type=1400 audit(1746249817.194:260): avc:  denied  { setopt } for  pid=5965 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   71.879169][   T30] audit: type=1400 audit(1746249817.944:261): avc:  denied  { unmount } for  pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   71.934449][ T6012] mmap: syz.2.33 (6012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   71.954082][   T30] audit: type=1400 audit(1746249818.024:262): avc:  denied  { write } for  pid=6017 comm="syz.1.34" name="tcp6" dev="proc" ino=4026533305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   72.035472][   T30] audit: type=1400 audit(1746249818.104:263): avc:  denied  { open } for  pid=6017 comm="syz.1.34" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[   72.100835][   T30] audit: type=1400 audit(1746249818.134:264): avc:  denied  { sqpoll } for  pid=6017 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   72.430998][ T5860] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.460882][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.649481][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   72.690806][ T6030] ieee802154 phy0 wpan0: encryption failed: -22
[   73.103753][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   73.118441][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   73.131849][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   73.148516][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   73.158339][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.161560][ T5903] usb 4-1: Using ep0 maxpacket: 8
[   73.178231][ T5860] usb 3-1: config 0 descriptor??
[   73.189913][ T5903] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   73.196038][ T6023] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   73.202259][ T5903] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[   73.221255][   T30] audit: type=1400 audit(1746249819.294:265): avc:  denied  { create } for  pid=6033 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   73.245019][ T5903] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   73.257728][ T5903] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   73.268527][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.280938][ T5903] usb 4-1: Product: syz
[   73.285140][ T5903] usb 4-1: Manufacturer: syz
[   73.302060][ T5903] usb 4-1: SerialNumber: syz
[   73.317120][ T5903] hso 4-1:6.0: Can't find BULK IN endpoint
[   73.441966][ T5945] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.508416][ T6040] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[   73.527521][ T6040] qnx6: wrong signature (magic) in superblock #1.
[   73.530538][ T5859] usb 4-1: USB disconnect, device number 2
[   73.537091][ T6040] qnx6: unable to read the first superblock
[   73.561818][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'.
[   73.578232][ T6040] netlink: 'syz.4.42': attribute type 1 has an invalid length.
[   73.610799][ T5945] usb 1-1: Using ep0 maxpacket: 32
[   73.618357][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.630004][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.640379][ T5945] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   73.653252][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.664215][ T5945] usb 1-1: config 0 descriptor??
[   73.672792][ T5945] hub 1-1:0.0: USB hub found
[   73.701292][ T6045] nbd4: detected capacity change from 0 to 2251799813685252
[   73.710078][ T6046] block nbd4: shutting down sockets
[   73.718593][   T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.728947][   T11] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.731114][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.737654][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.760622][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.770273][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.780375][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.788485][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.797594][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.806078][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.815194][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.823320][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.832453][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.840374][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.850276][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.858237][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.867449][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.879156][ T5828] ldm_validate_partition_table(): Disk read failed.
[   73.886931][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.896715][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.904948][ T5813] usb 2-1: Using ep0 maxpacket: 8
[   73.905704][ T5828] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   73.912633][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.919165][ T5828] Buffer I/O error on dev nbd4, logical block 0, async page read
[   73.932232][ T5813] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   73.938331][ T5828] Dev nbd4: unable to read RDB block 0
[   73.953527][ T5828]  nbd4: unable to read partition table
[   73.955598][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.976457][ T5813] usb 2-1: config 0 descriptor??
[   73.976602][ T5828] ldm_validate_partition_table(): Disk read failed.
[   73.990082][ T5828] Dev nbd4: unable to read RDB block 0
[   73.997738][ T5828]  nbd4: unable to read partition table
[   74.083263][ T5945] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   74.119792][ T6050] FAULT_INJECTION: forcing a failure.
[   74.119792][ T6050] name failslab, interval 1, probability 0, space 0, times 1
[   74.133886][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: syz.3.45 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[   74.133910][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   74.133919][ T6050] Call Trace:
[   74.133925][ T6050]  <TASK>
[   74.133932][ T6050]  dump_stack_lvl+0x16c/0x1f0
[   74.133962][ T6050]  should_fail_ex+0x512/0x640
[   74.133982][ T6050]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[   74.134011][ T6050]  should_failslab+0xc2/0x120
[   74.134029][ T6050]  kmem_cache_alloc_noprof+0x6d/0x3b0
[   74.134051][ T6050]  ? __pfx___might_resched+0x10/0x10
[   74.134073][ T6050]  ? __anon_vma_prepare+0x344/0x5e0
[   74.134102][ T6050]  __anon_vma_prepare+0x344/0x5e0
[   74.134129][ T6050]  uprobe_write_opcode+0x1358/0x1a80
[   74.134172][ T6050]  ? __pfx___might_resched+0x10/0x10
[   74.134194][ T6050]  ? find_held_lock+0x2b/0x80
[   74.134213][ T6050]  ? __pfx_uprobe_write_opcode+0x10/0x10
[   74.134231][ T6050]  ? install_breakpoint.isra.0+0x752/0x870
[   74.134256][ T6050]  ? up_write+0x1b2/0x520
[   74.134274][ T6050]  install_breakpoint.isra.0+0x5f2/0x870
[   74.134304][ T6050]  uprobe_mmap+0x55b/0x1160
[   74.134328][ T6050]  ? __pfx_uprobe_mmap+0x10/0x10
[   74.134346][ T6050]  ? vms_complete_munmap_vmas+0x667/0x970
[   74.134379][ T6050]  __mmap_region+0xc1f/0x27c0
[   74.134398][ T6050]  ? __pfx___mmap_region+0x10/0x10
[   74.134412][ T6050]  ? __lock_acquire+0x5ca/0x1ba0
[   74.134440][ T6050]  ? __kernel_text_address+0xd/0x40
[   74.134500][ T6050]  ? mm_get_unmapped_area+0x95/0xe0
[   74.134529][ T6050]  mmap_region+0x1ab/0x3f0
[   74.134549][ T6050]  do_mmap+0xd8e/0x11b0
[   74.134574][ T6050]  ? __pfx_do_mmap+0x10/0x10
[   74.134594][ T6050]  ? __pfx_down_write_killable+0x10/0x10
[   74.134623][ T6050]  vm_mmap_pgoff+0x281/0x450
[   74.134649][ T6050]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[   74.134673][ T6050]  ? __fget_files+0x20e/0x3c0
[   74.134703][ T6050]  ksys_mmap_pgoff+0x32c/0x5c0
[   74.134721][ T6050]  ? __pfx_ksys_write+0x10/0x10
[   74.134743][ T6050]  ? rcu_is_watching+0x12/0xc0
[   74.134764][ T6050]  __x64_sys_mmap+0x125/0x190
[   74.134785][ T6050]  do_syscall_64+0xcd/0x260
[   74.134808][ T6050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.134832][ T6050] RIP: 0033:0x7fbc8558e969
[   74.134845][ T6050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.134859][ T6050] RSP: 002b:00007fbc8638b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   74.134876][ T6050] RAX: ffffffffffffffda RBX: 00007fbc857b5fa0 RCX: 00007fbc8558e969
[   74.134886][ T6050] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000
[   74.134895][ T6050] RBP: 00007fbc8638b090 R08: 0000000000000006 R09: 0000000000000000
[   74.134905][ T6050] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[   74.134914][ T6050] R13: 0000000000000000 R14: 00007fbc857b5fa0 R15: 00007fff4ae605c8
[   74.134937][ T6050]  </TASK>
[   74.185955][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.188277][    C1] vkms_vblank_simulate: vblank timer overrun
[   74.211102][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.462302][ T6032] vivid-000: disconnect
[   74.469020][ T6031] vivid-000: reconnect
[   74.476129][ T5813] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   74.481908][ T5945] usbhid 1-1:0.0: can't add hid device: -71
[   74.501512][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   74.516265][ T5903] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   74.565750][ T5945] usb 1-1: USB disconnect, device number 2
[   74.685109][ T5903] usb 5-1: device descriptor read/64, error -71
[   74.995214][ T5813] usb 2-1: USB disconnect, device number 2
[   75.015026][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   75.082613][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'.
[   75.161531][ T5903] usb 5-1: device descriptor read/64, error -71
[   75.278543][ T5903] usb usb5-port1: attempt power cycle
[   75.297350][ T6059] syz_tun: entered allmulticast mode
[   75.546296][ T6067] netlink: zone id is out of range
[   75.552081][ T6067] netlink: zone id is out of range
[   75.558189][ T6067] netlink: zone id is out of range
[   75.564280][ T6067] netlink: zone id is out of range
[   75.569551][ T6067] netlink: zone id is out of range
[   75.576047][ T6067] netlink: zone id is out of range
[   75.596613][ T6067] netlink: zone id is out of range
[   75.611445][ T6067] netlink: zone id is out of range
[   75.620662][ T5860] usbhid 3-1:0.0: can't add hid device: -71
[   75.626997][ T6067] netlink: zone id is out of range
[   75.632734][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   75.639781][ T6070] syzkaller1: entered promiscuous mode
[   75.646168][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   75.654600][ T6067] netlink: zone id is out of range
[   75.666335][ T6070] syzkaller1: entered allmulticast mode
[   75.682287][ T5860] usb 3-1: USB disconnect, device number 2
[   75.685471][ T5903] usb 5-1: device descriptor read/8, error -71
[   75.870915][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[   75.888977][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[   75.974436][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[   75.986211][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'.
[   76.032009][ T5903] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   76.061482][ T5903] usb 5-1: device descriptor read/8, error -71
[   76.291003][   T81] cfg80211: failed to load regulatory.db
[   76.524727][ T5903] usb usb5-port1: unable to enumerate USB device
[   76.786378][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.811812][ T5945] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.910285][ T6092] batadv0: entered promiscuous mode
[   76.949918][ T6092] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.982618][ T6092] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   76.992738][ T6097] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[   77.001348][ T5945] usb 1-1: Using ep0 maxpacket: 16
[   77.010856][ T6097] overlayfs: missing 'lowerdir'
[   77.017936][ T5945] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   77.036175][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.151816][ T5945] usb 1-1: Product: syz
[   77.223844][ T5945] usb 1-1: Manufacturer: syz
[   77.390597][ T5945] usb 1-1: SerialNumber: syz
[   77.429138][ T5945] usb 1-1: config 0 descriptor??
[   77.445890][ T5945] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   77.462361][ T5945] usb 1-1: Detected FT232H
[   77.523522][   T30] kauditd_printk_skb: 27 callbacks suppressed
[   77.523539][   T30] audit: type=1400 audit(1746249823.584:293): avc:  denied  { setopt } for  pid=6101 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   77.720045][ T6111] warning: `syz.1.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.950837][ T5945] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   77.994806][ T5945] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[   78.026324][ T5945] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   78.072744][ T5945] usb 1-1: USB disconnect, device number 3
[   78.094634][ T5945] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   78.109282][ T5945] ftdi_sio 1-1:0.0: device disconnected
[   78.240878][   T81] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.473573][   T81] usb 3-1: Using ep0 maxpacket: 16
[   78.796683][   T81] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   78.805932][   T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.820487][   T81] usb 3-1: config 0 descriptor??
[   78.840862][   T91] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.859565][   T81] gspca_main: sonixj-2.14.0 probing 0471:0327
[   78.991261][   T91] usb 2-1: Using ep0 maxpacket: 16
[   78.998857][   T91] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   79.008462][   T91] usb 2-1: config 0 has no interface number 0
[   79.014760][   T91] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   79.030512][   T91] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   79.406580][   T91] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   79.416941][   T91] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   79.535872][   T91] usb 2-1: Product: syz
[   79.559603][   T91] usb 2-1: SerialNumber: syz
[   79.566446][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.575181][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.677185][   T81] gspca_sonixj: reg_r err -32
[   79.677539][   T91] usb 2-1: config 0 descriptor??
