last executing test programs:

1m44.24826612s ago: executing program 4 (id=254):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c)
sendfile(r0, r0, 0x0, 0xb)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000540)={0x8, 0x0, 0x8, 0x8002, 0x1a, "90730aef00fffffffffffffbff95647fffffeb"})
r3 = dup(r2)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd29, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xa, 0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xf}}]}}]}, 0x3c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace_dev_match', 0x2000, 0x108)

1m43.540376615s ago: executing program 4 (id=256):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
tgkill(0xffffffffffffffff, 0x0, 0x22)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x693, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x7ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r3, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000046c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r4}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000"], 0x50)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

1m41.965436099s ago: executing program 4 (id=259):
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6)
semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227)
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
kexec_load(0x7ffffffffffffffb, 0x0, 0x0, 0xa0000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0x7ffffffe, 0x2000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080)=0x3f00, 0x7f03)

1m40.703062663s ago: executing program 4 (id=262):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="bafe394ebb0a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0xf4ff, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1f}}}}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10000000)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="c9", 0x1}], 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc)

1m39.258145891s ago: executing program 4 (id=267):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fsync(0xffffffffffffffff)
chdir(&(0x7f0000000140)='./bus\x00')
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004001280140001202a00", @ANYRES32=0x0, @ANYBLOB='\b'], 0x2c}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x99, 0xffff, 0x6, 0x41, 0x6, 0x6, 0x8}, 0xe0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')

1m37.658202666s ago: executing program 4 (id=272):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x100000)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000004c0), 0x4)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x2)
r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
write$snddsp(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00010000080011800400050000000000000000"], 0x30}}, 0x404c880)
setuid(r7)

1m20.732608931s ago: executing program 32 (id=272):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
socket$nl_route(0x10, 0x3, 0x0)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000480)=0xe, 0x100000)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000004c0), 0x4)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x2)
r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0)
write$snddsp(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf251200000008000300", @ANYRES32=r9, @ANYBLOB="0a00010000080011800400050000000000000000"], 0x30}}, 0x404c880)
setuid(r7)

12.423429994s ago: executing program 2 (id=544):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1e44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000108000905810320000000000904010000020d00000904010102020d0000090582020004fefc000905030200020000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x40, {0x26, 0x10, 0x10, 0x10, 0xe, 0x10, 0x8f, 0x1ff, 0x10, 0x0, 0xa, 0x2010}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x20, 0x31, 0x6c, {0x6c, 0x22, "5d2caf15ff54ebb3657b222b147541d05b6cb4a21e392167e556ec00d1fcf0a90cfd063a84eda3f456dc6c090fb0ccff4708b3ec64517a151eb741f6aa084a9ba3b1828c0dd7a53e3d8df202e3b356fd6e3eb871bb54e93291944d8fe34d951c4405c42a28ed155fc6c2"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x20, 0x30, 0x53, "1569fe45ac1e77a1f5fd092ba274978eb14dcc9127c912302c36361c57272657915745ef558644f06027691c5429f4a9ca040409bd475f8511ec59d1459961a6e6370cbedcce35955a47ec1cb55e35af915600"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8001, 0xd4, 0x6, 0x7, 0x2, 0xfffa, 0x3, 0x7, 0x5, 0x7ff, 0xf7f, 0x6}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0xa9}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x2a0}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}})
io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000))
r5 = openat$kvm(0xffffff9c, &(0x7f0000002140), 0x40, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
pipe2$9p(0x0, 0x80)
ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x7})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, &(0x7f0000000000)="d8"}, 0x20)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r9, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000300))
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0})
r11 = dup(r10)
ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x0, r11})
close_range(r7, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

12.252055402s ago: executing program 5 (id=547):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
request_key(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r6)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="20800000", @ANYBLOB="010027bd7000fddbdf2503000000040001800800040003000000"], 0x20}, 0x1, 0x0, 0x0, 0x5800}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00')
pread64(r7, &(0x7f0000002640)=""/4107, 0x100b, 0x535)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0xce9, 0x5, 0x3)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
memfd_secret(0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

10.203204159s ago: executing program 5 (id=550):
r0 = socket(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = epoll_create1(0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x3, 0x0, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000080)={0x3, r6, 0x40081, 0x0, 0x4, 0x800008})
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000140)={0xc0000017})
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)

9.494079892s ago: executing program 5 (id=553):
r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_procfs(r2, &(0x7f0000000100)='net/ipv6_route\x00')
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
getitimer(0x1, &(0x7f0000000040))
shutdown(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp=r8, 0x1}, 0x20)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
close_range(r6, 0xffffffffffffffff, 0x0)

8.510856678s ago: executing program 5 (id=556):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000007f0904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0xa2, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x7, 0x50, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "4f526c46d2"}, {0x5, 0x24, 0x0, 0xae}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x3, 0x5, 0x6b}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@country_functional={0xa, 0x24, 0x7, 0x95, 0x1, [0x2, 0x9]}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3f}, @country_functional={0xc, 0x24, 0x7, 0x8, 0x6, [0x1000, 0x9a0c, 0xbee]}, @mbim_extended={0x8, 0x24, 0x1c, 0x72, 0x80, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1000}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xd, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x4, 0x40}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x9, 0x6, 0xff, 0x3}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xed, 0xfb}]}, 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44c}}, {0xd8, &(0x7f00000002c0)=@string={0xd8, 0x3, "6a1d15d52a6b59ee6efb8d186aa5bf7c35ef3d0ffbeeb2567bfbe3c47dd6c0b16d2359cf5eb1c96da4f201f1cd5c8cc0af02ac47e2e54c714ce1bac5868c7290682d958a8c432a339770f4f5c2fd41539cd298bb192b29049e3e0e46c42435dd1fe8061b2033565efba2fdd08758614e3c895698e27395ee63d6c6f7fc9544d26fc38107a497122dcf00ac082d64f2b27a26106298f684c6f4f1168871ad6fc6698821c3da1ed26652a03f51d642d93e195c165c9a14c70a6a107c1abcaed858e73a6054debe2bbc0014f41bc47d4bc1422e7e3dd01a"}}, {0x29, &(0x7f00000003c0)=@string={0x29, 0x3, "ce313b2fe77f79eaf8bbdf198448a419c6f508af3fd9e8db4036d47b9a0d984c9b236cd93eca41"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40c}}, {0x76, &(0x7f0000000500)=@string={0x76, 0x3, "9dd4574c752c9419e8bad7a853fd913f907c42c06be165994cce4b0c100765e7e75e299ecfc34669fff2bdedf9834a4538b4ae5e2b98536b4db7806cde5bd558a1011febcb71852e81bce1211d2f78b9ac72b67f1b8f9aeacbd38a365991515614860b62dc0937ff33c920388c0a9a3502faa8db"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44f}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})

8.008049056s ago: executing program 3 (id=557):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x1000000})

7.846979688s ago: executing program 3 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8800) (fail_nth: 6)

6.945959899s ago: executing program 2 (id=560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
request_key(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r6)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="010027bd7000fddbdf2503000000040001800800040003000000"], 0x20}, 0x1, 0x0, 0x0, 0x5800}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00')
pread64(r7, &(0x7f0000002640)=""/4107, 0x100b, 0x535)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0xce9, 0x5, 0x3)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
memfd_secret(0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

6.936447198s ago: executing program 3 (id=561):
r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(r3, &(0x7f0000000100)='net/ipv6_route\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f00000001c0)=@tcp}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp, 0x1}, 0x20)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

5.841633743s ago: executing program 2 (id=562):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
close(r2)

5.839250612s ago: executing program 3 (id=563):
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000001040)={&(0x7f0000001300)={{@hyper, 0x8}, {@hyper, 0x10001}, 0x400, "a764d6a9e2b5582eb1759d6ac75ce923d692b0f2ba7e576bba29bea480d7a2de46e63af0d378113b4fd9e3c6a107504079f8fc49cbf39d68f2ca25f59b6ef1d6431bec0e94d4a82bf6abe1a6a555e44b53bc8932735d4ee5ada257b68eca1ad33075581bd74b4de73c3d1872105299b87011387dee7927491f115e7a8d5eba3008170e3e4f971963e11ec6b1e1a4e85ae5dff0df86677bb92b9ffc646f4b9f6b9885cd1fb083f0749879863b65e72a9049b386451c68fd34da558e95756a17d32b002956b63be545744dcddcde2960157d6082a2b621fec146e606f726dccecc53cc8ad038de2e71ecf8f3a9646430ba2c370a5825efb3bf421e19511e4928db4f9da91f2bccc250f1df01f3341d403325ad7bed693e19e453301d01e0a85724db75a1d866096eeb2dfe27d66d6eed0785fc553db567d522ae7a4d44e269d07bd6f28797c3940972dd4df59e0b134e0c9c6f924dac58aa0a3e23abe976351d26214b8b7a52e2d294e2c4648fd20a0c3837720a80c3a8456854b089f24fbe967d21ca4e2d991fea0b7fcbe7e63cadae028633c20a7fa63b8f17255bf87bb8e1279cc28cd90e0a1dcb0f3bd6c0998c274029bcefc77fd7ca1adda1fe436f31af1d985ccfd5b273fd61582d533f3b5b6801616dba67f7d267f06d8bf84b245e581931905351a9db6aee9ca2fd13787f356c34acac27e004cc79b3f31f7e6b7c8f2a111a753369f7b43cdb95615ec3d5545e5f2f83ea5907bc50f8c405662aaed65b5a9c6e8835e58b2472bd35da58c3b15f88c096139ca197ff8f387d391b1d5700bbfde87d44fd77376323515469aeba680bfce24418f834ca639c22544404acf5717219740205875b80db8d72466058f4b8d23d46f9a94e8dbea168e46775e8531e7263def8d4e4954138762bfa9fff10761d1419203688dcd5a5c183552e84f11d724157df28d1323af9cc004e5f0334e326f400365df0cb6e66f2658bb36058b582d7c713ccbe0758f5130e9509e9202ed0dabd4ed9bd1d73b7a8e19df68c701870ac09ff1136480e343ddaef0cb83ef92170d9b82494968e98066c5f18ebcef202cb5caad07864f3392e8466950cd8dd975f919c672c8f91692bd6c9dba97f5f88863a253f4c309dc6a0e38f8bc453bbdd3f24aa34a7d10a79b55bb7278f042b1290cff2ca1284f782e1e19d4bd78338c6560e6cf7bcba567d756f9d918a0a06b41c0d11da4926aa659056718438d1a3ec5f83b21ce9db8c9ddd6e1a9e84336959aaa34f67947b8be577d652547d6e4f73b01945cef793108f7c5994ca1bd502fdb5d8ad29a9662acb43cc96a43b2061afc0eeaf89321055e6e242356b8624806ea146e308f1d390d2f6c57098eb98cac0029b6f583513b7e1e863cc2c860beb7cfe73dd38e43de95b9ee58f4cf812a4da7b2bb03aa04e6e692cb893d03455"}, 0x418, 0x5})
r0 = socket$kcm(0xa, 0x2, 0x73)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140))
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @remote}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x36, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2, 0xff}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x9}}], 0xfd4a}, 0x0)