[   79.695873][   T81] sonixj 3-1:0.0: probe with driver sonixj failed with error -32
[   79.734222][   T91] cm109 2-1:0.8: invalid payload size 0, expected 4
[   79.773612][   T91] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5
[   79.804175][   T30] audit: type=1400 audit(1746249825.874:294): avc:  denied  { read } for  pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2767 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   79.895711][ T6133] /dev/nullb0: Can't open blockdev
[   79.909969][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'.
[   79.993433][ T6133] netlink: 'syz.3.73': attribute type 1 has an invalid length.
[   80.025452][ T6132] block nbd3: shutting down sockets
[   80.027717][   T30] audit: type=1400 audit(1746249825.874:295): avc:  denied  { open } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2767 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.120790][   T30] audit: type=1400 audit(1746249825.874:296): avc:  denied  { ioctl } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2767 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.151216][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.159138][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.160882][   T81] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   80.166333][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.180973][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.188089][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.195190][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.202891][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.209900][   T91] usb 2-1: USB disconnect, device number 3
[   80.215745][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[   80.215763][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   80.234377][   T30] audit: type=1400 audit(1746249825.874:297): avc:  denied  { read write } for  pid=6128 comm="syz.0.71" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   80.267763][   T30] audit: type=1400 audit(1746249825.874:298): avc:  denied  { open } for  pid=6128 comm="syz.0.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   80.292530][   T91] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
acpid: input device has been disconnected, fd 10
[   80.338290][   T30] audit: type=1400 audit(1746249825.904:299): avc:  denied  { map } for  pid=6128 comm="syz.0.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   80.360999][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.369992][   T30] audit: type=1400 audit(1746249825.904:300): avc:  denied  { execute } for  pid=6128 comm="syz.0.71" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   80.393038][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.421112][   T81] usb 1-1: device descriptor read/64, error -71
[   80.497620][   T30] audit: type=1400 audit(1746249826.534:301): avc:  denied  { ioctl } for  pid=6138 comm="syz.4.75" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9752 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   80.554884][ T6141] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET)
[   80.621637][   T30] audit: type=1400 audit(1746249826.674:302): avc:  denied  { create } for  pid=6138 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   80.641110][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.670873][   T81] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   80.777739][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.787299][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.800550][ T6143] capability: warning: `syz.2.67' uses 32-bit capabilities (legacy support in use)
[   80.811328][   T81] usb 1-1: device descriptor read/64, error -71
[   80.922417][   T81] usb usb1-port1: attempt power cycle
[   80.973551][ T5860] IPVS: starting estimator thread 0...
[   81.047829][ T6147] Debayer A: =================  START STATUS  =================
[   81.058945][ T6147] Debayer A: Debayer Mean Window Size: 3
[   81.064658][ T6147] Debayer A: ==================  END STATUS  ==================
[   81.072385][ T6146] IPVS: using max 77 ests per chain, 184800 per kthread
[   81.090839][ T6147] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   81.291033][   T81] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   81.313938][   T81] usb 1-1: device descriptor read/8, error -71
[   81.550843][   T81] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   81.656475][   T81] usb 1-1: device descriptor read/8, error -71
[   81.790987][   T81] usb usb1-port1: unable to enumerate USB device
[   81.849033][ T5945] usb 3-1: USB disconnect, device number 3
[   81.930831][   T91] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   81.950114][ T6162] vivid-004: =================  START STATUS  =================
[   81.959867][ T6162] vivid-004: Radio HW Seek Mode: Bounded
[   81.969181][ T6162] vivid-004: Radio Programmable HW Seek: false
[   81.979570][ T6162] vivid-004: RDS Rx I/O Mode: Block I/O
[   81.991377][ T6162] vivid-004: Generate RBDS Instead of RDS: false
[   81.998162][ T6162] vivid-004: RDS Reception: true
[   82.004434][ T6162] vivid-004: RDS Program Type: 0 inactive
[   82.011969][ T6162] vivid-004: RDS PS Name:  inactive
[   82.017316][ T6162] vivid-004: RDS Radio Text:  inactive
[   82.023111][ T6162] vivid-004: RDS Traffic Announcement: false inactive
[   82.030074][ T6162] vivid-004: RDS Traffic Program: false inactive
[   82.036706][ T6162] vivid-004: RDS Music: false inactive
[   82.042426][ T6162] vivid-004: ==================  END STATUS  ==================
[   82.170886][   T91] usb 5-1: Using ep0 maxpacket: 16
[   82.177652][   T91] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   82.196069][   T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.226024][   T91] usb 5-1: config 0 descriptor??
[   82.252455][   T91] gspca_main: sonixj-2.14.0 probing 0471:0327
[   82.361723][ T5945] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   82.531950][ T5945] usb 3-1: too many configurations: 60, using maximum allowed: 8
[   82.544620][ T5945] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 104
[   82.554517][ T5945] usb 3-1: can't read configurations, error -22
[   82.583153][   T30] kauditd_printk_skb: 5 callbacks suppressed
[   82.583168][   T30] audit: type=1400 audit(1746249828.654:308): avc:  denied  { read } for  pid=6172 comm="syz.3.84" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   82.613075][   T30] audit: type=1400 audit(1746249828.654:309): avc:  denied  { open } for  pid=6172 comm="syz.3.84" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   82.637131][   T30] audit: type=1400 audit(1746249828.664:310): avc:  denied  { ioctl } for  pid=6172 comm="syz.3.84" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   82.681631][ T6173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.84'.
[   82.720878][ T5945] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   82.873064][ T5945] usb 3-1: too many configurations: 60, using maximum allowed: 8
[   83.168030][ T5945] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 104
[   83.178354][ T5945] usb 3-1: can't read configurations, error -22
[   83.185804][   T91] gspca_sonixj: reg_r err -32
[   83.191543][ T5945] usb usb3-port1: attempt power cycle
[   83.198070][   T91] sonixj 5-1:0.0: probe with driver sonixj failed with error -32
[   83.265646][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[   83.274650][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'.
[   83.820883][ T5945] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   83.864336][ T5945] usb 3-1: too many configurations: 60, using maximum allowed: 8
[   83.883358][ T5945] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 104
[   83.895277][ T5945] usb 3-1: can't read configurations, error -22
[   84.210252][   T30] audit: type=1400 audit(1746249830.204:311): avc:  denied  { write } for  pid=6185 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   84.540874][ T5945] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   84.941535][ T5945] usb 3-1: device descriptor read/all, error -71
[   84.954994][   T81] usb 5-1: USB disconnect, device number 7
[   84.976073][ T5945] usb usb3-port1: unable to enumerate USB device
[   85.801602][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[   85.992079][   T30] audit: type=1400 audit(1746249832.064:312): avc:  denied  { mount } for  pid=6214 comm="syz.0.87" name="/" dev="ramfs" ino=8892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   86.155996][   T30] audit: type=1400 audit(1746249832.164:313): avc:  denied  { execute } for  pid=6196 comm="syz.2.91" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[   86.159057][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.179770][    C0] vkms_vblank_simulate: vblank timer overrun
[   86.331763][ T6217] 9pnet_fd: Insufficient options for proto=fd
[   86.424574][   T30] audit: type=1400 audit(1746249832.404:314): avc:  denied  { connect } for  pid=6216 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.519037][   T30] audit: type=1400 audit(1746249832.404:315): avc:  denied  { name_connect } for  pid=6216 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   86.561977][ T5945] usb 4-1: Using ep0 maxpacket: 8
[   86.667119][ T5945] usb 4-1: config 2 has an invalid interface number: 169 but max is 0
[   86.680847][   T30] audit: type=1400 audit(1746249832.494:316): avc:  denied  { shutdown } for  pid=6216 comm="syz.4.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.680889][   T30] audit: type=1400 audit(1746249832.494:317): avc:  denied  { name_connect } for  pid=6216 comm="syz.4.97" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   86.710782][ T5945] usb 4-1: config 2 has no interface number 0
[   87.018206][ T5945] usb 4-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   87.083540][ T5945] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92
[   87.107101][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.175398][ T5945] cypress_m8 4-1:2.169: DeLorme Earthmate USB converter detected
[   87.197999][ T5945] earthmate ttyUSB0: required endpoint is missing
[   88.202333][ T5945] usb 4-1: USB disconnect, device number 3
[   88.236103][ T5945] cypress_m8 4-1:2.169: device disconnected
[   88.257626][   T30] kauditd_printk_skb: 2 callbacks suppressed
[   88.257641][   T30] audit: type=1400 audit(1746249834.324:320): avc:  denied  { read write } for  pid=6248 comm="syz.2.102" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   88.379227][   T30] audit: type=1400 audit(1746249834.324:321): avc:  denied  { open } for  pid=6248 comm="syz.2.102" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   88.406766][   T30] audit: type=1400 audit(1746249834.374:322): avc:  denied  { execute_no_trans } for  pid=6248 comm="syz.2.102" path="/17/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   88.792875][   T91] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   89.002165][   T81] IPVS: starting estimator thread 0...
[   89.016093][   T91] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[   89.025042][   T91] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.074474][   T91] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   89.092763][ T6259] IPVS: using max 51 ests per chain, 122400 per kthread
[   89.099813][   T91] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   89.117763][ T6260] Debayer A: =================  START STATUS  =================
[   89.125515][ T6260] Debayer A: Debayer Mean Window Size: 3
[   89.131237][ T6260] Debayer A: ==================  END STATUS  ==================
[   89.145697][ T6260] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   89.497222][   T91] usb 3-1: Manufacturer: syz
[   89.530439][   T91] usb 3-1: config 0 descriptor??
[   89.604636][   T91] rc_core: IR keymap rc-hauppauge not found
[   89.613443][   T91] Registered IR keymap rc-empty
[   89.625514][   T91] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   89.637334][ T6268] Debayer A: =================  START STATUS  =================
[   89.645072][ T6268] Debayer A: Debayer Mean Window Size: 3
[   89.651463][ T6268] Debayer A: ==================  END STATUS  ==================
[   89.758560][   T91] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6
[   89.813801][ T6268] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   90.347095][ T6273] rc rc0: two consecutive events of type space
[   90.606988][ T6277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6277 comm=syz.2.102
[   90.663186][ T6249] dummy0: entered promiscuous mode
[   90.668761][ T6249] macsec1: entered allmulticast mode
[   90.700950][ T6249] dummy0: entered allmulticast mode
[   90.747051][ T6249] ip6erspan0: entered promiscuous mode
[   91.523009][   T30] audit: type=1400 audit(1746249837.564:323): avc:  denied  { getopt } for  pid=6284 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.547182][ T6288] FAULT_INJECTION: forcing a failure.