5.669566999s ago: executing program 3 (id=565):
r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00\x00\x00\x00\n', &(0x7f0000000040), 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24044000}, 0x48015)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(r3, &(0x7f0000000100)='net/ipv6_route\x00')
pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
getitimer(0x1, &(0x7f0000000040))
shutdown(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp=r8, 0x1}, 0x20)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x100, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.637278114s ago: executing program 2 (id=566):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$inet6_sctp(0xa, 0x801, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x884)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="042f"], 0x200)
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140))
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4a8000, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, r6, 0x10002000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
socket(0x6, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

4.58794296s ago: executing program 1 (id=567):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
io_setup(0x8, &(0x7f0000002740)=<r0=>0x0)
io_destroy(r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xa8)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000040)=0x16, 0x4)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r8 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x1000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r8, 0x0, 0x10001, 'syz1\x00', 0x0})
ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045519, 0x0)
socket(0x10, 0x3, 0x0)

4.517490794s ago: executing program 3 (id=568):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r0 = semget$private(0x0, 0x20000000102, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000200)=""/181)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x81])
semtimedop(r0, &(0x7f0000000000)=[{}, {0x0, 0x8000, 0x1000}], 0x2, 0x0)
semop(r0, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}, {0x3, 0x0, 0x1000}, {0x1, 0x131, 0x1800}], 0x3)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000100), 0x15)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4)

3.626446342s ago: executing program 0 (id=570):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x3}}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x133, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)="b2d89f7910fc5818428a8a601ae48995a75cf46ad8b8b6fd1a4356a1cbe9f4652036ac1a2b25e422bca2e9058cc54e7ee5496dd471a9de163fdbbde998ebffa7468e21349c00b002edae8f21a185bb44010c5b3b80e588e350a2aa8b8de04c77d1ed243427b9b311fa087c03151d4081a15ef9a1016c547e9bc037937da6a69826dfef4710a9ac11f7e8b64a4a69da84f822542ea7fc438735359d36144b003ec71d727e58e53a18e613cb24fa387bfe0d620284f3fada43763e45cb7664aa8e23b2aa1df49a23e527658c8016e20c8922b553e53a96bfb3595fbd257ffed9", 0xdf, 0xfffffffffffffff9)
r5 = add_key(&(0x7f0000000180)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r4, r5}, &(0x7f00000003c0)=""/232, 0xe8, &(0x7f00000005c0)={0x0, &(0x7f0000000500)})
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r5)

3.580417748s ago: executing program 5 (id=571):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYBLOB="191b657e429ed622ca94e41492319455438edeae2709e5ae6ae133db6c6f15984a3a05feda34c5b68aee637c307edb9427eb2b80f2eae958ce2ea967252ed3061a6f222b5be31feef3fa3b0e38266760f006f29e123275cfc9f4d1", @ANYRESOCT=r3], 0x1000f)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000100)={0x20, r6, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x18, r6, 0x0, 0x0, 0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000d40)={0x48, 0x1, r6, 0x0, 0x80000040000005, 0x20002})
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140))
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48})

3.215811791s ago: executing program 0 (id=572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
request_key(0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r6)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB="010027bd7000fddbdf2503000000040001800800040003000000"], 0x20}, 0x1, 0x0, 0x0, 0x5800}, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000000c0), &(0x7f0000000100)=""/237}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00')
pread64(r7, &(0x7f0000002640)=""/4107, 0x100b, 0x535)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioperm(0xce9, 0x5, 0x3)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
memfd_secret(0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

3.076015941s ago: executing program 1 (id=573):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r0=>0x0})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
fcntl$lock(r3, 0x7, &(0x7f00000002c0)={0x2, 0x2, 0x9, 0x9, r2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff47, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="3700000014000000"], 0x20)

2.442058572s ago: executing program 1 (id=574):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x650202) (async)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x650202)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff04800000080039503230"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
semget$private(0x0, 0x0, 0x2)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async)
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000003c0)={0x4b3c}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) (async)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2094f57aa1000000000a030000000d000000000007000000090001007b797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d761af65a164785fb080003400000000c2c0000000b0a01010000000000000000070000000900020073797a310000000009000100"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async)
syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)

2.339637906s ago: executing program 2 (id=575):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x24040000)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x1000000}], 0xfc, 0x1000000, 0x0})

2.150333491s ago: executing program 0 (id=576):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
close(r2)

1.492248135s ago: executing program 1 (id=577):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x7f}, 0xa)
socket$inet6(0xa, 0x2, 0x0)
timer_create(0xb, 0x0, &(0x7f00000000c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
timer_gettime(r3, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000200), &(0x7f0000000280)=r8}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, &(0x7f00000004c0), {[{{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [0xff, 0xff, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'ipvlan1\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x401, 0x9623, 0x4, 'pptp\x00', 'syz0\x00', {0x3dd5}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xff], 'rose0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x88, 0x3, 0x2, 0x21}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x1d, 0x88, 0x6, 0x9, 0x34, 0xe0, 0x14}}, @common=@icmp6={{0x28}, {0x8, "e962", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x3, 0x7, 0xaf, 'syz1\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r7}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
connect$can_bcm(r4, &(0x7f0000000080), 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000f90a010400000000000000000000000008000a40000000000900010073797a4d000000000900020073797a3200000000080005400000001f080003400000001408000c40100000000c000b"], 0x80}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0)

1.425641377s ago: executing program 0 (id=578):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xf, 0x4)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, {0xffffffff}}, './file0\x00'})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2)
mkdir(&(0x7f0000000100)='./file0\x00', 0x108)
ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000140)=0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', <r3=>0x0, 0x700, 0x80, 0x9, 0x6, {{0x14, 0x4, 0x0, 0x22, 0x50, 0x66, 0x0, 0x42, 0x29, 0x0, @remote, @multicast2, {[@generic={0x7a98cabf75c1764b, 0xf, "efaf8cea606c60cb270ec797fe"}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x6, [0xe]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x2e, [@broadcast]}, @end, @noop, @generic={0x19e, 0x3, "f7"}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xc}, {@multicast1, 0x270b8edb}]}]}}}}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x1, 0x1, 0x80, 0x0, r2, 0x9, '\x00', r3, r1, 0x1, 0x5, 0x2, 0x4, @void, @value, @void, @value}, 0x50)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000002c0)='macsec0\x00')
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3d0, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x258, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8b, 0x3, "f87fefcfa503ec807e881d24d6a630c9573607100b240edd9dd8d2d9ce5dcd2343c0070389d40eeacb8f0ec2c0786b73dffea97138fc58523a8283669a4592b2555790019062edf3dcc903d087a50c6456dd05e4f0469c748c6e6376d01cdf3d335b66d1a81e84949cbef6963c5fcd9e3aa12a44c3ee14c262663986c15d91e1144090daf8d7f1"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "d740034002c8cc7c6860eabd8cd7923e4fc9640898564a3efddf12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "dfd8a98235ebab2249deb6a097319887a6d8c747ee95b1b3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "86cf6dbe1e54e5f028cb24f3622eb68a32f646a23f308d63"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "1b023b0d9d7ec00fcdcdb9726e55e6848c1abd799995ba55ebf39f06"}}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "7f3e53cb55fc5d24d0ecf5c63cf14514badf25ec3eb45ae0bc6f1a55e5eae647c565678ce08e6ce4b85dddbf7d570ca13c0f10ceb561884f825043f8b9578787b7237b85ddf958ea3ea5300ef55ff28adb7ce250ce51655ce91281aa4f7c2a250297a58e162289f965df95"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "1d3bb206c4a90179c7f334fd01af09c6019307438bfb18e5cfa01c3b"}}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
close_range(r1, r0, 0x2)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x5, 0x4)
r5 = memfd_create(&(0x7f00000007c0)='-@+\x00', 0x4)
r6 = memfd_create(&(0x7f0000000800)='\xa1\x00', 0x4)
r7 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000840)={0x0, 0x7, [{r5, 0x0, 0x10000, 0xfffffffff0000000}, {r2, 0x0, 0x1000000000000, 0x100000000}, {r6, 0x0, 0x1000000000000, 0x1000000000000}, {r1, 0x0, 0x100000000, 0xfffffffff0000000}, {r1, 0x0, 0xfffffffffffff000, 0x2000}, {r1, 0x0, 0xfffffffff0000000, 0xfffff000}, {r2, 0x0, 0x1000, 0xfffff000}]})
mount(&(0x7f0000000900)=@md0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='binfmt_misc\x00', 0x1004808, &(0x7f00000009c0)='&\x00')
r8 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @auto=[0x5, 0x61, 0x38, 0x33, 0x35, 0x4, 0x39, 0x65, 0x65, 0x31, 0x35, 0x61, 0x34, 0x64, 0x33, 0xd]}, &(0x7f0000000a80)={0x0, "e858d8f38f53a069e63c142429fa6f269dddd834c729be8ad3c048a3c7ac881eed201d0718579c640f1bed0a3ac43fdc57514ceb726a41698b6fea88a92ef8ce", 0x21}, 0x48, 0xfffffffffffffff8)
r9 = add_key$user(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x3}, &(0x7f0000000b80)="fb5bbc546edb32c7de028e42b0bad373336f055383298f150693e858b43bd2e6aa3dc7747f93df7909532a82f1f19f69d01b775e07024d449cb74a0e37d86f0179c074df6decda03de27afdb7a935474b7c97669ca5c2600c614052fa28368c7ea26834a9e9c99104ceb1a02aaf0818a4f", 0x71, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000000c00)={0x0, r8, r9}, &(0x7f0000000c40)=""/222, 0xde, 0x0)
keyctl$get_security(0x11, r9, &(0x7f0000000d40)=""/98, 0x62)
fremovexattr(r6, &(0x7f0000000dc0)=@known='user.incfs.id\x00')
open_by_handle_at(r1, &(0x7f0000000e00)=@orangefs_parent={0x28, 0x2, {{"9a180b0f83c0fc7c5c508044d7fe6cc5", 0x5}, {"a91a6402841fb7853ce306a34de78434", 0x1}}}, 0x2400)
stat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
stat(&(0x7f00000024c0)='./file1\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002580)=<r12=>0x0)
stat(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getresgid(&(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)=<r14=>0x0)
r15 = getpgid(0x0)
sendmmsg$unix(r1, &(0x7f0000003d00)=[{{&(0x7f0000000e40)=@file={0xac4e27b0ace16534, './file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)="9663ebaee87394e04d4ef04863531095b5f412ee88c5442be20c614600e91ada1aaf2605382cb4a957ebe41047348a8f65f5e60891e6b1a20d93c8bc96c421bafbcccdd0f8bc22c8c5af1f108d3a5b1281d9c3ee40ff9924b261888ca6c22ac27db17625ad4f966a4344421dfd0b3d7b5b2ced05d26ac72e4f93b3b1bf50f1d9e6c1558eba287b6d4f60b44a61c72645c1ba44ca740fe713602769d44688f8d277737f7385601788a9f70d961503802fb42088ca1085272c09114a059a5b76bf47cdbad3ec1f46dcf0469eb653cb584bd3d2fe4242683a2e8e7bd925058faf37a4c1596cc309bf7cacfc4eac", 0xec}, {&(0x7f0000001000)="543105a03434a20fd7d23781ae25b86860871c74251a0210b32f29cd65b5ce84e4205d8caa38bc33dd8314fa796750732e9cce4caf5298e031351dd0a022573a67c58d1a686ec39c9f320019dddf0883bb9cc937e1f44b56df0221278b8f83eaada0347407661195e46ad9b607e3624ecf847c357f42aedbcbec916317ce577cfd35b1217b783178257f49d82b75b2460f61056ab57a52fda6a758e7de33b1429142b6dcccedc22bc8b1ec18fe58989f96463b7bb9a9e2fbc1173f4e18afc11c4c472f3df5dc4fbc3e88700b12c6b887e9f69f460c14af22c13c56fc6407444cf74996b1", 0xe4}, {&(0x7f0000001100)="4b5f55e4683b3df0aa73b9eb73aa23d0d311f95cc7c4f367ba8e0f141bb17349b790713c77056cc57661b451b28222633d28e3e2ba42aaa115b8e0ccf47392e0263d8dc0101b605fe8e8e7a57d432f74a03980d1fc7faddf2330b1777837c1c01fc9717a801e", 0x66}, {&(0x7f0000001180)="0f19287b9377c2dca8107b48ea", 0xd}, {&(0x7f00000011c0)="10dc217954b5935657b3f8b058319b7080108ce25d7afaf1e2335b221a5af3f803c4966bbe4587d9bdd84dd76400e93197ad5cb659a72ddacf10635a20600041ab05480efb9b2cf50a396f157da3556b3d5e1086d5890f8af078d1fca638b3ab206f092abbb94307ae22a0ccf4dada8499febd54ea4572b90083cb8d091d0434e215e4a41976dbdd7154ef08bbb5f91e32b99f256bb5bdd39ac0092e", 0x9c}, {&(0x7f0000001280)="356c2efeb5e8b90ae3343862300e4ceb3932028f87a1118bd160877fd28d08ecf42a823d1bc3084a9047392de7559d21605d859a9fe092d8bc17832b7764e6b8abbcbbe5e7bfab6aa22eb55af6010f5d16c8f20be43b41813cccc5bf26f33871463e14b9", 0x64}, {&(0x7f0000001300)="879aafdf91296ea355c8232d50469457c5478580815d6627b68090de9d361a19aed775f72ed48a6ace2194d21046bd5626b80fdba8", 0x35}, {&(0x7f0000001340)="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", 0x1000}], 0x9, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r4, r7, r2, r1]}}], 0x80, 0x80c0}}, {{&(0x7f00000027c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002840)}], 0x1, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee00}}}], 0x20, 0x20000840}}, {{&(0x7f0000002980)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002a00)="e0154ce88f2d0e1c19714b704c10f98f89d49aed2853f0ee259999017310f356e46d1791e049687e7b7e", 0x2a}, {&(0x7f0000002a40)="92d7ece49c984a838e1af19d96f91e60bccd3c63d29bdeff01e79a359c32b62c7b0b13cc7d75839326184b4ff235552a94b9b9d4179b90efb761865e3337b254", 0x40}, {&(0x7f0000002a80)="a63b1e93909879abdc2276eb48a6a53afd47fd0a9978abbf371306371e35832e9c29039f5503a2ea78b08dc50f08acd5159b1c9794243e7339824553d57f18cb50c67965e34855e0f958a38b485fcd07003be716fe820ee95d24e1b0aa57b19c96732a0ee5543ef88cd97ea6c8cb57f02345ef0312dd30f98cfaa9392391ee872f802983fbb5238997beb89fe5529d23b2ec9555cebfa131c8786240b5a107907e1b50197d22366aefae8dbef04ab6d6ee30984531d0c1c1d60ece7a4e07add9758e6c912b0d4f8342f91a41272817240d85d6ef211ea181e11ff4d633789918fedd7a2703306ce5dc878d032ec001b2ba3101fe2c0bb4d20bd5872c0ff9386e30b3fdc0ce49506c5e9c2c80ed6019178b529e723235d48d8af54c395bd89f4c59a482274a9458411751576007e8239f967c6abd2d6b30be43fb20504b110b2b850c882727be43118efe6fc5567f29dfc34bb5f6ee3352940514f671005a0c6d23404eb29aa2c7d2011dd3a02081c898049518ccc451c51e68e7954a67e056b57b5f6e96c239ca515613e839ec2e567a022265238c94ac91460160345c28d2eb7519e1d5136e301bdcbe6b9ce21a2cb4dc04cfcc3003654d0a37243c2f5d757e32169de2a14d62269a7ff4ea3ed8a915e4008aa5b92b23955b116f65e28234a0c741c99560cf063ae5c359220df0a2792d4ac60955124d865727f8d914284f8a87551f2a511dfada6ca5d7fa3c03501cdc4744dd0a36c8ccea82396c13c54cfdb3239d22014d2671238313acf52914031ff5828228312e8ddd490784db13fbef1c0c00fde446b67fb079514ae404cae043219c78de8844a144c6b0c4d83c0fcf1be1de468f67df2eb77c003f18a69509b5214ae82a4661fee60854f1d5a3b065c207346ed0663b3ecef5ada45214b56b5198f603ba00ac03d39b67beb804faa6417c87486be274a5eae98ca993292fd3265d30df5722588d40bd6f15f393b6c3270612b4216ffcf12789dded08874d99c4211aafbfd146ee2143b8187b2c5fd8950e84865adcb5bb5314b155b87fa6e78c5c9797550201cfb248030ec4148120957e64432b8b7d3d34e4e6e824caff3eba1f9b50fa13dfd0e93a1f2602eadcc5aa48d870ea59b90bc505c460952be95a838a13be40a3cf0791175a47248e4113e09a1c86b394170b156b4d3644dcc5b6211e0a2d089919c25437a561441d73fb9341e26bc12ff5a23d70469e24f2549a22ba54117b63f4692304b55b18b8f3eeae3848957d8387784f3d685cd9f94246e12cc562da00247f3aee46f8b65d403b77dabf1ec1fe113b024360bd3ee2e4bdf1f772767cbd777abae15b8d049f975314740fcb811ff559ab135e8f97bc2cbb5840d3d606e78d64d9bcd345cd5f3cc9f832b8dce88a239c02097da547d1a661fbfb31101a066efbbcb4480e7e8b6a1b016e32aa06851ddd8d1de5e529f1c95d24644b944790d88874592116469949315458013c9d5c397950dd245dfeacffc0c535ee929b0eee151d356aa7e2cacbb09c4c1f738e47ddb5caea3a6737c7086e5da6a37199001b6e330d44615f94664c0b40485c4b027385672c32e16494394f42d81eeca28afbdf2576dd5a6370ef08bdbfdc555ea2d518ed37b0ab842cbb13e431ba70c6ab1164c257c1446fd5e85f53e229aaa8917fd5f88b392bfc813d845c14529ea6069f5601b20739fa4db2009ed03d01dd5bec2ef6ba20743399a94d745f5c3a11e31ddb62000533334721eec28dafa43d42255c5a8661265983ca8e62ef3572dd958ef73869c836aa4177e8dd83449df38fac58e5485edb38ae5e9078324d8acc5e135e9bfd33d879e0b4f16437196c044382ff1152472a9d93330d536f08c10de44b5abd09f69f8a5d8494ce4abb496f50c94229ce8a222688b1580c33e474758f1690fdcef9fe7cb8e89dedc1eacefc163e4f5319f6692b5ed2216ba690436f2ad35cbf875234cb405ae4981b4909465c95c0e4ead673854ccb7392d07e1df82ea96730487ed53ac6409cad00b76e05deb726cf0f8e0620358b0a7d5d103243c254d40d9eec7d48707cd1c53e7f14cd9ba9ddc748512c2b4ee7d4baf3e1b965d2c51032ab15382c27885885bdf4d9bd985c6d19ca5cde2d758e031a88f08aa462c2604aa07f17849abe4268220df770efd1903a992706188efe69df50f9c05a6a09663941d5627bcf01720588fdcfa9c1b7be71f98cca95a59b0d32370d205392a85cbce4971589da5d2c400b4cf04b31814d633aae3d7031bf8090005ad550dd4c85f771dc08ad91a4b3c63eddeafa936da4aee2b422f045160c023856315fd59eb3a9742f3c03758f27796de32ea0a8a4233ae3e450e1cb00201987ade4183471b2f64f91b93d51fd67c0b2440d64d6e373526ab0b69d42359d425072506e204deb341470ed9b8781974ac6b95c35b747bb013f7f501281c0bfaae42b219ec97bcf54a4a2b59c1b57a5949649405b3bebb347e3579a65e73a6c89402ebb85cefd1fc5db0eccb416d5e1e64332991b2437baeb84cb7c99c11e1b56bbc0b4fd1045d24242d22153cb8e9c3a1d52d61c479900205ab509fb251d76d162c20fb3c79d1abe762dbf11b7945e9be1db4b6279ee03e21d0bf0985368bf1c757e2986d928b9b72b70587ee8199d03d49d4e64fc3632ce554d14b60c221ce514c8aa480df108a1e2bb2e03a4377a431ba45a74e2d5af05f19eccd03682e296812ef112eb02612c31826fae6660cf6ad4d11d35e1779a808072b842efa9099aa527ba9d7b67e0424b692c6f85e0225f2c1f6e67ad70a0042b7d9c4b6ea9ed3edb0928860814064253744b906d6558daf3ee717d338960ba2a182801688eea7612b4426e04a21bfbc6b99161a583e86d40ae33993df5cc2e54e12f014020523ef775765b6ff84458d70213ec1693e35ad6cf8e50a6ed0c1b946efe703aa049901bd6b7a9e157ccac3692e131847da333c53c7fa70f34b6e51a555a35a0bbaee68b6c80ad25d939a362358f8a5796d0e1296cef1858696352de3289e77d52f8edfc94f8b96e637073a4b7c8e4b87f27a4e2e3726b00cb63012dac51d39eb269b1513cf8ec1d3e91949c0628a62e62c2eee2727a229338669bdb6ef3a06ee6f0d0c5aa21fa82676f0b5d891f49e6a27048788f214d0a1f16c3f66e59728592e25ab55e7f4405601a1534678011db95225a2209a9d12a2c4eea27a45516918d7ee088d806a6eee680af4ce45579fecf4f9cba2018185178f486ab7c56d39643c639df911d54e62829e19f417db683d86a19f853ab2da22bfa84d8281495acd53ec785f76e57cc7542b1be490b19c8df34dfd95b32f395949eaf03d1f8c96bf006e36180c24ea52efa91f4e70a700a81a2f2192587a4e5dfc5bd6fdecf51a973ec8ba2de6a005d2baca525ff8554761a8c1640d3b040526e84ca29aeb3ee012e518a67f29739091a8ada2eedbe0968fc4d4b8d9d9e72db2021afa08d9f7c0fee7e386c0cf9534a4df0920c33eddbb90be9c46d130f1e31b436c45872402c6b0387841122d82f3f12c1f97f2471fea9ffd6feff10d36219b5660bb40138b794be2ca489131c95d38c587f6d9652bb7661f753b1a50de81e8967002104264423086af4c375bd948032bb40efd8ebdcb4b9a2f3584ef8cbc5872d545f3c8deb607016462321dab341a96e4df824b881fa05af31b5f775a1e12c2f6dc9e74b73a8b25547931bc93695b090646994329e4d545d4792951aff44725d4e7323e84a905dc099688f80f79d2a389dbf83cae5e48ccdc25a302f10ee6a4640142370bff4bfaaa8ecf77d92971e1abb5d0bdf376ca56217c6e799a66ebf00a52f88225fc416e3d9b70d4bc44c14c484e52f18f712dfd0a8a55c2451bdad9fcec4951b6a2eb2f9e65966cc7d81a128da7c2157f8ab93a86a68838ed9fba213efa6d1f810b013b1283af7fdf0a1ab4a0212dca8661a56ac0f170335afce3a2833ee6036c0a26631bcfdd2a08f4f8d94c48a414e0de69451e284e5c2c7b497f6b1af484a706e97145851d892fe2bdf9d61bce04d698082cb384fcdf204df909396f24e3a4a0f79e53709bb9d638761db7b511e604a43f84e1067ac341baf8a363ce1c068c9e1138d3cd9b0ea01286d53fd8ff0da6b22fb76b8ed13bd222397af11c5d41876ba225353bac887fb86301c058a203d389f299f83031eea122636ce1d8c55d44a287388c49789363ed56851f48c3af92de06708fcfe3fb230a311d23462b480c16aff6b72870f5c827c6a53c5cd49ea9184bbc839b909a61feb066b528830105927fd1d0f5c00bc97f4857c41dc64da600dfe5e3ec5d969d811c25aea90b258b755998e191b105680fcbecc3467dc3cf0cc8c2b9fd00df1d1448551ed37ca6dba106e1962055d1402d9759075d62047f47044961368253aabb391eb5162f597e127ac27544c6c62c6913810002d440ab1ab06cc97dd17a3bbedef62fd8078638452adec12852440b54d6aca2614cc9c1c828407e68bd17baf8855c2b2391ddb3adc39429ad9c7c6fecb91e5a7357e56137c6954094a2f6a6927b69de5ecd594e6eaf570339ecd5580c2b79b37b2bef4219f86bb1b59b2897ab133b6c4177484898aa000708c7e374f5bdcae92b82c99654e37c2c6a3b6204aecc3aa68e93e09de512f63b531369b3e3e06c1c95d67687cfe8914e4f6f6a62b57f42aaccaffc49f77f0d7164c109db5edd6463f19a8aa6b96254134763f62142e9c8c90ca82476aa3c57284069d8a72736c60ce0f8ec2194db8d881e6943610a4ed643646ce30f707216cd00a6516db56fe94fe2e0b5bb238d4bb3e57811b3100b96cfe606305ac18ddc3ca6a7da6f34882b3ec3ece854a18a49071f848ebf44c431c796f5f3d0bb496dc58be1dd0a68f25b77f9387865cbda8729167cccba68f5f28d7f670c8658c61a15ec5e893f2ca0332ee044c1fd7de3905d8e0d3e8050af9f37cf81a88d6352cc394cb44b3b1e7043046b5f2e0a7850159ed8349a15ae70aee7466d0a35488a28b7c8f2bb1a77a08c835882676a808f0b267d41c48c2740c234d1f31b290f0874dab6e2c357c93a9e8b7e6c32ca4067fedd655fe4141c7bf0ba9f49a6a146a0297c843d2c1df7e81625adab414cc266cfe2b8eacbc7678debee9fe20e8e9166bc73581a32c2b95212e409b212f3ef5666032aa743e279eb1e824b187c2b04bc7eed74fae0218efcceed3db9d54d238437c93d75b4feb799a6febb6ac8895b8310696ce0d4ac56addb9f29ab654ad4f4aaa447ef8c884387b771a742a69ae09e5fdbefdca925dde9f5f551c0122736c59f97e7569a380e12c00b36768d17285ca4b8bfd2188366fd51f084994370b5a3c124e6646f33c07aab76964912cbde1c79b32b54a486decccb223f2bde41fbdddabd5acf994d95d17eeb40b1d0c619e79235134299c0b7a0f44d50c13535117aba2a75ef7a6e6b04a6e002b6b4db64507f079548d4e9d1e7551c3d68dffb84c2dc83b7e631daea229e94b98e39365fb89212f6129eafa7c3aa81c51669de6722a50be2b28ce841fc0cdf9405fc0a62ecd7cad4348292bfee5f102cd5bf259d68dfb6416b2c330b47b5db8562208f897aac7823062cec257d9687f7a79c6d64d91b3ec2a041deeb2ce1300c1cbad5ccfbc1bb4aa94d41f82cd79a525cfdca182c523553f19fb92164b9ec0b921ad3a502f2463fc1c5cec0295183f81ecb2e917163b44d3e816d47a8c4f8e67869feba23795d06b36ed8362be294af1eaeeea665359", 0x1000}, {&(0x7f0000003a80)="f0d7cc14a3a994ba2271815f3b70be3fec5edc9006f2012bf5eb9aa35103251d2ea7056d8c3cf094e9897eda3f6eeb12a98eebe09123f20c13d3b89ef574c2f6e735a70ce9b89479e1885ad7a95766300b97b66a5e72720f8c9b56aef0f54baaec5f07a087c74e03f78d6dc0d6beeb61a5612d0777b3bd6c04c6261ba3d2ac85", 0x80}, {&(0x7f0000003b00)="098ee59c386f5d5b6e553f37d79141b216d6376d6bee2e6496d6562fedd846a116c266a06262dd4215c635905730b310e10faf21f009a3c22fefc628e8bb72d06bf22b2de7802768719c73034231eb5f041e795d0df4e67ecdc3fcbe4b07d6867280cfec0a826a1a1dac0a511eae80b1337eea45bc34ef364c7b13c934ba26fed9d99d755a99f7cf631157ce91ddcf762c69bfaab62e8fca7bdeb1da61bfce8bdd436d5ad29d7ab5e62f4e24ad549e7d2475d5d127a044c69028a5b5df4eb039a24af5b51ecaf49b54d1aabe0a63d4025a30db7578999f6506ad5651fa0968afa41f698f7f702a147a0025", 0xeb}], 0x5, &(0x7f0000003c80)=[@rights={{0x24, 0x1, 0x1, [r5, r7, r4, r1, r5]}}, @rights={{0x18, 0x1, 0x1, [r6, r4]}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x58, 0x4000000}}], 0x3, 0x40000004)