[   91.547182][ T6288] name failslab, interval 1, probability 0, space 0, times 0
[   91.561801][ T6288] CPU: 0 UID: 0 PID: 6288 Comm: syz.4.114 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[   91.561825][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   91.561834][ T6288] Call Trace:
[   91.561839][ T6288]  <TASK>
[   91.561845][ T6288]  dump_stack_lvl+0x16c/0x1f0
[   91.561875][ T6288]  should_fail_ex+0x512/0x640
[   91.561895][ T6288]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[   91.561924][ T6288]  should_failslab+0xc2/0x120
[   91.561941][ T6288]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[   91.561967][ T6288]  ? __alloc_skb+0x2b2/0x380
[   91.561996][ T6288]  __alloc_skb+0x2b2/0x380
[   91.562020][ T6288]  ? __pfx___alloc_skb+0x10/0x10
[   91.562047][ T6288]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[   91.562070][ T6288]  netlink_alloc_large_skb+0x69/0x130
[   91.562088][ T6288]  netlink_sendmsg+0x6a1/0xdd0
[   91.562110][ T6288]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.562136][ T6288]  ____sys_sendmsg+0xa95/0xc70
[   91.562158][ T6288]  ? copy_msghdr_from_user+0x10a/0x160
[   91.562173][ T6288]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.562202][ T6288]  ___sys_sendmsg+0x134/0x1d0
[   91.562217][ T6288]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.562258][ T6288]  __sys_sendmsg+0x16d/0x220
[   91.562274][ T6288]  ? __pfx___sys_sendmsg+0x10/0x10
[   91.562292][ T6288]  ? rcu_is_watching+0x12/0xc0
[   91.562313][ T6288]  do_syscall_64+0xcd/0x260
[   91.562331][ T6288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.562348][ T6288] RIP: 0033:0x7f54b798e969
[   91.562360][ T6288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.562372][ T6288] RSP: 002b:00007f54b8837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.562385][ T6288] RAX: ffffffffffffffda RBX: 00007f54b7bb5fa0 RCX: 00007f54b798e969
[   91.562394][ T6288] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000003
[   91.562401][ T6288] RBP: 00007f54b8837090 R08: 0000000000000000 R09: 0000000000000000
[   91.562409][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.562416][ T6288] R13: 0000000000000000 R14: 00007f54b7bb5fa0 R15: 00007ffe6103e638
[   91.562433][ T6288]  </TASK>
[   91.776443][    C0] vkms_vblank_simulate: vblank timer overrun
[   92.270945][   T30] audit: type=1400 audit(1746249838.214:324): avc:  denied  { set_context_mgr } for  pid=6290 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   92.280962][ T5903] usb 3-1: USB disconnect, device number 8
[   92.366831][ T6298] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   92.375704][   T30] audit: type=1400 audit(1746249838.404:325): avc:  denied  { write } for  pid=6290 comm="syz.1.115" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
acpid: input device has been disconnected, fd 3
[   92.421049][ T6298] audit: out of memory in audit_log_start
[   92.435092][   T30] audit: type=1400 audit(1746249838.404:326): avc:  denied  { map } for  pid=6290 comm="syz.1.115" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   92.514352][   T30] audit: type=1400 audit(1746249838.404:327): avc:  denied  { call } for  pid=6290 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   93.101971][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.122'.
[   93.490340][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   93.499450][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'.
[   93.631708][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   93.632216][ T6325] 9pnet_fd: Insufficient options for proto=fd
[   93.881477][ T5859] usb 5-1: Using ep0 maxpacket: 8
[   93.911630][ T6327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=6327 comm=syz.0.126
[   93.935525][ T5859] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[   93.950794][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.482692][ T5859] usb 5-1: Product: syz
[   94.486898][ T5859] usb 5-1: Manufacturer: syz
[   94.492590][ T5859] usb 5-1: SerialNumber: syz
[   94.499281][ T5859] usb 5-1: config 0 descriptor??
[   94.508514][ T5859] gspca_main: sq930x-2.14.0 probing 2770:930c
[   94.616375][ T6333] syz_tun: entered allmulticast mode
[   94.869410][   T30] kauditd_printk_skb: 3 callbacks suppressed
[   94.869423][   T30] audit: type=1400 audit(1746249840.934:331): avc:  denied  { bind } for  pid=6336 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   94.930852][   T30] audit: type=1400 audit(1746249840.964:332): avc:  denied  { ioctl } for  pid=6336 comm="syz.3.130" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   95.240908][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.272732][ T6342] sctp: [Deprecated]: syz.0.131 (pid 6342) Use of int in max_burst socket option.
[   95.272732][ T6342] Use struct sctp_assoc_value instead
[   95.420921][ T5813] usb 4-1: Using ep0 maxpacket: 32
[   95.456502][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[   95.630466][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   95.660851][ T5859] gspca_sq930x: reg_w 0305 fd00 failed -110
[   95.667309][ T5859] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[   96.320210][ T5813] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[   96.329728][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.342226][ T5813] usb 4-1: Product: syz
[   96.353284][ T5813] usb 4-1: Manufacturer: syz
[   96.358322][ T5813] usb 4-1: SerialNumber: syz
[   96.415591][ T5863] usb 5-1: USB disconnect, device number 8
[   96.441994][   T81] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   96.693034][   T81] usb 1-1: Using ep0 maxpacket: 16
[   96.705795][   T81] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   96.717413][ T5813] usb 4-1: config 0 descriptor??
[   96.722526][   T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[   96.748552][   T81] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[   96.758900][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   96.779716][ T5813] hub 4-1:0.0: bad descriptor, ignoring hub
[   96.796639][ T5813] hub 4-1:0.0: probe with driver hub failed with error -5
[   96.813060][   T81] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[   96.829726][   T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.841559][ T5813] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[   96.853171][   T81] usb 1-1: Product: syz
[   96.869626][   T81] usb 1-1: Manufacturer: syz
[   96.903746][   T81] usb 1-1: SerialNumber: syz
[   96.937041][   T81] usb 1-1: config 0 descriptor??
[   96.955098][ T6347] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   96.994416][   T30] audit: type=1400 audit(1746249843.064:333): avc:  denied  { create } for  pid=6355 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   97.037265][   T30] audit: type=1400 audit(1746249843.064:334): avc:  denied  { connect } for  pid=6355 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   97.059685][   T81] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[   97.088705][   T30] audit: type=1400 audit(1746249843.154:335): avc:  denied  { read write } for  pid=6355 comm="syz.1.134" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.112018][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.114789][   T81] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[   97.144324][ T5863] usb 4-1: USB disconnect, device number 4
[   97.150205][    C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[   97.181069][ T6347] 9pnet_fd: Insufficient options for proto=fd
[   97.189016][ T6347] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.132'.
[   97.210415][ T6347] net_ratelimit: 4 callbacks suppressed
[   97.210431][ T6347] netlink: zone id is out of range
[   97.263167][ T6347] netlink: zone id is out of range
[   97.351436][ T5813] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.398002][   T81] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[   97.398304][   T81] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[   97.398360][   T81] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[   97.432629][ T6347] netlink: zone id is out of range
[   97.432669][ T6347] netlink: zone id is out of range
[   97.432677][ T6347] netlink: zone id is out of range
[   97.432684][ T6347] netlink: zone id is out of range
[   97.432692][ T6347] netlink: get zone limit has 8 unknown bytes
[   97.434773][   T30] audit: type=1400 audit(1746249843.154:336): avc:  denied  { open } for  pid=6355 comm="syz.1.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.434813][   T30] audit: type=1400 audit(1746249843.154:337): avc:  denied  { ioctl } for  pid=6355 comm="syz.1.134" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   97.434847][   T30] audit: type=1400 audit(1746249843.204:338): avc:  denied  { setopt } for  pid=6336 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   97.434877][   T30] audit: type=1400 audit(1746249843.204:339): avc:  denied  { getopt } for  pid=6336 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   97.434907][   T30] audit: type=1400 audit(1746249843.244:340): avc:  denied  { read write } for  pid=6344 comm="syz.0.132" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[   97.438107][   T91] usb 1-1: USB disconnect, device number 8
[   97.439552][   T91] mcba_usb 1-1:0.0 can0: device disconnected
[   97.523016][ T5813] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   97.523045][ T5813] usb 2-1: config 0 has no interface number 0
[   97.523085][ T5813] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[   97.523109][ T5813] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42557, setting to 1024
[   97.523132][ T5813] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   97.524833][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[   97.524859][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.524877][ T5813] usb 2-1: Product: syz
[   97.524890][ T5813] usb 2-1: Manufacturer: syz
[   97.524904][ T5813] usb 2-1: SerialNumber: syz
[   97.527100][ T5813] usb 2-1: config 0 descriptor??
[   97.527681][ T6359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.527758][ T6359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   97.632973][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.660777][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.711287][    C0] vkms_vblank_simulate: vblank timer overrun
[   97.781685][ T5813] usb 2-1: USB disconnect, device number 4
[   97.802737][ T6368] 9pnet_fd: Insufficient options for proto=fd
[   97.893317][ T6372] FAULT_INJECTION: forcing a failure.
[   97.893317][ T6372] name failslab, interval 1, probability 0, space 0, times 0
[   97.925268][ T6372] CPU: 1 UID: 0 PID: 6372 Comm: syz.3.138 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[   97.925295][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   97.925304][ T6372] Call Trace:
[   97.925310][ T6372]  <TASK>
[   97.925316][ T6372]  dump_stack_lvl+0x16c/0x1f0
[   97.925342][ T6372]  should_fail_ex+0x512/0x640
[   97.925360][ T6372]  ? fs_reclaim_acquire+0xae/0x150
[   97.925378][ T6372]  ? tomoyo_encode2+0x100/0x3e0
[   97.925395][ T6372]  should_failslab+0xc2/0x120
[   97.925409][ T6372]  __kmalloc_noprof+0xd2/0x510
[   97.925429][ T6372]  ? d_absolute_path+0x136/0x1a0
[   97.925448][ T6372]  tomoyo_encode2+0x100/0x3e0
[   97.925468][ T6372]  tomoyo_encode+0x29/0x50
[   97.925484][ T6372]  tomoyo_realpath_from_path+0x18f/0x6e0
[   97.925507][ T6372]  tomoyo_mount_acl+0x1ae/0x850
[   97.925522][ T6372]  ? kernel_text_address+0x8d/0x100
[   97.925537][ T6372]  ? __kernel_text_address+0xd/0x40
[   97.925550][ T6372]  ? unwind_get_return_address+0x59/0xa0
[   97.925566][ T6372]  ? arch_stack_walk+0xa6/0x100
[   97.925583][ T6372]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[   97.925620][ T6372]  ? tomoyo_domain+0xbb/0x150
[   97.925630][ T6372]  ? tomoyo_profile+0x47/0x60
[   97.925652][ T6372]  tomoyo_mount_permission+0x16d/0x420
[   97.925668][ T6372]  ? tomoyo_mount_permission+0x14f/0x420
[   97.925685][ T6372]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[   97.925713][ T6372]  security_sb_mount+0x9b/0x260
[   97.925730][ T6372]  path_mount+0x128/0x1f20
[   97.925745][ T6372]  ? kmem_cache_free+0x2d4/0x4d0
[   97.925763][ T6372]  ? __pfx_path_mount+0x10/0x10
[   97.925778][ T6372]  ? putname+0x154/0x1a0
[   97.925795][ T6372]  __x64_sys_mount+0x28d/0x310
[   97.925808][ T6372]  ? __pfx___x64_sys_mount+0x10/0x10
[   97.925820][ T6372]  ? rcu_is_watching+0x12/0xc0
[   97.925841][ T6372]  do_syscall_64+0xcd/0x260
[   97.925859][ T6372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.925872][ T6372] RIP: 0033:0x7fbc8558e969
[   97.925884][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.925896][ T6372] RSP: 002b:00007fbc86349038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   97.925909][ T6372] RAX: ffffffffffffffda RBX: 00007fbc857b6160 RCX: 00007fbc8558e969
[   97.925917][ T6372] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000040
[   97.925925][ T6372] RBP: 00007fbc86349090 R08: 0000000000000000 R09: 0000000000000000
[   97.925932][ T6372] R10: 0000000001000040 R11: 0000000000000246 R12: 0000000000000001
[   97.925940][ T6372] R13: 0000000000000000 R14: 00007fbc857b6160 R15: 00007fff4ae605c8
[   97.925956][ T6372]  </TASK>
[   97.926341][ T6372] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.054898][ T6386] Debayer A: =================  START STATUS  =================
[   99.062744][ T6386] Debayer A: Debayer Mean Window Size: 3
[   99.068820][ T6386] Debayer A: ==================  END STATUS  ==================
[   99.431047][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   99.566814][ T6388] syz_tun: entered allmulticast mode
[   99.582574][ T6386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   99.846293][ T5890] usb 4-1: Using ep0 maxpacket: 16
[   99.919807][ T5890] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   99.941980][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.950780][ T5890] usb 4-1: Product: syz
[   99.973863][ T5890] usb 4-1: Manufacturer: syz
[   99.984398][ T5890] usb 4-1: SerialNumber: syz
[  100.113640][ T5890] r8152-cfgselector 4-1: Unknown version 0x0000
[  100.151074][ T5890] r8152-cfgselector 4-1: config 0 descriptor??