1.335692566s ago: executing program 2 (id=579):
socket$phonet(0x23, 0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x80, 0xce, &(0x7f0000000180)="d287e45e9caf191e9a8420ed2fc28ddab5b1530f53df72810b3b71fa1aab99ab9bf660bb81fc04bed1a650a039b0742abf65bc6a95658c5e2612f97bb85616af9848d6714559c86ce99ae5836584b035051bfeb55c4d8ec06cf49df093eb0875d4ca6a508917b5c710e943fcf4b14def21247f24684d0dcdc45a5bddf743fbc3", &(0x7f0000000300)=""/206, 0x1, 0x0, 0xb2, 0x35, &(0x7f0000000400)="dce803ff152790007e120335358d97c45bb0ec130fdb205e730a92e7d6436b1332c1dd2776216d2776956ba0ed8483ac168ce7d0adddb78c9f8411750a524b8aa319783e3880e32e4034433c662dbae149c24348add43a12ec060a748c5879764a9a9c057c5c132072454bb48d18b7e7372e63299a139de1b5639ef0776a705d5874061beb1b1f1f758626cfca4170d94939e8d75392b7bef209f5a514e2dbc5fc569ddf2d1706fccdc47546cd5cc7ead743", &(0x7f00000004c0)="7ac102fdba1d751da93c533dfd755e5602c990968b16c1b56c738a61b516b42b4768a071bd18b131b3448406f4c9dabbb7e297b494", 0x3, 0x0, 0xffffffff}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c742075000000000000a7c830303030303030303030303030303030343039"], 0x2a, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
recvfrom(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000038000000030a03000000000000000000030000000900030073797a0073797a3000000000be000480080001400000000028000000000a01040000000000000000030000000900010073797a30000000000800024000000001140000001100010000000000000000000000000a000000"], 0xa8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.245135511s ago: executing program 1 (id=580):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x1000000})

1.233905774s ago: executing program 5 (id=581):
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x80001)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
timer_gettime(0x0, &(0x7f0000000440))
clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0})
timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {r4, r5+60000000}}, &(0x7f0000000400))
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2})
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r7, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
close(r6)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0xfffffffffffffeab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.155477833s ago: executing program 0 (id=582):
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x1, @rand_addr=0x64010101}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
setgid(0xffffffffffffffff)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioprio_set$pid(0x2, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c3d019ee0dc9af0c05b2fec9e62e"})
close_range(r0, 0xffffffffffffffff, 0x0)

1.154838919s ago: executing program 1 (id=583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_vhci(0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000180))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)
userfaultfd(0x80001)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000380)={[{@verity_on}, {@redirect_dir_off}, {@index_on}, {@index_off}, {@volatile}, {@uuid_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@dont_appraise}, {@flag='nomand'}, {@uid_eq={'uid', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x61, 0x62, 0x37, 0x36, 0x2, 0x32, 0x37], 0x2d, [0x30, 0x62, 0x63, 0x64], 0x2d, [0x35, 0x32, 0x32, 0x32], 0x2d, [0x33, 0x6, 0x65, 0x33], 0x2d, [0x62, 0x61, 0x31, 0x31, 0x33, 0x66, 0x34, 0x37]}}}]})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000300)=0xd0)
r5 = semget$private(0x0, 0x207, 0x53)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x2}, 0x8)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0xfffffffffffffea2, 0xfa00, {r1, 0x4}}, 0x10)
semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/119)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r8, &(0x7f0000000300), 0x6)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100})

0s ago: executing program 0 (id=584):
pipe2$9p(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x6e8001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x2b5, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0x179}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.776702][ T6931] RSP: 002b:00007fcedd8a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.776719][ T6931] RAX: ffffffffffffffda RBX: 00007fcedcbb5fa0 RCX: 00007fcedc98e969
[  176.776729][ T6931] RDX: 0000200000000540 RSI: 00000000c100565c RDI: 0000000000000003
[  176.776739][ T6931] RBP: 00007fcedd8a1090 R08: 0000000000000000 R09: 0000000000000000
[  176.776748][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.776758][ T6931] R13: 0000000000000000 R14: 00007fcedcbb5fa0 R15: 00007ffd8fa76b08
[  176.776779][ T6931]  </TASK>
[  176.984691][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.999557][ T6931] ERROR: Out of memory at tomoyo_realpath_from_path.
[  177.191137][ T6935] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  177.225607][ T6935] warning: `syz.1.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  177.433957][ T6937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6937 comm=syz.0.285
[  177.453046][  T973] usb 4-1: Using ep0 maxpacket: 16
[  177.494558][  T973] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.554644][  T973] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.626512][  T973] usb 4-1: config 0 interface 0 has no altsetting 0
[  177.683816][  T973] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  177.737636][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.772424][ T6939] netlink: 830 bytes leftover after parsing attributes in process `syz.0.285'.
[  177.868468][  T973] usb 4-1: config 0 descriptor??
[  178.316711][   T82] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  178.380133][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.390577][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.422404][  T973] hid (null): invalid report_size 6778482
[  178.433133][  T973] hid (null): nested delimiters
[  178.476671][   T82] usb 3-1: Using ep0 maxpacket: 16
[  178.495025][   T82] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  178.514823][   T82] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.537155][   T82] usb 3-1: config 0 descriptor??
[  178.652705][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  178.668602][   T82] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  178.683493][   T30] kauditd_printk_skb: 54 callbacks suppressed
[  178.683509][   T30] audit: type=1400 audit(1748087764.936:317): avc:  denied  { mount } for  pid=6921 comm="syz.3.279" name="/" dev="ramfs" ino=10891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  178.714511][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.728361][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.751475][  T973] usb 4-1: USB disconnect, device number 3
[  178.818767][   T24] usb 2-1: Using ep0 maxpacket: 32
[  178.831636][   T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  178.851035][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.874281][   T24] usb 2-1: config 0 descriptor??
[  179.000827][   T30] audit: type=1326 audit(1748087765.226:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.028315][   T82] usb 3-1: Detected FT232A
[  179.039707][   T82] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  179.052394][   T30] audit: type=1326 audit(1748087765.235:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.075554][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.084558][   T30] audit: type=1326 audit(1748087765.235:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.086693][   T82] usb 3-1: USB disconnect, device number 6
[  179.109911][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.122424][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  179.131465][   T30] audit: type=1326 audit(1748087765.235:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.157931][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  179.168737][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  179.178530][   T82] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  179.188428][   T30] audit: type=1326 audit(1748087765.235:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.223795][   T24] usb 2-1: media controller created
[  179.230842][   T82] ftdi_sio 3-1:0.0: device disconnected
[  179.251915][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.260522][   T30] audit: type=1326 audit(1748087765.235:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.296617][   T30] audit: type=1326 audit(1748087765.235:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.401444][   T30] audit: type=1326 audit(1748087765.235:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.487591][   T30] audit: type=1326 audit(1748087765.235:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7fc00000
[  179.727589][ T6959] Lens B: =================  START STATUS  =================
[  179.735062][ T6959] Lens B: Focus, Absolute: 0
[  179.740070][ T6959] Lens B: ==================  END STATUS  ==================
[  180.564974][ T6960] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  181.484557][   T24] az6027: usb out operation failed. (-110)
[  181.502439][   T24] az6027: usb out operation failed. (-32)
[  181.512830][   T24] stb0899_attach: Driver disabled by Kconfig
[  181.518864][   T24] az6027: no front-end attached
[  181.518864][   T24] 
[  181.527323][   T24] az6027: usb out operation failed. (-32)
[  181.534996][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  181.564018][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  181.716533][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  181.723529][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  182.441122][ T6973] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  182.816680][ T5863] usb 2-1: USB disconnect, device number 5
[  183.459426][ T5863] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  183.465859][ T6985] sctp: [Deprecated]: syz.3.295 (pid 6985) Use of int in maxseg socket option.
[  183.465859][ T6985] Use struct sctp_assoc_value instead
[  183.491759][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.519517][ T6987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6987 comm=syz.1.296
[  183.698022][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  183.717416][ T5864] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.752477][ T5864] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.771872][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  183.796862][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.825162][ T5864] hub 3-1:4.0: USB hub found
[  184.154987][   T30] kauditd_printk_skb: 424 callbacks suppressed
[  184.155003][   T30] audit: type=1400 audit(1748087770.062:751): avc:  denied  { name_bind 0x1000000 } for  pid=6980 comm="syz.2.294" path="socket:[11783]" dev="sockfs" ino=11783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  184.185450][    C1] vkms_vblank_simulate: vblank timer overrun
[  184.186941][ T5864] hub 3-1:4.0: 2 ports detected
[  184.200142][ T5864] usb 3-1: selecting invalid altsetting 1
[  184.318947][ T6999] Lens B: =================  START STATUS  =================
[  184.326425][ T6999] Lens B: Focus, Absolute: 0
[  184.331024][ T6999] Lens B: ==================  END STATUS  ==================
[  184.371536][ T5864] hub 3-1:4.0: Using single TT (err -22)
[  184.390023][ T6999] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  184.780397][ T5864] usb 3-1: USB disconnect, device number 7
[  185.436391][ T7011] mmap: syz.1.302 (7011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  186.054162][   T30] audit: type=1400 audit(1748087771.830:752): avc:  denied  { accept } for  pid=7019 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  186.285105][ T7024] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  186.387068][ T7029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7029 comm=syz.1.308
[  189.061722][ T7060] netlink: 830 bytes leftover after parsing attributes in process `syz.2.315'.
[  189.988082][   T30] audit: type=1400 audit(1748087775.506:753): avc:  denied  { read write } for  pid=7070 comm="syz.2.320" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.028852][ T7074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'.
[  190.225216][ T7075] syz.2.320: attempt to access beyond end of device
[  190.225216][ T7075] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  190.302856][   T30] audit: type=1400 audit(1748087775.506:754): avc:  denied  { open } for  pid=7070 comm="syz.2.320" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  190.327816][   T30] audit: type=1326 audit(1748087775.721:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  190.557084][   T30] audit: type=1326 audit(1748087775.721:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  190.843745][   T30] audit: type=1326 audit(1748087775.721:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  190.990236][   T30] audit: type=1326 audit(1748087775.721:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  191.014228][   T30] audit: type=1326 audit(1748087775.721:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  191.042122][   T30] audit: type=1326 audit(1748087775.721:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  191.221270][   T30] audit: type=1326 audit(1748087775.730:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  191.244803][   T30] audit: type=1326 audit(1748087775.730:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.2.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81eb8e969 code=0x7ffc0000
[  192.407019][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  192.422234][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  192.440247][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  192.454830][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  192.548673][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.066143][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.351010][ T5820] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  193.598542][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.468002][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.585351][ T7124] netlink: 830 bytes leftover after parsing attributes in process `syz.2.330'.
[  194.616959][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.695133][ T7100] chnl_net:caif_netlink_parms(): no params data found
[  194.707274][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  194.820341][ T7133] FAULT_INJECTION: forcing a failure.
[  194.820341][ T7133] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  194.833724][ T7133] CPU: 1 UID: 0 PID: 7133 Comm: syz.0.333 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  194.833748][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  194.833758][ T7133] Call Trace:
[  194.833764][ T7133]  <TASK>
[  194.833771][ T7133]  dump_stack_lvl+0x16c/0x1f0
[  194.833801][ T7133]  should_fail_ex+0x512/0x640
[  194.833829][ T7133]  _copy_from_iter+0x2a4/0x15b0
[  194.833861][ T7133]  ? __pfx__copy_from_iter+0x10/0x10
[  194.833899][ T7133]  skb_copy_datagram_from_iter+0x124/0x740
[  194.833923][ T7133]  ? unix_scm_to_skb+0x241/0x520
[  194.833950][ T7133]  unix_stream_sendmsg+0x4ae/0x1160
[  194.833984][ T7133]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  194.834023][ T7133]  ____sys_sendmsg+0xa95/0xc70
[  194.834049][ T7133]  ? copy_msghdr_from_user+0x10a/0x160
[  194.834069][ T7133]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.834107][ T7133]  ___sys_sendmsg+0x134/0x1d0
[  194.834128][ T7133]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.834181][ T7133]  __sys_sendmsg+0x16d/0x220
[  194.834202][ T7133]  ? __pfx___sys_sendmsg+0x10/0x10
[  194.834239][ T7133]  do_syscall_64+0xcd/0x260
[  194.834266][ T7133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.834284][ T7133] RIP: 0033:0x7fcedc98e969
[  194.834298][ T7133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.834314][ T7133] RSP: 002b:00007fcedd85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.834329][ T7133] RAX: ffffffffffffffda RBX: 00007fcedcbb6160 RCX: 00007fcedc98e969
[  194.834340][ T7133] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006
[  194.834350][ T7133] RBP: 00007fcedd85f090 R08: 0000000000000000 R09: 0000000000000000
[  194.834360][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.834369][ T7133] R13: 0000000000000000 R14: 00007fcedcbb6160 R15: 00007ffd8fa76b08
[  194.834393][ T7133]  </TASK>
[  195.070345][ T5887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  195.081358][ T5887] usb 2-1: config 0 has no interface number 0
[  195.087636][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.099205][ T5887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.131289][ T5887] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.156800][ T5887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  195.167610][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.188181][ T5887] usb 2-1: config 0 descriptor??
[  195.207890][ T5820] Bluetooth: hci5: command tx timeout
[  195.267728][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.276616][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.284227][ T7100] bridge_slave_0: entered allmulticast mode
[  195.291573][ T7100] bridge_slave_0: entered promiscuous mode
[  195.309433][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.316742][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.325663][ T7100] bridge_slave_1: entered allmulticast mode
[  195.332979][ T7100] bridge_slave_1: entered promiscuous mode
[  195.381359][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  195.381388][   T30] audit: type=1400 audit(1748087780.529:789): avc:  denied  { search } for  pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  195.964132][   T30] audit: type=1400 audit(1748087780.529:790): avc:  denied  { read } for  pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  196.007139][   T30] audit: type=1400 audit(1748087780.529:791): avc:  denied  { open } for  pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  196.030102][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.052615][   T30] audit: type=1400 audit(1748087780.538:792): avc:  denied  { getattr } for  pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  196.079295][   T30] audit: type=1400 audit(1748087780.557:793): avc:  denied  { unmount } for  pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  196.146250][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  196.153973][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  196.164458][ T5887] usbhid 2-1:0.1: can't add hid device: -32