[  100.165775][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  100.165790][   T30] audit: type=1400 audit(1746249846.234:344): avc:  denied  { create } for  pid=6391 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  100.270986][   T30] audit: type=1400 audit(1746249846.274:345): avc:  denied  { write } for  pid=6391 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  100.293670][   T30] audit: type=1400 audit(1746249846.274:346): avc:  denied  { nlmsg_write } for  pid=6391 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  101.244994][ T6411] fuse: Bad value for 'fd'
[  101.266418][ T6411] fuse: Bad value for 'fd'
[  101.274074][   T30] audit: type=1400 audit(1746249847.344:347): avc:  denied  { create } for  pid=6410 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  101.293381][    C0] vkms_vblank_simulate: vblank timer overrun
[  101.525330][ T5863] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  101.616261][   T30] audit: type=1400 audit(1746249847.634:348): avc:  denied  { write } for  pid=6413 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  101.891572][ T5863] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  101.908984][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.967829][ T5813] r8152-cfgselector 4-1: USB disconnect, device number 5
[  101.986175][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  101.992552][   T30] audit: type=1400 audit(1746249848.064:349): avc:  denied  { create } for  pid=6419 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  102.000293][ T5863] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  102.209642][   T30] audit: type=1400 audit(1746249848.154:350): avc:  denied  { accept } for  pid=6419 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  102.387263][ T5863] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  102.434390][ T5863] usb 3-1: Manufacturer: syz
[  102.461349][ T6429] Debayer A: =================  START STATUS  =================
[  102.469053][ T6429] Debayer A: Debayer Mean Window Size: 3
[  102.474791][ T6429] Debayer A: ==================  END STATUS  ==================
[  102.487457][ T6429] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  102.556999][ T5863] usb 3-1: config 0 descriptor??
[  102.623064][ T5863] igorplugusb 3-1:0.0: incorrect number of endpoints
[  102.836619][ T5863] usb 3-1: USB disconnect, device number 9
[  103.204207][   T30] audit: type=1400 audit(1746249849.274:351): avc:  denied  { setopt } for  pid=6435 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  103.809369][   T30] audit: type=1400 audit(1746249849.874:352): avc:  denied  { read } for  pid=6448 comm="syz.3.160" path="socket:[11569]" dev="sockfs" ino=11569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  103.988283][   T30] audit: type=1400 audit(1746249850.024:353): avc:  denied  { append } for  pid=6454 comm="syz.1.163" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  104.011234][    C0] vkms_vblank_simulate: vblank timer overrun
[  104.524614][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  104.721028][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  104.782051][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  104.816133][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  104.835951][ T5890] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  104.857926][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.868942][ T5890] usb 1-1: config 0 descriptor??
[  105.180364][   T30] audit: type=1400 audit(1746249851.164:354): avc:  denied  { bind } for  pid=6473 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.618268][   T30] audit: type=1400 audit(1746249851.234:355): avc:  denied  { write } for  pid=6473 comm="syz.1.168" name="event3" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  105.701959][ T6482] Debayer A: =================  START STATUS  =================
[  105.709017][   T30] audit: type=1400 audit(1746249851.244:356): avc:  denied  { open } for  pid=6473 comm="syz.1.168" path="/dev/input/event3" dev="devtmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  105.734387][ T6482] Debayer A: Debayer Mean Window Size: 3
[  105.740609][ T6482] Debayer A: ==================  END STATUS  ==================
[  105.753607][ T6482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.811275][   T30] audit: type=1400 audit(1746249851.604:357): avc:  denied  { map } for  pid=6445 comm="syz.0.162" path="socket:[11592]" dev="sockfs" ino=11592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  106.049033][   T30] audit: type=1400 audit(1746249852.114:358): avc:  denied  { nlmsg_read } for  pid=6483 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  106.278295][   T30] audit: type=1400 audit(1746249852.344:359): avc:  denied  { write } for  pid=6491 comm="syz.2.172" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  106.314793][   T30] audit: type=1400 audit(1746249852.344:360): avc:  denied  { open } for  pid=6491 comm="syz.2.172" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  106.768282][ T5890] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  106.814258][   T91] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  106.824291][ T5890] usb 1-1: USB disconnect, device number 9
[  106.965909][   T91] usb 4-1: device descriptor read/64, error -71
[  107.357501][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'.
[  107.367317][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'.
[  107.400856][   T91] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  107.939191][   T30] audit: type=1400 audit(1746249854.004:361): avc:  denied  { ioctl } for  pid=6513 comm="syz.1.179" path="socket:[11696]" dev="sockfs" ino=11696 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  107.964068][   T91] usb 4-1: device descriptor read/64, error -71
[  107.991579][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.072686][   T91] usb usb4-port1: attempt power cycle
[  108.106019][   T30] audit: type=1400 audit(1746249854.114:362): avc:  denied  { listen } for  pid=6516 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  108.339891][   T30] audit: type=1400 audit(1746249854.114:363): avc:  denied  { connect } for  pid=6516 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  108.402895][ T6514] bond0: (slave rose0): Enslaving as an active interface with an up link
[  108.500984][   T91] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  108.572702][   T91] usb 4-1: device descriptor read/8, error -71
[  108.901105][   T91] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  108.945298][   T91] usb 4-1: device descriptor read/8, error -71
[  109.446283][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[  109.448851][ T6536] 9pnet_fd: Insufficient options for proto=fd
[  109.455266][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.182'.
[  109.527435][   T91] usb usb4-port1: unable to enumerate USB device
[  110.390841][   T91] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  110.540811][ T5903] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  110.740375][   T91] usb 4-1: Using ep0 maxpacket: 32
[  111.014636][ T5903] usb 5-1: Using ep0 maxpacket: 16
[  111.026407][   T91] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  111.030986][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[  111.046501][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'.
[  111.060605][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.594009][   T91] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  111.608259][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  111.650887][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  111.665458][ T5903] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  111.676403][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.695025][   T91] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  111.708499][   T91] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.719051][   T91] usb 4-1: Product: syz
[  111.732668][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  111.758002][   T91] usb 4-1: Manufacturer: syz
[  111.766887][ T5903] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.782269][   T91] usb 4-1: SerialNumber: syz
[  111.793981][ T5903] usb 5-1: Manufacturer: syz
[  111.824473][ T5903] usb 5-1: config 0 descriptor??
[  111.830273][   T91] usb 4-1: config 0 descriptor??
[  111.844534][ T6546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  111.858235][   T91] hub 4-1:0.0: bad descriptor, ignoring hub
[  111.875030][   T91] hub 4-1:0.0: probe with driver hub failed with error -5
[  111.956071][   T91] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[  112.322712][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[  112.331850][ T5903] rc_core: IR keymap rc-hauppauge not found
[  112.342375][ T5903] Registered IR keymap rc-empty
[  112.364080][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  112.410689][ T5859] usb 4-1: USB disconnect, device number 10
[  112.410791][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  112.450873][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  112.501692][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  112.608121][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  112.608136][   T30] audit: type=1400 audit(1746249858.664:379): avc:  denied  { read } for  pid=6550 comm="syz.4.187" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  112.636822][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.644397][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[  112.659577][ T6601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.198'.
[  112.699721][ T6601] syz.1.198 (6601): drop_caches: 0
[  112.705620][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  112.991708][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.146418][   T30] audit: type=1400 audit(1746249858.664:380): avc:  denied  { open } for  pid=6550 comm="syz.4.187" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  113.400603][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.409255][   T30] audit: type=1400 audit(1746249858.664:381): avc:  denied  { ioctl } for  pid=6550 comm="syz.4.187" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  113.434344][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.455385][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.503280][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.530815][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.565169][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.611078][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.644862][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.692452][ T5903] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  113.757218][ T5903] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  113.792605][ T5903] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  114.079348][ T6625] 9pnet_fd: Insufficient options for proto=fd
[  114.192576][   T30] audit: type=1400 audit(1746249860.254:382): avc:  denied  { bind } for  pid=6620 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  114.297192][ T5903] usb 5-1: USB disconnect, device number 9
acpid: input device has been disconnected, fd 3
[  114.886482][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'.
[  114.895649][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'.
[  115.412320][ T5903] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  115.743288][ T5903] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  115.756276][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.784083][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.851249][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  115.870288][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  115.910120][ T5903] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  115.954667][ T5903] usb 5-1: Manufacturer: syz
[  115.995426][ T5903] usb 5-1: config 0 descriptor??
[  116.006041][   T30] audit: type=1400 audit(1746249862.074:383): avc:  denied  { read } for  pid=6650 comm="syz.2.210" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  116.058030][ T6652] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  116.064783][ T6652] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  116.114690][   T30] audit: type=1400 audit(1746249862.074:384): avc:  denied  { ioctl } for  pid=6650 comm="syz.2.210" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  116.140097][    C0] vkms_vblank_simulate: vblank timer overrun
[  116.149198][ T6652] vhci_hcd vhci_hcd.0: Device attached
[  116.320950][ T5813] vhci_hcd: vhci_device speed not set
[  116.321126][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  116.346077][ T6660] FAULT_INJECTION: forcing a failure.