[  196.171682][ T5887] usbhid 2-1:0.1: probe with driver usbhid failed with error -32
[  196.190199][ T5887] usb 2-1: USB disconnect, device number 6
[  196.286433][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.304408][   T30] audit: type=1400 audit(1748087781.418:794): avc:  denied  { read } for  pid=7150 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.875431][ T1157] bridge_slave_1: left allmulticast mode
[  196.881186][ T1157] bridge_slave_1: left promiscuous mode
[  196.898460][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.926705][   T30] audit: type=1400 audit(1748087781.436:795): avc:  denied  { open } for  pid=7150 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  196.970699][ T1157] bridge_slave_0: left allmulticast mode
[  196.976712][ T1157] bridge_slave_0: left promiscuous mode
[  197.013209][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.071228][   T30] audit: type=1400 audit(1748087781.436:796): avc:  denied  { getattr } for  pid=7150 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  197.356283][ T5815] Bluetooth: hci5: command tx timeout
[  197.923308][   T30] audit: type=1400 audit(1748087782.924:797): avc:  denied  { name_bind } for  pid=7163 comm="syz.0.339" src=19488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  198.060934][   T30] audit: type=1400 audit(1748087782.924:798): avc:  denied  { read write } for  pid=7163 comm="syz.0.339" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  199.066970][ T5815] Bluetooth: hci0: command 0x0406 tx timeout
[  199.072080][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  199.073517][ T5815] Bluetooth: hci1: command 0x0406 tx timeout
[  199.079591][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  199.579990][ T5126] Bluetooth: hci5: command tx timeout
[  199.738193][ T7193] overlayfs: missing 'lowerdir'
[  199.853560][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.891794][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.927452][ T1157] bond0 (unregistering): Released all slaves
[  200.036238][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.609861][ T7191] netlink: 830 bytes leftover after parsing attributes in process `syz.3.343'.
[  200.696253][ T7100] team0: Port device team_slave_0 added
[  200.719342][ T7100] team0: Port device team_slave_1 added
[  201.530666][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.676735][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.692001][   T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  201.754453][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.814765][ T5126] Bluetooth: hci5: command tx timeout
[  201.828644][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.846325][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.879653][   T24] usb 3-1: device descriptor read/64, error -71
[  201.908452][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.060349][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  202.152184][ T7100] hsr_slave_0: entered promiscuous mode
[  202.158721][ T7100] hsr_slave_1: entered promiscuous mode
[  202.165044][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.173709][ T7100] Cannot create hsr debugfs directory
[  202.242011][   T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  202.263548][ T5887] usb 2-1: Using ep0 maxpacket: 8
[  202.272958][ T1157] hsr_slave_0: left promiscuous mode
[  202.282616][ T1157] hsr_slave_1: left promiscuous mode
[  202.288817][ T5887] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  202.295851][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.303869][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.315518][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.332783][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  202.339569][ T5887] usb 2-1: config 0 descriptor??
[  202.349278][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  202.349291][   T30] audit: type=1400 audit(1748087787.067:811): avc:  denied  { write } for  pid=7220 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  202.383516][ T5887] usblcd 2-1:0.0: USBLCD model not supported.
[  202.391599][   T24] usb 3-1: device descriptor read/64, error -71
[  202.403321][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.421517][   T30] audit: type=1400 audit(1748087787.067:812): avc:  denied  { nlmsg_write } for  pid=7220 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  202.432478][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.502223][ T1157] veth1_macvtap: left promiscuous mode
[  202.519866][ T1157] veth0_macvtap: left promiscuous mode
[  202.525579][ T1157] veth1_vlan: left promiscuous mode
[  202.531149][   T24] usb usb3-port1: attempt power cycle
[  202.556024][ T1157] veth0_vlan: left promiscuous mode
[  202.566478][ T5863] usb 2-1: USB disconnect, device number 7
[  202.723053][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  202.884973][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10
[  202.904861][   T24] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  202.920548][ T5887] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  202.959326][   T24] usb 3-1: device descriptor read/8, error -71
[  202.973694][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.018436][ T5887] usb 4-1: config 0 descriptor??
[  203.216877][   T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  203.290474][   T24] usb 3-1: device descriptor read/8, error -71
[  203.439237][   T24] usb usb3-port1: unable to enumerate USB device
[  203.533619][ T5887] stadia 0003:18D1:9400.0003: unknown main item tag 0x2
[  203.567566][ T5887] stadia 0003:18D1:9400.0003: item fetching failed at offset 2/3
[  203.575873][ T5887] stadia 0003:18D1:9400.0003: parse failed
[  203.600377][ T5887] stadia 0003:18D1:9400.0003: probe with driver stadia failed with error -22
[  203.915854][ T1157] team0 (unregistering): Port device team_slave_1 removed
[  203.954833][ T1157] team0 (unregistering): Port device team_slave_0 removed
[  204.604041][ T7250] netlink: 830 bytes leftover after parsing attributes in process `syz.2.357'.
[  204.885585][ T7100] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  204.892674][   T30] audit: type=1400 audit(1748087789.434:813): avc:  denied  { create } for  pid=7258 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  204.918812][   T30] audit: type=1400 audit(1748087789.453:814): avc:  denied  { ioctl } for  pid=7258 comm="syz.1.359" path="socket:[12804]" dev="sockfs" ino=12804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  204.923303][ T7100] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  204.993185][ T7100] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  205.035974][ T7100] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  205.190777][ T7268] Lens B: =================  START STATUS  =================
[  205.198551][ T7268] Lens B: Focus, Absolute: 0
[  205.203399][ T7268] Lens B: ==================  END STATUS  ==================
[  205.255223][ T7268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.700564][ T5866] usb 4-1: USB disconnect, device number 4
[  206.845752][ T7273] Lens B: =================  START STATUS  =================
[  206.853329][ T7273] Lens B: Focus, Absolute: 0
[  206.858078][ T7273] Lens B: ==================  END STATUS  ==================
[  206.977282][ T7274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.315837][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.404019][ T7100] 8021q: adding VLAN 0 to HW filter on device team0
[  208.486563][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.493715][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.550905][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.558131][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.635111][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  208.655283][ T7100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.682433][ T7100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.731143][ T5863] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  209.083930][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  209.246052][ T5887] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.270936][ T5887] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.282524][ T5887] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.296164][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.314501][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.320719][ T5866] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  209.326323][ T7287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  209.351764][ T5866] usb 1-1: config 0 has no interface number 0
[  209.361989][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  209.370787][ T5866] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  209.397371][ T5887] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  209.403651][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.418630][ T5866] usb 1-1: Product: syz
[  209.419184][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  209.422812][ T5866] usb 1-1: Manufacturer: syz
[  209.458293][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  209.473349][ T5866] usb 1-1: SerialNumber: syz
[  209.511306][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  209.520578][ T5863] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  209.522238][ T5866] usb 1-1: config 0 descriptor??
[  209.572846][ T5863] usb 4-1: Manufacturer: syz
[  209.633178][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.641118][ T5863] usb 4-1: config 0 descriptor??
[  209.927625][ T5866] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  209.957504][ T5866] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  210.017956][ T5863] rc_core: IR keymap rc-hauppauge not found
[  210.046119][ T5863] Registered IR keymap rc-empty
[  210.064199][ T5866] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  210.065879][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.084449][ T5866] usb 1-1: media controller created
[  210.109214][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  210.143808][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.203632][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  210.247204][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  210.303805][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.324165][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.366763][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.394984][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.428708][   T30] audit: type=1400 audit(1748087794.616:815): avc:  denied  { remount } for  pid=7292 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  210.450733][ T5866] usb 3-1: USB disconnect, device number 12
[  210.453405][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.488100][ T7100] veth0_vlan: entered promiscuous mode
[  210.504642][ T7100] veth1_vlan: entered promiscuous mode
[  210.518409][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.538129][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.570237][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.593536][ T7100] veth0_macvtap: entered promiscuous mode
[  210.604634][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.613934][ T7100] veth1_macvtap: entered promiscuous mode
[  210.718290][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.739740][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.749172][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  210.759953][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.785846][ T5863] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  210.797566][ T7100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.808214][ T5863] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  210.816811][ T7100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.825523][ T7100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.843424][ T5863] usb 4-1: USB disconnect, device number 5
[  210.851829][ T7100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.999873][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.012311][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.062492][ T5866] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  211.068040][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.078902][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.100053][   T30] audit: type=1400 audit(1748087795.261:816): avc:  denied  { mounton } for  pid=7100 comm="syz-executor" path="/root/syzkaller.EIgKNi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  211.158637][   T30] audit: type=1400 audit(1748087795.308:817): avc:  denied  { mount } for  pid=7100 comm="syz-executor" name="/" dev="gadgetfs" ino=6541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  211.239455][ T5866] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  211.264345][ T5866] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  211.292727][ T5866] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  211.337506][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.384842][ T7338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  211.441634][ T5866] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  211.782503][  T951] usb 2-1: USB disconnect, device number 8
[  211.805949][   T82] usb 1-1: USB disconnect, device number 7
[  211.885985][   T30] audit: type=1400 audit(1748087795.972:818): avc:  denied  { wake_alarm } for  pid=7366 comm="syz.2.375" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  211.976024][   T30] audit: type=1400 audit(1748087795.982:819): avc:  denied  { create } for  pid=7337 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  212.348132][ T7380] Lens B: =================  START STATUS  =================
[  212.355687][ T7380] Lens B: Focus, Absolute: 0
[  212.360456][ T7380] Lens B: ==================  END STATUS  ==================