[  116.346077][ T6660] name failslab, interval 1, probability 0, space 0, times 0
[  116.360844][ T5945] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  116.360917][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.1.206 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  116.360936][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  116.360945][ T6660] Call Trace:
[  116.360950][ T6660]  <TASK>
[  116.360955][ T6660]  dump_stack_lvl+0x16c/0x1f0
[  116.360978][ T6660]  should_fail_ex+0x512/0x640
[  116.361001][ T6660]  should_failslab+0xc2/0x120
[  116.361016][ T6660]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  116.361039][ T6660]  ? skb_clone+0x190/0x3f0
[  116.361057][ T6660]  skb_clone+0x190/0x3f0
[  116.361072][ T6660]  netlink_deliver_tap+0xabd/0xd30
[  116.361092][ T6660]  netlink_unicast+0x5df/0x7f0
[  116.361111][ T6660]  ? __pfx_netlink_unicast+0x10/0x10
[  116.361132][ T6660]  netlink_sendmsg+0x8d1/0xdd0
[  116.361152][ T6660]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.361175][ T6660]  ____sys_sendmsg+0xa95/0xc70
[  116.361194][ T6660]  ? copy_msghdr_from_user+0x10a/0x160
[  116.361208][ T6660]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.361235][ T6660]  ___sys_sendmsg+0x134/0x1d0
[  116.361251][ T6660]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.361292][ T6660]  __sys_sendmsg+0x16d/0x220
[  116.361306][ T6660]  ? __pfx___sys_sendmsg+0x10/0x10
[  116.361326][ T6660]  ? rcu_is_watching+0x12/0xc0
[  116.361349][ T6660]  do_syscall_64+0xcd/0x260
[  116.361369][ T6660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.361383][ T6660] RIP: 0033:0x7f90ba18e969
[  116.361395][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.361409][ T6660] RSP: 002b:00007f90bb0b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.361424][ T6660] RAX: ffffffffffffffda RBX: 00007f90ba3b5fa0 RCX: 00007f90ba18e969
[  116.361433][ T6660] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  116.361441][ T6660] RBP: 00007f90bb0b2090 R08: 0000000000000000 R09: 0000000000000000
[  116.361449][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.361457][ T6660] R13: 0000000000000000 R14: 00007f90ba3b5fa0 R15: 00007ffc65282178
[  116.361476][ T6660]  </TASK>
[  116.484451][ T5813] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  116.594710][ T5903] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  116.602596][ T5903] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  116.625074][ T5903] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  116.646602][ T5890] usb 3-1: device descriptor read/64, error -71
[  116.827004][ T6667] FAULT_INJECTION: forcing a failure.
[  116.827004][ T6667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.827058][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.1.214 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  116.827079][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  116.827088][ T6667] Call Trace:
[  116.827093][ T6667]  <TASK>
[  116.827099][ T6667]  dump_stack_lvl+0x16c/0x1f0
[  116.827124][ T6667]  should_fail_ex+0x512/0x640
[  116.827149][ T6667]  _copy_to_user+0x32/0xd0
[  116.827174][ T6667]  simple_read_from_buffer+0xcb/0x170
[  116.827199][ T6667]  proc_fail_nth_read+0x197/0x270
[  116.827224][ T6667]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  116.827249][ T6667]  ? rw_verify_area+0xcf/0x680
[  116.827268][ T6667]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  116.827292][ T6667]  vfs_read+0x1de/0xc70
[  116.827318][ T6667]  ? __pfx___mutex_lock+0x10/0x10
[  116.827338][ T6667]  ? __pfx_vfs_read+0x10/0x10
[  116.827367][ T6667]  ? __fget_files+0x20e/0x3c0
[  116.827399][ T6667]  ksys_read+0x12a/0x240
[  116.827421][ T6667]  ? __pfx_ksys_read+0x10/0x10
[  116.827442][ T6667]  ? rcu_is_watching+0x12/0xc0
[  116.827468][ T6667]  do_syscall_64+0xcd/0x260
[  116.827492][ T6667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.827508][ T6667] RIP: 0033:0x7f90ba18d37c
[  116.827522][ T6667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  116.827536][ T6667] RSP: 002b:00007f90bb0b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.827552][ T6667] RAX: ffffffffffffffda RBX: 00007f90ba3b5fa0 RCX: 00007f90ba18d37c
[  116.827562][ T6667] RDX: 000000000000000f RSI: 00007f90bb0b20a0 RDI: 0000000000000004
[  116.827571][ T6667] RBP: 00007f90bb0b2090 R08: 0000000000000000 R09: 0000000000000000
[  116.827580][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.827589][ T6667] R13: 0000000000000000 R14: 00007f90ba3b5fa0 R15: 00007ffc65282178
[  116.827611][ T6667]  </TASK>
[  116.891632][ T5890] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  117.032599][ T5890] usb 3-1: device descriptor read/64, error -71
[  117.083380][ T5945] usb 1-1: Using ep0 maxpacket: 32
[  117.154373][ T5890] usb usb3-port1: attempt power cycle
[  117.197680][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  117.216946][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  117.452297][ T5903] usb 5-1: USB disconnect, device number 10
[  117.495204][ T5945] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  117.508016][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.520611][ T5945] usb 1-1: Product: syz
[  117.526104][ T5945] usb 1-1: Manufacturer: syz
[  117.531271][ T5945] usb 1-1: SerialNumber: syz
[  117.549855][ T5945] usb 1-1: config 0 descriptor??
[  117.556629][ T6653] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  117.568699][ T5945] hub 1-1:0.0: bad descriptor, ignoring hub
[  117.575195][ T5945] hub 1-1:0.0: probe with driver hub failed with error -5
[  117.731120][ T5890] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  117.744396][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[  117.753432][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'.
[  117.832352][ T5890] usb 3-1: device descriptor read/8, error -71
[  117.850371][ T5945] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10
[  117.900499][ T5945] usb 1-1: USB disconnect, device number 10
[  117.906543][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  118.501019][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  118.543252][ T5890] usb 3-1: device descriptor read/8, error -71
[  118.567484][   T30] audit: type=1400 audit(1746249864.634:385): avc:  denied  { setopt } for  pid=6685 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  118.661717][ T5890] usb usb3-port1: unable to enumerate USB device
[  118.738994][   T30] audit: type=1400 audit(1746249864.634:386): avc:  denied  { read } for  pid=6685 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  118.908754][   T30] audit: type=1400 audit(1746249864.894:387): avc:  denied  { create } for  pid=6686 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  119.017084][ T6694] FAULT_INJECTION: forcing a failure.
[  119.017084][ T6694] name failslab, interval 1, probability 0, space 0, times 0
[  119.029799][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.4.222 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  119.029822][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  119.029832][ T6694] Call Trace:
[  119.029838][ T6694]  <TASK>
[  119.029844][ T6694]  dump_stack_lvl+0x16c/0x1f0
[  119.029874][ T6694]  should_fail_ex+0x512/0x640
[  119.029899][ T6694]  should_failslab+0xc2/0x120
[  119.029917][ T6694]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  119.029944][ T6694]  ? skb_clone+0x190/0x3f0
[  119.029965][ T6694]  skb_clone+0x190/0x3f0
[  119.029982][ T6694]  netlink_deliver_tap+0xabd/0xd30
[  119.030000][ T6694]  ? __pfx_rtnl_dump_all+0x10/0x10
[  119.030026][ T6694]  netlink_dump+0x638/0xd00
[  119.030046][ T6694]  ? __pfx_netlink_dump+0x10/0x10
[  119.030061][ T6694]  ? __rhashtable_lookup.constprop.0+0x3a5/0x760
[  119.030079][ T6694]  ? __netlink_dump_start+0x150/0x990
[  119.030105][ T6694]  ? netlink_lookup+0x258/0x520
[  119.030120][ T6694]  ? __pfx_netlink_lookup+0x10/0x10
[  119.030136][ T6694]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  119.030154][ T6694]  ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0
[  119.030186][ T6694]  __netlink_dump_start+0x6d6/0x990
[  119.030205][ T6694]  ? __pfx_rtnl_dump_all+0x10/0x10
[  119.030227][ T6694]  rtnetlink_rcv_msg+0xb3e/0xe90
[  119.030243][ T6694]  ? __pfx_rtnl_dump_all+0x10/0x10
[  119.030266][ T6694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.030282][ T6694]  ? __pfx_rtnl_dumpit+0x10/0x10
[  119.030302][ T6694]  ? __pfx_rtnl_dump_all+0x10/0x10
[  119.030324][ T6694]  ? __lock_acquire+0xaa4/0x1ba0
[  119.030354][ T6694]  netlink_rcv_skb+0x16a/0x440
[  119.030372][ T6694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.030390][ T6694]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.030407][ T6694]  ? find_held_lock+0x2b/0x80
[  119.030445][ T6694]  netlink_unicast+0x53a/0x7f0
[  119.030465][ T6694]  ? __pfx_netlink_unicast+0x10/0x10
[  119.030490][ T6694]  netlink_sendmsg+0x8d1/0xdd0
[  119.030512][ T6694]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.030540][ T6694]  sock_write_iter+0x4fc/0x5b0
[  119.030560][ T6694]  ? __pfx_sock_write_iter+0x10/0x10
[  119.030589][ T6694]  ? bpf_lsm_file_permission+0x9/0x10
[  119.030610][ T6694]  ? security_file_permission+0x71/0x210
[  119.030634][ T6694]  ? rw_verify_area+0xcf/0x680
[  119.030657][ T6694]  vfs_write+0x5ba/0x1180
[  119.030680][ T6694]  ? __pfx_sock_write_iter+0x10/0x10
[  119.030705][ T6694]  ? __pfx_vfs_write+0x10/0x10
[  119.030726][ T6694]  ? find_held_lock+0x2b/0x80
[  119.030760][ T6694]  ksys_write+0x205/0x240
[  119.030783][ T6694]  ? __pfx_ksys_write+0x10/0x10
[  119.030813][ T6694]  do_syscall_64+0xcd/0x260
[  119.030835][ T6694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.030852][ T6694] RIP: 0033:0x7f54b798e969
[  119.030873][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.030889][ T6694] RSP: 002b:00007f54b87f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.030904][ T6694] RAX: ffffffffffffffda RBX: 00007f54b7bb6160 RCX: 00007f54b798e969
[  119.030915][ T6694] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005
[  119.030925][ T6694] RBP: 00007f54b87f5090 R08: 0000000000000000 R09: 0000000000000000
[  119.030934][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.030943][ T6694] R13: 0000000000000000 R14: 00007f54b7bb6160 R15: 00007ffe6103e638
[  119.030966][ T6694]  </TASK>
[  120.310828][ T5945] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  120.383530][ T6654] vhci_hcd: connection reset by peer
[  120.401227][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'.
[  120.404899][   T30] audit: type=1400 audit(1746249866.464:388): avc:  denied  { create } for  pid=6696 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  120.412636][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.225'.
[  120.445640][   T71] vhci_hcd: stop threads
[  120.454536][   T71] vhci_hcd: release socket
[  120.461031][ T5945] usb 4-1: Using ep0 maxpacket: 32
[  120.464419][   T71] vhci_hcd: disconnect device
[  120.474843][   T30] audit: type=1400 audit(1746249866.474:389): avc:  denied  { read write } for  pid=6696 comm="syz.1.220" dev="sockfs" ino=12935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  120.572403][ T5945] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  121.227070][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.246783][ T5945] usb 4-1: config 0 descriptor??
[  121.257520][ T5945] gspca_main: nw80x-2.14.0 probing 055f:d001
[  121.307008][   T30] audit: type=1326 audit(1746249867.374:390): auid=4294967295 uid=101 gid=102 ses=4294967295 subj=system_u:system_r:dhcpc_t pid=6719 comm="dhcpcd" exe="/sbin/dhcpcd" sig=31 arch=c000003e syscall=41 compat=0 ip=0x7fea95c28bd7 code=0x0
[  121.721098][ T5945] gspca_nw80x: reg_r err -32
[  121.729051][ T5945] nw80x 4-1:0.0: probe with driver nw80x failed with error -32
[  121.902650][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[  121.918207][ T5813] vhci_hcd: vhci_device speed not set
[  121.925361][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'.
[  122.759298][ T5945] usb 4-1: USB disconnect, device number 11
[  122.978128][   T30] audit: type=1400 audit(1746249869.034:391): avc:  denied  { read } for  pid=6738 comm="syz.2.234" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  123.085678][   T30] audit: type=1400 audit(1746249869.034:392): avc:  denied  { open } for  pid=6738 comm="syz.2.234" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  123.172534][ T6742] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.213065][ T6742] capability: warning: `syz.3.233' uses deprecated v2 capabilities in a way that may be insecure
[  124.010137][   T30] audit: type=1400 audit(1746249870.064:393): avc:  denied  { write } for  pid=6744 comm="syz.4.228" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  124.032766][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.145305][   T30] audit: type=1400 audit(1746249870.154:394): avc:  denied  { block_suspend } for  pid=6746 comm="syz.2.235" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  124.166522][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.342522][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'.