[  212.424381][ T7380] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.578008][   T30] audit: type=1400 audit(1748087797.581:820): avc:  denied  { name_bind } for  pid=7384 comm="syz.1.380" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  214.390509][   T30] audit: type=1400 audit(1748087798.339:821): avc:  denied  { open } for  pid=7384 comm="syz.1.380" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  214.632169][   T30] audit: type=1400 audit(1748087798.554:822): avc:  denied  { setopt } for  pid=7397 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  214.651911][    C0] vkms_vblank_simulate: vblank timer overrun
[  215.252978][ T5864] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  215.566731][   T30] audit: type=1400 audit(1748087799.330:823): avc:  denied  { execute_no_trans } for  pid=7408 comm="syz.3.386" path="/81/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  215.632361][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  215.786678][   T30] audit: type=1400 audit(1748087799.405:824): avc:  denied  { setopt } for  pid=7408 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  215.826799][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  215.829986][   T30] audit: type=1400 audit(1748087799.405:825): avc:  denied  { read } for  pid=7408 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  215.869084][ T5864] usb 3-1: New USB device found, idVendor=0125, idProduct=8888, bcdDevice= 0.00
[  215.901628][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.962157][ T5864] usb 3-1: config 0 descriptor??
[  216.057614][   T30] audit: type=1400 audit(1748087799.892:826): avc:  denied  { read } for  pid=7423 comm="syz.0.391" dev="nsfs" ino=4026533238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  216.251762][   T30] audit: type=1400 audit(1748087799.892:827): avc:  denied  { open } for  pid=7423 comm="syz.0.391" path="net:[4026533238]" dev="nsfs" ino=4026533238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  216.275618][   T30] audit: type=1400 audit(1748087799.892:828): avc:  denied  { create } for  pid=7423 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  216.296305][   T30] audit: type=1400 audit(1748087799.892:829): avc:  denied  { read write } for  pid=5810 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  216.342259][   T30] audit: type=1400 audit(1748087799.892:830): avc:  denied  { open } for  pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  216.396362][   T82] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  216.474756][ T7437] Bluetooth: MGMT ver 1.23
[  216.995038][   T30] audit: type=1400 audit(1748087799.892:831): avc:  denied  { ioctl } for  pid=5810 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  217.131332][   T30] audit: type=1400 audit(1748087799.892:832): avc:  denied  { create } for  pid=7423 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  217.207135][   T30] audit: type=1400 audit(1748087799.892:833): avc:  denied  { setopt } for  pid=7423 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  217.531282][   T82] usb 1-1: Using ep0 maxpacket: 32
[  217.543348][   T82] usb 1-1: config 64 has an invalid interface number: 4 but max is 0
[  217.563253][   T82] usb 1-1: config 64 has no interface number 0
[  217.569470][   T82] usb 1-1: too many endpoints for config 64 interface 4 altsetting 6: 83, using maximum allowed: 30
[  217.630964][   T82] usb 1-1: config 64 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 83
[  217.661759][ T5864] hid-generic 0003:0125:8888.0004: hidraw0: USB HID v0.00 Device [HID 0125:8888] on usb-dummy_hcd.2-1/input0
[  217.703144][   T82] usb 1-1: config 64 interface 4 has no altsetting 0
[  217.738412][   T82] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46
[  217.782264][   T82] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.835491][   T82] usb 1-1: Product: syz
[  217.859582][   T82] usb 1-1: Manufacturer: syz
[  217.879436][   T82] usb 1-1: SerialNumber: syz
[  217.949100][ T7456] netlink: 'syz.5.395': attribute type 72 has an invalid length.
[  217.972413][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.5.395'.
[  218.250009][   T82] usb 1-1: USB disconnect, device number 8
[  218.291454][ T7469] ./file0: Can't lookup blockdev
[  218.903309][  T973] usb 3-1: USB disconnect, device number 13
[  218.932919][ T5866] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  219.262535][ T5866] usb 4-1: device descriptor read/64, error -71
[  220.065614][ T7504] syz.0.399: attempt to access beyond end of device
[  220.065614][ T7504] loop0: rw=0, sector=0, nr_sectors = 1 limit=0
[  220.425234][ T7494] xt_connbytes: Forcing CT accounting to be enabled
[  220.432016][ T7494] Cannot find set identified by id 0 to match
[  220.634169][ T5866] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  220.857848][ T5866] usb 4-1: device descriptor read/64, error -71
[  221.078986][ T5866] usb usb4-port1: attempt power cycle
[  221.617662][ T5866] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  221.642443][   T30] kauditd_printk_skb: 95 callbacks suppressed
[  221.642458][   T30] audit: type=1400 audit(1748087805.121:929): avc:  denied  { create } for  pid=7529 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  221.703962][   T30] audit: type=1400 audit(1748087805.158:930): avc:  denied  { bind } for  pid=7529 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  221.861808][   T30] audit: type=1400 audit(1748087805.158:931): avc:  denied  { setopt } for  pid=7529 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  221.863213][ T5866] usb 4-1: device not accepting address 8, error -71
[  221.920302][   T30] audit: type=1400 audit(1748087805.158:932): avc:  denied  { accept } for  pid=7529 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  221.995435][ T7544] ipvlan2: entered allmulticast mode
[  222.005974][ T7544] dummy0: entered allmulticast mode
[  222.017309][   T30] audit: type=1400 audit(1748087805.158:933): avc:  denied  { read } for  pid=7529 comm="syz.3.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  222.107618][   T30] audit: type=1400 audit(1748087805.439:934): avc:  denied  { write } for  pid=7543 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  222.215631][   T30] audit: type=1400 audit(1748087805.635:935): avc:  denied  { ioctl } for  pid=7546 comm="syz.2.411" path="socket:[13217]" dev="sockfs" ino=13217 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  222.468810][   T30] audit: type=1400 audit(1748087805.747:936): avc:  denied  { setopt } for  pid=7555 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  222.641970][   T30] audit: type=1804 audit(1748087805.878:937): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.414" name="/newroot/11/file0" dev="tmpfs" ino=77 res=1 errno=0
[  222.934827][   T30] audit: type=1400 audit(1748087806.309:938): avc:  denied  { create } for  pid=7561 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  223.790245][ T7576] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  224.145924][ T7576] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  224.189748][  T951] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  224.543262][  T951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.592239][  T951] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  224.657991][  T951] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  224.693689][  T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.717918][  T951] usb 6-1: config 0 descriptor??
[  224.734466][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'.
[  224.746279][ T7599] netlink: 'syz.3.424': attribute type 30 has an invalid length.
[  224.763855][ T7599] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.773076][ T7599] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.781971][ T7599] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.790725][ T7599] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.960127][ T7582] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  225.040499][  T951] usb 6-1: USB disconnect, device number 2
[  225.159000][ T7599] kvm: kvm [7598]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x890ca27e7b180685
[  225.263180][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'.
[  225.300673][ T7612] FAULT_INJECTION: forcing a failure.
[  225.300673][ T7612] name failslab, interval 1, probability 0, space 0, times 0
[  225.313856][ T7610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.426'.
[  225.323651][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'.
[  225.338037][ T7612] CPU: 0 UID: 0 PID: 7612 Comm: syz.2.427 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  225.338063][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  225.338074][ T7612] Call Trace:
[  225.338081][ T7612]  <TASK>
[  225.338088][ T7612]  dump_stack_lvl+0x16c/0x1f0
[  225.338119][ T7612]  should_fail_ex+0x512/0x640
[  225.338143][ T7612]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  225.338172][ T7612]  should_failslab+0xc2/0x120
[  225.338193][ T7612]  __kmalloc_cache_noprof+0x6a/0x3e0
[  225.338219][ T7612]  ? nf_tables_newtable+0xd67/0x1b40
[  225.338248][ T7612]  nf_tables_newtable+0xd67/0x1b40
[  225.338275][ T7612]  ? __pfx___nla_validate_parse+0x10/0x10
[  225.338295][ T7612]  ? __pfx_nf_tables_newtable+0x10/0x10
[  225.338326][ T7612]  ? __nla_parse+0x40/0x60
[  225.338352][ T7612]  nfnetlink_rcv_batch+0x190b/0x2350
[  225.338394][ T7612]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  225.338419][ T7612]  ? find_held_lock+0x2b/0x80
[  225.338460][ T7612]  ? avc_has_perm_noaudit+0x149/0x3b0
[  225.338507][ T7612]  ? __nla_parse+0x40/0x60
[  225.338529][ T7612]  nfnetlink_rcv+0x3c1/0x430
[  225.338553][ T7612]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  225.338586][ T7612]  netlink_unicast+0x53a/0x7f0
[  225.338612][ T7612]  ? __pfx_netlink_unicast+0x10/0x10
[  225.338643][ T7612]  netlink_sendmsg+0x8d1/0xdd0
[  225.338671][ T7612]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.338702][ T7612]  ____sys_sendmsg+0xa95/0xc70
[  225.338730][ T7612]  ? copy_msghdr_from_user+0x10a/0x160
[  225.338750][ T7612]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.338786][ T7612]  ___sys_sendmsg+0x134/0x1d0
[  225.338808][ T7612]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.338862][ T7612]  __sys_sendmsg+0x16d/0x220
[  225.338884][ T7612]  ? __pfx___sys_sendmsg+0x10/0x10
[  225.338911][ T7612]  ? rcu_is_watching+0x12/0xc0
[  225.338940][ T7612]  do_syscall_64+0xcd/0x260
[  225.338968][ T7612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.338986][ T7612] RIP: 0033:0x7fd81eb8e969
[  225.339000][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.339017][ T7612] RSP: 002b:00007fd81f931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.339034][ T7612] RAX: ffffffffffffffda RBX: 00007fd81edb5fa0 RCX: 00007fd81eb8e969
[  225.339045][ T7612] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  225.339055][ T7612] RBP: 00007fd81f931090 R08: 0000000000000000 R09: 0000000000000000
[  225.339065][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.339075][ T7612] R13: 0000000000000000 R14: 00007fd81edb5fa0 R15: 00007fff4ec997d8
[  225.339097][ T7612]  </TASK>
[  225.761801][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2081 sclass=netlink_route_socket pid=7618 comm=syz.2.430
[  225.849151][ T7622] FAULT_INJECTION: forcing a failure.
[  225.849151][ T7622] name failslab, interval 1, probability 0, space 0, times 0
[  225.861852][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.0.429 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  225.861874][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  225.861884][ T7622] Call Trace:
[  225.861889][ T7622]  <TASK>
[  225.861895][ T7622]  dump_stack_lvl+0x16c/0x1f0
[  225.861924][ T7622]  should_fail_ex+0x512/0x640
[  225.861946][ T7622]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  225.861974][ T7622]  should_failslab+0xc2/0x120
[  225.861993][ T7622]  __kmalloc_cache_noprof+0x6a/0x3e0
[  225.862018][ T7622]  ? inet_alloc_ifa+0x43/0x190
[  225.862042][ T7622]  inet_alloc_ifa+0x43/0x190
[  225.862062][ T7622]  inet_rtm_newaddr+0x3b5/0x1540
[  225.862082][ T7622]  ? __lock_acquire+0x5ca/0x1ba0
[  225.862115][ T7622]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  225.862141][ T7622]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  225.862160][ T7622]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  225.862177][ T7622]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  225.862198][ T7622]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  225.862218][ T7622]  rtnetlink_rcv_msg+0x95e/0xe90
[  225.862239][ T7622]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  225.862267][ T7622]  netlink_rcv_skb+0x16d/0x440
[  225.862290][ T7622]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  225.862310][ T7622]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  225.862348][ T7622]  ? netlink_deliver_tap+0x1ae/0xd30
[  225.862375][ T7622]  netlink_unicast+0x53a/0x7f0
[  225.862398][ T7622]  ? __pfx_netlink_unicast+0x10/0x10
[  225.862426][ T7622]  netlink_sendmsg+0x8d1/0xdd0
[  225.862452][ T7622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.862483][ T7622]  ____sys_sendmsg+0xa95/0xc70
[  225.862508][ T7622]  ? copy_msghdr_from_user+0x10a/0x160
[  225.862527][ T7622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.862560][ T7622]  ___sys_sendmsg+0x134/0x1d0
[  225.862580][ T7622]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.862628][ T7622]  __sys_sendmsg+0x16d/0x220
[  225.862647][ T7622]  ? __pfx___sys_sendmsg+0x10/0x10
[  225.862674][ T7622]  ? rcu_is_watching+0x12/0xc0
[  225.862701][ T7622]  do_syscall_64+0xcd/0x260
[  225.862728][ T7622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.862745][ T7622] RIP: 0033:0x7fcedc98e969
[  225.862760][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.862777][ T7622] RSP: 002b:00007fcedd8a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.862793][ T7622] RAX: ffffffffffffffda RBX: 00007fcedcbb5fa0 RCX: 00007fcedc98e969
[  225.862803][ T7622] RDX: 0000000000008894 RSI: 00002000000001c0 RDI: 0000000000000003
[  225.862813][ T7622] RBP: 00007fcedd8a1090 R08: 0000000000000000 R09: 0000000000000000
[  225.862822][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.862831][ T7622] R13: 0000000000000000 R14: 00007fcedcbb5fa0 R15: 00007ffd8fa76b08
[  225.862853][ T7622]  </TASK>
[  226.419552][ T7641] FAULT_INJECTION: forcing a failure.
[  226.419552][ T7641] name failslab, interval 1, probability 0, space 0, times 0