[  124.684309][ T5890] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.871813][ T5945] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  124.885043][   T91] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  124.912164][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  125.035355][ T5945] usb 3-1: Using ep0 maxpacket: 8
[  125.053246][ T5890] usb 1-1: config 0 has an invalid interface number: 92 but max is 0
[  125.123067][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.197437][ T5890] usb 1-1: config 0 has no interface number 0
[  125.234031][   T91] usb 5-1: unable to get BOS descriptor or descriptor too short
[  125.255378][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.265909][ T5890] usb 1-1: config 0 interface 92 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  125.283915][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.284468][   T91] usb 5-1: config 63 has an invalid interface number: 66 but max is 0
[  125.410655][ T5945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.552480][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.582928][   T91] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  125.597305][ T5890] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44
[  125.653048][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.665843][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.691292][   T91] usb 5-1: config 63 has no interface number 0
[  125.697838][ T5890] usb 1-1: Product: syz
[  125.704261][   T91] usb 5-1: config 63 interface 66 has no altsetting 0
[  125.711181][ T5890] usb 1-1: Manufacturer: syz
[  125.718999][ T5890] usb 1-1: SerialNumber: syz
[  125.729636][   T91] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  125.741869][ T5890] usb 1-1: config 0 descriptor??
[  125.747806][   T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.830617][   T91] usb 5-1: Product: syz
[  125.841347][   T91] usb 5-1: Manufacturer: syz
[  125.859001][   T91] usb 5-1: SerialNumber: syz
[  125.910460][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[  125.919544][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'.
[  126.534964][ T5890] ushc 1-1:0.92: probe with driver ushc failed with error -110
[  126.642378][ T5890] usb 1-1: USB disconnect, device number 11
[  127.201228][ T5945] usb 3-1: GET_CAPABILITIES returned 0
[  127.315389][   T30] audit: type=1400 audit(1746249873.334:395): avc:  denied  { read open } for  pid=6776 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.426216][ T5945] usbtmc 3-1:16.0: can't read capabilities
[  127.629404][   T30] audit: type=1400 audit(1746249873.334:396): avc:  denied  { create } for  pid=6756 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  127.648930][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.659270][   T30] audit: type=1400 audit(1746249873.334:397): avc:  denied  { getattr } for  pid=6776 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.684506][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.732667][   T91] usb 5-1: Found UVC 0.07 device syz (174f:8a31)
[  127.743757][   T91] usb 5-1: No valid video chain found.
[  127.757200][   T91] usb 5-1: USB disconnect, device number 11
[  127.779640][   T30] audit: type=1400 audit(1746249873.344:398): avc:  denied  { search } for  pid=6776 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  127.801667][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.813852][   T30] audit: type=1400 audit(1746249873.374:399): avc:  denied  { ioctl } for  pid=6756 comm="syz.4.238" path="socket:[13371]" dev="sockfs" ino=13371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  127.838546][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.103817][   T30] audit: type=1400 audit(1746249873.404:400): avc:  denied  { getattr } for  pid=6776 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  128.134575][ T6796] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[  128.209505][   T30] audit: type=1400 audit(1746249873.424:401): avc:  denied  { create } for  pid=6756 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  128.295722][   T30] audit: type=1400 audit(1746249873.664:402): avc:  denied  { execmem } for  pid=6778 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  128.433336][ T5813] usb 3-1: USB disconnect, device number 14
[  128.871908][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  128.878472][ T6809] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  128.904389][ T6809] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  128.910397][ T6809] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  128.923965][ T6809] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  128.930015][ T6809] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  128.941769][ T6809] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  128.947953][ T6809] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  128.963265][ T6809] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  128.969854][ T6809] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  129.090956][ T5863] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  129.199682][   T30] kauditd_printk_skb: 65 callbacks suppressed
[  129.199698][   T30] audit: type=1400 audit(1746249875.264:468): avc:  denied  { create } for  pid=6821 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  129.300816][ T5863] usb 5-1: Using ep0 maxpacket: 32
[  129.601031][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  129.644484][   T30] audit: type=1400 audit(1746249875.324:469): avc:  denied  { read write } for  pid=6820 comm="syz.0.253" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  129.667800][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.697774][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  129.767781][ T5863] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  129.790669][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.810423][   T30] audit: type=1400 audit(1746249875.324:470): avc:  denied  { open } for  pid=6820 comm="syz.0.253" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  129.812464][ T5863] usb 5-1: Product: syz
[  129.834226][    C0] vkms_vblank_simulate: vblank timer overrun
[  129.962761][   T30] audit: type=1400 audit(1746249875.344:471): avc:  denied  { map } for  pid=6821 comm="syz.2.252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  129.988074][    C0] vkms_vblank_simulate: vblank timer overrun
[  130.033415][   T30] audit: type=1400 audit(1746249875.344:472): avc:  denied  { read } for  pid=6821 comm="syz.2.252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  130.121129][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[  130.130045][ T6834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'.
[  130.647307][ T5863] usb 5-1: Manufacturer: syz
[  130.652143][ T5863] usb 5-1: SerialNumber: syz
[  130.719045][ T5863] usb 5-1: config 0 descriptor??
[  130.738864][ T6813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  130.750487][ T5863] hub 5-1:0.0: bad descriptor, ignoring hub
[  130.780449][   T30] audit: type=1400 audit(1746249875.364:473): avc:  denied  { lock } for  pid=6824 comm="syz.3.254" path="socket:[13550]" dev="sockfs" ino=13550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  130.859833][ T5863] hub 5-1:0.0: probe with driver hub failed with error -5
[  130.861072][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[  130.873706][ T5863] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  130.885091][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'.
[  131.370077][   T30] audit: type=1400 audit(1746249875.434:474): avc:  denied  { connect } for  pid=6824 comm="syz.3.254" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  131.496168][ T5863] usb 5-1: USB disconnect, device number 12
[  131.502168][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  131.520778][   T30] audit: type=1400 audit(1746249875.834:475): avc:  denied  { create } for  pid=6827 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  131.619542][   T30] audit: type=1400 audit(1746249875.984:476): avc:  denied  { execute } for  pid=6829 comm="syz.0.256" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  131.730879][   T30] audit: type=1400 audit(1746249876.094:477): avc:  denied  { create } for  pid=6829 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  131.950941][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  132.350658][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  132.365710][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  132.377611][ T5890] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  132.389514][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.397752][ T5890] usb 2-1: Product: syz
[  132.407909][ T5890] usb 2-1: Manufacturer: syz
[  132.418044][ T5890] usb 2-1: SerialNumber: syz
[  132.433642][ T5890] usb 2-1: config 0 descriptor??
[  132.459820][ T6840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.476322][ T6840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.493735][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.500116][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  132.723750][ T6850] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[  132.731552][   T91] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  132.739997][ T6840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.770974][ T6840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  132.880951][   T91] usb 5-1: Using ep0 maxpacket: 32
[  132.887705][   T91] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  132.902507][   T91] usb 5-1: config 0 interface 0 has no altsetting 1
[  132.929514][   T91] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  132.946916][   T91] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  132.956487][   T91] usb 5-1: SerialNumber: syz
[  132.967957][   T91] usb 5-1: config 0 descriptor??
[  132.979238][   T91] usb-storage 5-1:0.0: USB Mass Storage device detected
[  133.051208][   T91] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  133.203325][ T5890] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  133.226931][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.336833][ T5890] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  133.346187][   T91] usb 5-1: USB disconnect, device number 13
[  133.500917][ T5903] usb 1-1: Using ep0 maxpacket: 32
[  133.510626][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  133.525995][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  133.553613][ T5903] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  133.571594][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.587498][ T5903] usb 1-1: Product: syz
[  133.593197][ T5903] usb 1-1: Manufacturer: syz
[  133.598033][ T5903] usb 1-1: SerialNumber: syz
[  133.625150][ T5903] usb 1-1: config 0 descriptor??
[  133.631953][ T6857] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  133.641945][ T5903] hub 1-1:0.0: bad descriptor, ignoring hub
[  133.647947][ T5903] hub 1-1:0.0: probe with driver hub failed with error -5
[  133.668932][ T5903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  133.877139][   T81] usb 1-1: USB disconnect, device number 12
[  133.877220][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  134.425821][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  134.425853][   T30] audit: type=1400 audit(1746249880.334:510): avc:  denied  { read } for  pid=6874 comm="syz.3.268" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  134.425997][   T30] audit: type=1400 audit(1746249880.334:511): avc:  denied  { open } for  pid=6874 comm="syz.3.268" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  134.426110][   T30] audit: type=1400 audit(1746249880.414:512): avc:  denied  { ioctl } for  pid=6874 comm="syz.3.268" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  134.716900][   T30] audit: type=1400 audit(1746249880.774:513): avc:  denied  { write } for  pid=6879 comm="syz.4.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  134.734737][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.810179][ T5903] usb 2-1: USB disconnect, device number 5
[  135.420847][ T5903] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  135.596308][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  135.606560][   T30] audit: type=1400 audit(1746249881.334:514): avc:  denied  { create } for  pid=6891 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  135.737906][   T30] audit: type=1400 audit(1746249881.344:515): avc:  denied  { name_bind } for  pid=6891 comm="syz.4.273" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  135.739527][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  135.881291][ T5903] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  135.884742][   T30] audit: type=1400 audit(1746249881.394:516): avc:  denied  { setopt } for  pid=6891 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  135.914309][ T5903] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  136.023291][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.063152][ T5903] usb 4-1: Product: syz
[  136.073979][ T5903] usb 4-1: Manufacturer: syz
[  136.234215][   T30] audit: type=1400 audit(1746249881.854:517): avc:  denied  { create } for  pid=6890 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  136.274112][ T5903] usb 4-1: SerialNumber: syz
[  136.287522][ T5903] usb 4-1: config 0 descriptor??
[  136.297578][ T6902] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[  136.308049][ T6888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  136.318216][ T5903] hub 4-1:0.0: bad descriptor, ignoring hub
[  136.378404][ T5903] hub 4-1:0.0: probe with driver hub failed with error -5
[  136.436403][ T5903] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  136.452907][   T30] audit: type=1400 audit(1746249881.854:518): avc:  denied  { ioctl } for  pid=6890 comm="syz.0.272" path="socket:[13739]" dev="sockfs" ino=13739 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  136.576780][ T5903] usb 4-1: USB disconnect, device number 12
[  136.582924][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  137.722386][ T6906] FAULT_INJECTION: forcing a failure.
[  137.722386][ T6906] name failslab, interval 1, probability 0, space 0, times 0
[  137.961844][   T30] audit: type=1400 audit(1746249882.984:519): avc:  denied  { append } for  pid=6905 comm="syz.0.277" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  137.984496][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.004644][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.0.277 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  138.004671][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  138.004681][ T6906] Call Trace:
[  138.004687][ T6906]  <TASK>
[  138.004694][ T6906]  dump_stack_lvl+0x16c/0x1f0
[  138.004722][ T6906]  should_fail_ex+0x512/0x640
[  138.004750][ T6906]  ? fs_reclaim_acquire+0xae/0x150
[  138.004775][ T6906]  ? tomoyo_encode2+0x100/0x3e0
[  138.004797][ T6906]  should_failslab+0xc2/0x120
[  138.004814][ T6906]  __kmalloc_noprof+0xd2/0x510
[  138.004846][ T6906]  tomoyo_encode2+0x100/0x3e0
[  138.004871][ T6906]  tomoyo_encode+0x29/0x50
[  138.004892][ T6906]  tomoyo_realpath_from_path+0x18f/0x6e0
[  138.004918][ T6906]  ? tomoyo_profile+0x47/0x60
[  138.004945][ T6906]  tomoyo_path_number_perm+0x245/0x580
[  138.004964][ T6906]  ? tomoyo_path_number_perm+0x237/0x580
[  138.004986][ T6906]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  138.005006][ T6906]  ? find_held_lock+0x2b/0x80
[  138.005048][ T6906]  ? find_held_lock+0x2b/0x80
[  138.005066][ T6906]  ? hook_file_ioctl_common+0x145/0x410
[  138.005097][ T6906]  ? __fget_files+0x20e/0x3c0
[  138.005127][ T6906]  security_file_ioctl+0x9b/0x240
[  138.005150][ T6906]  __x64_sys_ioctl+0xb7/0x200
[  138.005174][ T6906]  do_syscall_64+0xcd/0x260
[  138.005197][ T6906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.005214][ T6906] RIP: 0033:0x7f4a5458e969
[  138.005228][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.005244][ T6906] RSP: 002b:00007f4a554ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.005260][ T6906] RAX: ffffffffffffffda RBX: 00007f4a547b5fa0 RCX: 00007f4a5458e969
[  138.005271][ T6906] RDX: 0000200000000000 RSI: 000000000000ae71 RDI: 0000000000000004
[  138.005280][ T6906] RBP: 00007f4a554ad090 R08: 0000000000000000 R09: 0000000000000000
[  138.005290][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.005304][ T6906] R13: 0000000000000000 R14: 00007f4a547b5fa0 R15: 00007fff93688f38
[  138.005325][ T6906]  </TASK>
[  138.005360][ T6906] ERROR: Out of memory at tomoyo_realpath_from_path.
[  138.165637][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.477489][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  139.477504][   T30] audit: type=1400 audit(1746249885.544:523): avc:  denied  { create } for  pid=6919 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  139.637569][   T30] audit: type=1400 audit(1746249885.704:524): avc:  denied  { ioctl } for  pid=6919 comm="syz.3.281" path="socket:[13878]" dev="sockfs" ino=13878 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  139.668435][ T5903] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  139.748988][   T30] audit: type=1400 audit(1746249885.734:525): avc:  denied  { bind } for  pid=6919 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  139.841938][ T5903] usb 2-1: Using ep0 maxpacket: 32
[  139.871234][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 35360, setting to 1024
[  139.906080][   T30] audit: type=1400 audit(1746249885.964:526): avc:  denied  { create } for  pid=6921 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  139.941601][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  140.033090][ T5903] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  140.055943][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.662093][ T6925] overlayfs: missing 'lowerdir'
[  140.678515][   T30] audit: type=1400 audit(1746249886.734:527): avc:  denied  { mounton } for  pid=6921 comm="syz.3.282" path="/67/bus" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  140.700647][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.713967][ T5903] usb 2-1: Product: syz
[  140.899588][ T5903] usb 2-1: Manufacturer: syz
[  140.905150][ T5903] usb 2-1: SerialNumber: syz
[  140.983020][ T5903] usb 2-1: config 0 descriptor??
[  141.081209][ T6915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  141.180380][ T5903] hub 2-1:0.0: bad descriptor, ignoring hub
[  141.476587][ T5903] hub 2-1:0.0: probe with driver hub failed with error -5
[  141.587407][ T5903] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14
[  141.679305][ T5903] usb 2-1: USB disconnect, device number 6
[  141.679366][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  142.571964][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'.
[  142.580868][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.286'.
[  143.450791][ T5890] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  145.773677][ T5890] usb 1-1: device descriptor read/all, error -71
[  146.825130][   T30] audit: type=1400 audit(1746249892.894:528): avc:  denied  { write } for  pid=6943 comm="syz.2.288" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  147.131362][ T5862] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  147.262297][   T30] audit: type=1400 audit(1746249893.334:529): avc:  denied  { create } for  pid=6951 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  147.300948][ T5862] usb 2-1: Using ep0 maxpacket: 8
[  147.310218][ T5862] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  147.329018][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.354931][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.422543][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  147.456067][   T30] audit: type=1400 audit(1746249893.514:530): avc:  denied  { mount } for  pid=6951 comm="syz.3.289" name="/" dev="ramfs" ino=14080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  147.493402][ T5862] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  147.526542][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.556982][   T30] audit: type=1400 audit(1746249893.524:531): avc:  denied  { unlink } for  pid=6951 comm="syz.3.289" name="#5" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  148.373680][ T5862] usb 2-1: config 0 descriptor??
[  149.855996][ T5862] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  150.838296][ T5862] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  152.433079][ T5862] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  152.440517][ T5862] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  152.466173][   T30] audit: type=1400 audit(1746249893.524:532): avc:  denied  { mount } for  pid=6951 comm="syz.3.289" name="/" dev="overlay" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  158.794511][ T5862] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0
[  158.820375][    C0] sched: DL replenish lagged too much
[  194.032758][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.047693][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  199.744683][   T30] audit: type=1400 audit(1746249893.924:533): avc:  denied  { name_bind } for  pid=6951 comm="syz.3.289" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  283.979547][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  283.996519][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  284.517397][   T30] audit: type=1400 audit(1746249893.924:534): avc:  denied  { node_bind } for  pid=6951 comm="syz.3.289" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  351.720657][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  351.727641][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5479/1:b..l
[  351.735929][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=14333, q=2072719 ncpus=2)
[  351.743981][    C1] task:dhcpcd          state:R  running task     stack:26280 pid:5479  tgid:5479  ppid:1      task_flags:0x400140 flags:0x00000002
[  351.758342][    C1] Call Trace:
[  351.761637][    C1]  <TASK>
[  351.764573][    C1]  __schedule+0x116f/0x5de0
[  351.769105][    C1]  ? __pfx___schedule+0x10/0x10
[  351.773976][    C1]  ? mark_held_locks+0x49/0x80
[  351.778754][    C1]  preempt_schedule_irq+0x51/0x90
[  351.783804][    C1]  irqentry_exit+0x36/0x90
[  351.788200][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  351.794168][    C1] RIP: 0010:lock_acquire+0x62/0x350
[  351.799377][    C1] Code: de 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 ed ec 0e 0f 82 74 02 00 00 8b 35 da 1c ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 de 0b 12 0f 85 c7 02 00 00 48 83 c4
[  351.819001][    C1] RSP: 0018:ffffc90003a9f188 EFLAGS: 00000206
[  351.825068][    C1] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000005a3aa682
[  351.833027][    C1] RDX: 0000000000000000 RSI: ffffffff8dbbb76f RDI: ffffffff8bf481a0
[  351.840999][    C1] RBP: 0000000000000002 R08: 5266d60a7c66fcff R09: 0000000000000000
[  351.848963][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  351.856922][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  351.864913][    C1]  ? unwind_next_frame+0x3f4/0x20a0
[  351.870123][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  351.876275][    C1]  unwind_next_frame+0xd1/0x20a0
[  351.881197][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  351.886310][    C1]  ? __put_partials+0x16d/0x1c0
[  351.891170][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  351.897330][    C1]  arch_stack_walk+0x94/0x100
[  351.902022][    C1]  ? __put_partials+0x16d/0x1c0
[  351.906886][    C1]  stack_trace_save+0x8e/0xc0
[  351.911572][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  351.916952][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  351.921903][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  351.926840][    C1]  save_stack+0x160/0x1f0
[  351.931159][    C1]  ? __pfx_save_stack+0x10/0x10
[  351.936014][    C1]  ? __free_frozen_pages+0x69d/0xff0
[  351.941300][    C1]  ? __put_partials+0x16d/0x1c0
[  351.946165][    C1]  ? page_ext_put+0x3e/0xd0
[  351.950680][    C1]  __reset_page_owner+0x84/0x1a0
[  351.955626][    C1]  __free_frozen_pages+0x69d/0xff0
[  351.960753][    C1]  __put_partials+0x16d/0x1c0
[  351.965442][    C1]  qlist_free_all+0x4e/0x120
[  351.970042][    C1]  kasan_quarantine_reduce+0x195/0x1e0
[  351.975519][    C1]  __kasan_slab_alloc+0x69/0x90
[  351.980386][    C1]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  351.986293][    C1]  ? __alloc_skb+0x2b2/0x380
[  351.990903][    C1]  __alloc_skb+0x2b2/0x380
[  351.995335][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  352.000285][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  352.005240][    C1]  ? avc_has_perm+0x11a/0x1c0
[  352.009924][    C1]  alloc_skb_with_frags+0xe0/0x860
[  352.015049][    C1]  ? find_held_lock+0x2b/0x80
[  352.019737][    C1]  sock_alloc_send_pskb+0x7fb/0x990
[  352.024964][    C1]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  352.030702][    C1]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  352.037055][    C1]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  352.043767][    C1]  unix_dgram_sendmsg+0x463/0x1910
[  352.048910][    C1]  ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10
[  352.055689][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  352.061258][    C1]  sock_write_iter+0x4fc/0x5b0
[  352.066035][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[  352.071338][    C1]  ? __pfx_file_has_perm+0x10/0x10
[  352.076456][    C1]  do_iter_readv_writev+0x654/0x950
[  352.081674][    C1]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  352.087419][    C1]  ? selinux_file_permission+0x11f/0x580
[  352.093080][    C1]  ? bpf_lsm_file_permission+0x9/0x10
[  352.098466][    C1]  ? security_file_permission+0x71/0x210
[  352.104112][    C1]  ? rw_verify_area+0xcf/0x680
[  352.108886][    C1]  vfs_writev+0x353/0xdc0
[  352.113225][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  352.118182][    C1]  ? __pfx_vfs_writev+0x10/0x10
[  352.123048][    C1]  ? find_held_lock+0x2b/0x80
[  352.127745][    C1]  ? __pfx___seccomp_filter+0x10/0x10
[  352.133135][    C1]  ? do_writev+0x295/0x330
[  352.137559][    C1]  do_writev+0x295/0x330
[  352.141815][    C1]  ? __pfx_do_writev+0x10/0x10
[  352.146589][    C1]  ? __secure_computing+0x28e/0x3b0
[  352.151799][    C1]  do_syscall_64+0xcd/0x260
[  352.156313][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.162207][    C1] RIP: 0033:0x7fea95c1ee03
[  352.166621][    C1] RSP: 002b:00007ffe5c74c1a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  352.175041][    C1] RAX: ffffffffffffffda RBX: 00007ffe5c74c4e8 RCX: 00007fea95c1ee03
[  352.183016][    C1] RDX: 0000000000000005 RSI: 00007ffe5c74c1c0 RDI: 000000000000000a
[  352.190990][    C1] RBP: 0000000000004801 R08: 000000000000000a R09: 00007ffe5c74c200
[  352.198965][    C1] R10: 00007ffe5c74c208 R11: 0000000000000246 R12: 0000559be4975540
[  352.206943][    C1] R13: 0000559baae42f88 R14: 00000000ffffffff R15: 0000559be497efd0
[  352.215198][    C1]  </TASK>
[  352.218224][    C1] rcu: rcu_preempt kthread starved for 1698 jiffies! g14333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  352.229344][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  352.239323][    C1] rcu: RCU grace-period kthread stack dump:
[  352.245211][    C1] task:rcu_preempt     state:R  running task     stack:27608 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  352.258717][    C1] Call Trace:
[  352.261997][    C1]  <TASK>
[  352.264932][    C1]  __schedule+0x116f/0x5de0
[  352.269447][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  352.274400][    C1]  ? __pfx___schedule+0x10/0x10
[  352.279257][    C1]  ? find_held_lock+0x2b/0x80
[  352.283941][    C1]  ? schedule+0x2d7/0x3a0
[  352.288276][    C1]  schedule+0xe7/0x3a0
[  352.292388][    C1]  schedule_timeout+0x123/0x290
[  352.297258][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  352.302642][    C1]  ? __pfx_process_timeout+0x10/0x10
[  352.307936][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  352.313753][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  352.319230][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  352.324012][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  352.329315][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  352.334191][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  352.340008][    C1]  rcu_gp_kthread+0x270/0x380
[  352.344693][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  352.349897][    C1]  ? rcu_is_watching+0x12/0xc0
[  352.354668][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  352.359878][    C1]  ? __kthread_parkme+0x19e/0x250
[  352.364922][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  352.370139][    C1]  kthread+0x3c2/0x780
[  352.374218][    C1]  ? __pfx_kthread+0x10/0x10
[  352.378815][    C1]  ? __pfx_kthread+0x10/0x10
[  352.383409][    C1]  ? __pfx_kthread+0x10/0x10
[  352.388000][    C1]  ? __pfx_kthread+0x10/0x10
[  352.392597][    C1]  ? rcu_is_watching+0x12/0xc0
[  352.397373][    C1]  ? __pfx_kthread+0x10/0x10
[  352.401980][    C1]  ret_from_fork+0x45/0x80
[  352.406418][    C1]  ? __pfx_kthread+0x10/0x10
[  352.411029][    C1]  ret_from_fork_asm+0x1a/0x30
[  352.415821][    C1]  </TASK>
[  352.418841][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  352.425161][    C1] Sending NMI from CPU 1 to CPUs 0:
[  352.430375][    C0] NMI backtrace for cpu 0
[  352.430389][    C0] CPU: 0 UID: 0 PID: 1143 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) 
[  352.430407][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  352.430416][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  352.430440][    C0] RIP: 0010:unwind_next_frame+0x1560/0x20a0
[  352.430459][    C0] Code: 02 00 0f 84 03 f9 ff ff 4c 89 e7 e8 ba d0 b6 00 e9 f6 f8 ff ff 48 ba 00 00 00 00 00 fc ff df 48 8d 79 02 48 89 f8 48 c1 e8 03 <0f> b6 34 10 48 8d 41 03 49 89 c0 49 c1 e8 03 41 0f b6 14 10 49 89
[  352.430472][    C0] RSP: 0018:ffffc90000007158 EFLAGS: 00000a03
[  352.430482][    C0] RAX: 1ffffffff22338ab RBX: 0000000000000002 RCX: ffffffff9119c55c
[  352.430491][    C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff9119c55e
[  352.430500][    C0] RBP: ffffc90000007210 R08: ffffffff9119c560 R09: 0000000000000000
[  352.430508][    C0] R10: 0000000000000005 R11: 0000000000007cb9 R12: ffffc90000007218
[  352.430516][    C0] R13: ffffc900000071c8 R14: ffffc90000007ff8 R15: ffffc900000071fc
[  352.430526][    C0] FS:  0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000
[  352.430539][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  352.430548][    C0] CR2: 0000200000180030 CR3: 00000000591eb000 CR4: 00000000003526f0
[  352.430556][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  352.430564][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  352.430572][    C0] Call Trace:
[  352.430576][    C0]  <IRQ>
[  352.430582][    C0]  ? handle_softirqs+0x216/0x8e0
[  352.430599][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  352.430617][    C0]  arch_stack_walk+0x94/0x100
[  352.430637][    C0]  ? do_softirq+0xb2/0xf0
[  352.430653][    C0]  stack_trace_save+0x8e/0xc0
[  352.430668][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  352.430683][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  352.430703][    C0]  kasan_save_stack+0x33/0x60
[  352.430721][    C0]  ? kasan_save_stack+0x33/0x60
[  352.430738][    C0]  ? kasan_record_aux_stack+0xb8/0xd0
[  352.430755][    C0]  ? __call_rcu_common.constprop.0+0x9a/0x9f0
[  352.430767][    C0]  ? dst_release+0x266/0x340
[  352.430785][    C0]  ? skb_release_head_state+0x234/0x290
[  352.430797][    C0]  ? consume_skb+0x85/0x100
[  352.430809][    C0]  ? nft_synproxy_do_eval+0xa6b/0xd80
[  352.430825][    C0]  ? nft_do_chain+0x2e6/0x1920
[  352.430839][    C0]  ? nft_do_chain_inet+0x18a/0x340
[  352.430852][    C0]  ? nf_hook_slow+0xbb/0x200
[  352.430869][    C0]  ? nf_hook.constprop.0+0x422/0x750
[  352.430886][    C0]  ? ip_local_deliver+0x169/0x1f0
[  352.430903][    C0]  ? ip_rcv+0x2c3/0x5d0
[  352.430920][    C0]  ? __netif_receive_skb_one_core+0x197/0x1e0
[  352.430937][    C0]  ? __netif_receive_skb+0x1d/0x160
[  352.430954][    C0]  ? process_backlog+0x442/0x15e0
[  352.430971][    C0]  ? __napi_poll.constprop.0+0xb7/0x550
[  352.430988][    C0]  ? net_rx_action+0xa97/0x1010
[  352.431004][    C0]  ? handle_softirqs+0x216/0x8e0
[  352.431027][    C0]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  352.431044][    C0]  kasan_record_aux_stack+0xb8/0xd0
[  352.431059][    C0]  __call_rcu_common.constprop.0+0x9a/0x9f0
[  352.431070][    C0]  ? percpu_counter_add_batch+0xb8/0x1f0
[  352.431088][    C0]  dst_release+0x266/0x340
[  352.431104][    C0]  skb_release_head_state+0x234/0x290
[  352.431117][    C0]  consume_skb+0x85/0x100
[  352.431130][    C0]  nft_synproxy_do_eval+0xa6b/0xd80
[  352.431146][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  352.431164][    C0]  ? __pfx_nft_synproxy_eval+0x10/0x10
[  352.431179][    C0]  nft_do_chain+0x2e6/0x1920
[  352.431195][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  352.431208][    C0]  ? mark_held_locks+0x49/0x80
[  352.431228][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  352.431243][    C0]  ? ipt_do_table+0xd48/0x1ac0
[  352.431264][    C0]  nft_do_chain_inet+0x18a/0x340
[  352.431277][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  352.431290][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  352.431311][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  352.431326][    C0]  ? nf_nat_ipv4_local_in+0x181/0x720
[  352.431366][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  352.431378][    C0]  nf_hook_slow+0xbb/0x200
[  352.431396][    C0]  nf_hook.constprop.0+0x422/0x750
[  352.431413][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  352.431432][    C0]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  352.431449][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  352.431467][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  352.431488][    C0]  ip_local_deliver+0x169/0x1f0
[  352.431505][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  352.431522][    C0]  ip_rcv+0x2c3/0x5d0
[  352.431540][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  352.431556][    C0]  __netif_receive_skb_one_core+0x197/0x1e0
[  352.431574][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  352.431592][    C0]  ? lock_acquire+0x179/0x350
[  352.431612][    C0]  ? process_backlog+0x3f0/0x15e0
[  352.431628][    C0]  __netif_receive_skb+0x1d/0x160
[  352.431645][    C0]  process_backlog+0x442/0x15e0
[  352.431664][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  352.431684][    C0]  net_rx_action+0xa97/0x1010
[  352.431703][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  352.431720][    C0]  ? find_held_lock+0x2b/0x80
[  352.431735][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  352.431748][    C0]  ? sched_clock+0x38/0x60
[  352.431765][    C0]  ? sched_clock_cpu+0x6c/0x530
[  352.431786][    C0]  ? mark_held_locks+0x49/0x80
[  352.431803][    C0]  handle_softirqs+0x216/0x8e0
[  352.431819][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  352.431834][    C0]  ? cfg80211_inform_single_bss_data+0x9ae/0x1df0
[  352.431853][    C0]  do_softirq+0xb2/0xf0
[  352.431867][    C0]  </IRQ>
[  352.431871][    C0]  <TASK>
[  352.431875][    C0]  __local_bh_enable_ip+0x100/0x120
[  352.431890][    C0]  cfg80211_inform_single_bss_data+0x9ae/0x1df0
[  352.431907][    C0]  ? unwind_next_frame+0x3f4/0x20a0
[  352.431923][    C0]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  352.431946][    C0]  ? ieee802_11_parse_elems_full+0x1d7/0x3780
[  352.431961][    C0]  ? stack_trace_save+0x8e/0xc0
[  352.431976][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  352.431990][    C0]  ? stack_depot_save_flags+0x28/0xa50
[  352.432007][    C0]  ? cfg80211_inform_bss_data+0x224/0x3bd0
[  352.432023][    C0]  cfg80211_inform_bss_data+0x224/0x3bd0
[  352.432039][    C0]  ? __kmalloc_noprof+0x223/0x510
[  352.432058][    C0]  ? ieee802_11_parse_elems_full+0x1d7/0x3780
[  352.432071][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0
[  352.432085][    C0]  ? ieee80211_iface_work+0xbf4/0x1020
[  352.432098][    C0]  ? process_one_work+0x9cc/0x1b70
[  352.432112][    C0]  ? ret_from_fork+0x45/0x80
[  352.432123][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  352.432144][    C0]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  352.432162][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  352.432181][    C0]  ? _ieee802_11_parse_elems_full+0x626/0x44e0
[  352.432201][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  352.432219][    C0]  ? ieee802_11_parse_elems_full+0x145/0x3780
[  352.432235][    C0]  cfg80211_inform_bss_frame_data+0x26e/0x7a0
[  352.432255][    C0]  ieee80211_bss_info_update+0x310/0xab0
[  352.432269][    C0]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  352.432284][    C0]  ? find_held_lock+0x2b/0x80
[  352.432298][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0
[  352.432313][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0
[  352.432382][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  352.432402][    C0]  ? kcov_remote_start+0x3c9/0x6d0
[  352.432416][    C0]  ieee80211_iface_work+0xbf4/0x1020
[  352.432430][    C0]  ? rcu_is_watching+0x12/0xc0
[  352.432445][    C0]  cfg80211_wiphy_work+0x3dc/0x550
[  352.432464][    C0]  process_one_work+0x9cc/0x1b70
[  352.432480][    C0]  ? __pfx_process_one_work+0x10/0x10
[  352.432495][    C0]  ? assign_work+0x1a0/0x250
[  352.432508][    C0]  worker_thread+0x6c8/0xf10
[  352.432523][    C0]  ? __kthread_parkme+0x19e/0x250
[  352.432541][    C0]  ? __pfx_worker_thread+0x10/0x10
[  352.432554][    C0]  kthread+0x3c2/0x780
[  352.432565][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432576][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432631][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432646][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432657][    C0]  ? rcu_is_watching+0x12/0xc0
[  352.432671][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432683][    C0]  ret_from_fork+0x45/0x80
[  352.432695][    C0]  ? __pfx_kthread+0x10/0x10
[  352.432707][    C0]  ret_from_fork_asm+0x1a/0x30
[  352.432729][    C0]  </TASK>
[  354.685123][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  354.700994][ T1295] ieee802154 phy1 wpan1: encryption failed: -22