[  226.432491][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.5.435 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  226.432520][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  226.432530][ T7641] Call Trace:
[  226.432537][ T7641]  <TASK>
[  226.432545][ T7641]  dump_stack_lvl+0x16c/0x1f0
[  226.432576][ T7641]  should_fail_ex+0x512/0x640
[  226.432601][ T7641]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  226.432632][ T7641]  should_failslab+0xc2/0x120
[  226.432651][ T7641]  __kmalloc_cache_noprof+0x6a/0x3e0
[  226.432677][ T7641]  ? net_generic+0xf4/0x2a0
[  226.432696][ T7641]  ? nf_tables_newtable+0xd67/0x1b40
[  226.432727][ T7641]  nf_tables_newtable+0xd67/0x1b40
[  226.432756][ T7641]  ? __pfx___nla_validate_parse+0x10/0x10
[  226.432777][ T7641]  ? __pfx_nf_tables_newtable+0x10/0x10
[  226.432810][ T7641]  ? __nla_parse+0x40/0x60
[  226.432831][ T7641]  nfnetlink_rcv_batch+0x190b/0x2350
[  226.432872][ T7641]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  226.432901][ T7641]  ? find_held_lock+0x2b/0x80
[  226.432943][ T7641]  ? avc_has_perm_noaudit+0x149/0x3b0
[  226.432992][ T7641]  ? __nla_parse+0x40/0x60
[  226.433014][ T7641]  nfnetlink_rcv+0x3c1/0x430
[  226.433039][ T7641]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  226.433071][ T7641]  netlink_unicast+0x53a/0x7f0
[  226.433098][ T7641]  ? __pfx_netlink_unicast+0x10/0x10
[  226.433129][ T7641]  netlink_sendmsg+0x8d1/0xdd0
[  226.433157][ T7641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.433191][ T7641]  ____sys_sendmsg+0xa95/0xc70
[  226.433219][ T7641]  ? copy_msghdr_from_user+0x10a/0x160
[  226.433239][ T7641]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.433277][ T7641]  ___sys_sendmsg+0x134/0x1d0
[  226.433300][ T7641]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.433361][ T7641]  __sys_sendmsg+0x16d/0x220
[  226.433383][ T7641]  ? __pfx___sys_sendmsg+0x10/0x10
[  226.433411][ T7641]  ? rcu_is_watching+0x12/0xc0
[  226.433441][ T7641]  do_syscall_64+0xcd/0x260
[  226.433470][ T7641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.433489][ T7641] RIP: 0033:0x7fe23378e969
[  226.433504][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.433524][ T7641] RSP: 002b:00007fe2346b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.433542][ T7641] RAX: ffffffffffffffda RBX: 00007fe2339b5fa0 RCX: 00007fe23378e969
[  226.433554][ T7641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  226.433565][ T7641] RBP: 00007fe2346b7090 R08: 0000000000000000 R09: 0000000000000000
[  226.433575][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  226.433586][ T7641] R13: 0000000000000000 R14: 00007fe2339b5fa0 R15: 00007ffcddfcd7e8
[  226.433610][ T7641]  </TASK>
[  226.790924][ T7644] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  227.247326][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  227.247344][   T30] audit: type=1400 audit(1748087810.340:996): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  227.274716][ T7663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.438'.
[  227.397394][ T7663] 8021q: VLANs not supported on gre0
[  227.406711][   T30] audit: type=1400 audit(1748087810.406:997): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  227.603675][   T30] audit: type=1400 audit(1748087810.686:998): avc:  denied  { write } for  pid=7659 comm="syz.1.439" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  227.959796][  T951] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  228.109020][ T7680] loop6: detected capacity change from 0 to 524287999
[  228.627609][  T951] usb 3-1: device descriptor read/64, error -71
[  228.803964][ T7671] hub 2-0:1.0: USB hub found
[  228.816187][ T7671] hub 2-0:1.0: 1 port detected
[  228.850832][   T30] audit: type=1400 audit(1748087810.864:999): avc:  denied  { append } for  pid=7676 comm="syz.5.442" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  229.195896][   T30] audit: type=1400 audit(1748087811.154:1000): avc:  denied  { append } for  pid=7676 comm="syz.5.442" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  229.274272][   T30] audit: type=1400 audit(1748087811.930:1001): avc:  denied  { write } for  pid=7686 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  229.335848][  T951] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  229.410485][   T30] audit: type=1400 audit(1748087811.940:1002): avc:  denied  { map_read map_write } for  pid=7686 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  229.497013][   T30] audit: type=1400 audit(1748087811.996:1003): avc:  denied  { create } for  pid=7686 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  229.513053][  T951] usb 3-1: device descriptor read/64, error -71
[  229.628099][  T951] usb usb3-port1: attempt power cycle
[  230.433281][  T951] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  230.456784][  T951] usb 3-1: device descriptor read/8, error -71
[  230.507886][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  230.668263][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  230.686353][ T5887] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  230.697117][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.711417][  T951] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  230.745387][ T5887] usb 4-1: config 0 descriptor??
[  230.754176][  T951] usb 3-1: device descriptor read/8, error -71
[  230.879318][  T951] usb usb3-port1: unable to enumerate USB device
[  230.918074][   T30] audit: type=1400 audit(1748087813.801:1004): avc:  denied  { read } for  pid=7716 comm="syz.0.450" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  231.090514][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  231.109828][ T7720] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  231.808928][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.817247][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  231.817694][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.828103][ T5887] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  231.844299][ T5887] usb 4-1: media controller created
[  231.864392][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  231.865878][   T30] audit: type=1400 audit(1748087813.829:1005): avc:  denied  { open } for  pid=7716 comm="syz.0.450" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  231.906360][ T7726] bridge0: entered allmulticast mode
[  232.326187][ T7726] bridge_slave_1: left allmulticast mode
[  232.349159][ T7726] bridge_slave_1: left promiscuous mode
[  232.378976][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.624985][  T973] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  232.925340][  T973] usb 1-1: Using ep0 maxpacket: 32
[  232.985190][  T973] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  232.992545][ T7726] bridge_slave_0: left allmulticast mode
[  232.999374][ T7726] bridge_slave_0: left promiscuous mode
[  233.006275][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.013818][  T973] usb 1-1: config 0 has no interface number 0
[  233.020618][  T973] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.063207][  T973] usb 1-1: config 0 interface 85 has no altsetting 0
[  233.092834][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  233.092871][   T30] audit: type=1400 audit(1748087815.709:1008): avc:  denied  { create } for  pid=7723 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  233.188720][   T30] audit: type=1400 audit(1748087815.765:1009): avc:  denied  { write } for  pid=7723 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  233.208753][   T30] audit: type=1400 audit(1748087815.765:1010): avc:  denied  { ioctl } for  pid=7723 comm="syz.5.452" path="socket:[15477]" dev="sockfs" ino=15477 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  233.233745][  T973] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  233.254171][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.270371][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'.
[  233.280967][ T5887] az6027: usb out operation failed. (-71)
[  233.292415][ T5887] az6027: usb out operation failed. (-71)
[  233.308793][ T5887] stb0899_attach: Driver disabled by Kconfig
[  233.319590][ T5887] az6027: no front-end attached
[  233.319590][ T5887] 
[  233.327631][  T973] usb 1-1: Product: syz
[  233.327845][ T5887] az6027: usb out operation failed. (-71)
[  233.341022][ T5887] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  233.346011][  T973] usb 1-1: Manufacturer: syz
[  233.349615][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  233.366509][   T30] audit: type=1400 audit(1748087816.093:1011): avc:  denied  { read } for  pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2957 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  233.394735][ T5887] dvb-usb: schedule remote query interval to 400 msecs.
[  233.401729][ T5887] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  233.411407][  T973] usb 1-1: SerialNumber: syz
[  233.417486][ T5887] usb 4-1: USB disconnect, device number 10
[  233.425158][   T30] audit: type=1400 audit(1748087816.093:1012): avc:  denied  { open } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2957 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  233.492447][  T973] usb 1-1: config 0 descriptor??
[  233.561421][   T30] audit: type=1400 audit(1748087816.093:1013): avc:  denied  { ioctl } for  pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2957 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  233.602283][ T5887] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  233.719922][   T30] audit: type=1400 audit(1748087816.420:1014): avc:  denied  { create } for  pid=7747 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  233.878160][ T7753] FAULT_INJECTION: forcing a failure.
[  233.878160][ T7753] name failslab, interval 1, probability 0, space 0, times 0
[  233.895688][ T7755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.457'.
[  233.912478][   T30] audit: type=1400 audit(1748087816.579:1015): avc:  denied  { read } for  pid=7747 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  233.958421][  T973] appletouch 1-1:0.85: Failed to request geyser raw mode
[  233.974724][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.3.459 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  233.974751][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  233.974762][ T7753] Call Trace:
[  233.974767][ T7753]  <TASK>
[  233.974775][ T7753]  dump_stack_lvl+0x16c/0x1f0
[  233.974805][ T7753]  should_fail_ex+0x512/0x640
[  233.974829][ T7753]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  233.974850][ T7753]  should_failslab+0xc2/0x120
[  233.974870][ T7753]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  233.974887][ T7753]  ? __alloc_skb+0x2b2/0x380
[  233.974904][ T7753]  ? bpf_lsm_capable+0x9/0x10
[  233.974924][ T7753]  __alloc_skb+0x2b2/0x380
[  233.974940][ T7753]  ? __pfx___alloc_skb+0x10/0x10
[  233.974958][ T7753]  ? genl_rcv_msg+0x510/0x800
[  233.974981][ T7753]  ? genl_rcv_msg+0x4bb/0x800
[  233.975012][ T7753]  netlink_ack+0x15d/0xb80
[  233.975034][ T7753]  ? __lock_acquire+0xaa4/0x1ba0
[  233.975067][ T7753]  netlink_rcv_skb+0x347/0x440
[  233.975088][ T7753]  ? __pfx_genl_rcv_msg+0x10/0x10
[  233.975116][ T7753]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.975151][ T7753]  ? __pfx_down_read+0x10/0x10
[  233.975169][ T7753]  ? netlink_deliver_tap+0x1ae/0xd30
[  233.975195][ T7753]  genl_rcv+0x28/0x40
[  233.975216][ T7753]  netlink_unicast+0x53a/0x7f0
[  233.975242][ T7753]  ? __pfx_netlink_unicast+0x10/0x10
[  233.975278][ T7753]  netlink_sendmsg+0x8d1/0xdd0
[  233.975305][ T7753]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.975333][ T7753]  ____sys_sendmsg+0xa95/0xc70
[  233.975358][ T7753]  ? copy_msghdr_from_user+0x10a/0x160
[  233.975377][ T7753]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.975409][ T7753]  ___sys_sendmsg+0x134/0x1d0
[  233.975429][ T7753]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.975481][ T7753]  __sys_sendmsg+0x16d/0x220
[  233.975501][ T7753]  ? __pfx___sys_sendmsg+0x10/0x10
[  233.975528][ T7753]  ? rcu_is_watching+0x12/0xc0
[  233.975559][ T7753]  do_syscall_64+0xcd/0x260
[  233.975586][ T7753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.975603][ T7753] RIP: 0033:0x7fc53dd8e969
[  233.975618][ T7753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.975634][ T7753] RSP: 002b:00007fc53ecc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.975652][ T7753] RAX: ffffffffffffffda RBX: 00007fc53dfb5fa0 RCX: 00007fc53dd8e969
[  233.975663][ T7753] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000003
[  233.975673][ T7753] RBP: 00007fc53ecc6090 R08: 0000000000000000 R09: 0000000000000000
[  233.975683][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.975693][ T7753] R13: 0000000000000000 R14: 00007fc53dfb5fa0 R15: 00007ffd43c21d78
[  233.975718][ T7753]  </TASK>
[  233.978448][  T973] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  233.992351][   T30] audit: type=1400 audit(1748087816.626:1016): avc:  denied  { write } for  pid=7747 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  234.329251][  T973] usb 1-1: USB disconnect, device number 9
[  234.337192][ T5126] Bluetooth: hci3: unexpected event for opcode 0x2016
[  234.358689][   T30] audit: type=1400 audit(1748087816.626:1017): avc:  denied  { connect } for  pid=7747 comm="syz.2.458" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  236.148685][ T7783] xt_CT: No such helper "pptp"
[  237.679607][ T7819] FAULT_INJECTION: forcing a failure.
[  237.679607][ T7819] name failslab, interval 1, probability 0, space 0, times 0
[  237.707675][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.2.469 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  237.707705][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  237.707715][ T7819] Call Trace:
[  237.707722][ T7819]  <TASK>
[  237.707729][ T7819]  dump_stack_lvl+0x16c/0x1f0
[  237.707760][ T7819]  should_fail_ex+0x512/0x640
[  237.707783][ T7819]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  237.707803][ T7819]  should_failslab+0xc2/0x120
[  237.707822][ T7819]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  237.707840][ T7819]  ? d_instantiate+0x77/0x90
[  237.707857][ T7819]  ? alloc_empty_file+0x55/0x1e0
[  237.707882][ T7819]  alloc_empty_file+0x55/0x1e0
[  237.707903][ T7819]  alloc_file_pseudo+0x13a/0x230
[  237.707926][ T7819]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  237.707948][ T7819]  ? do_raw_spin_unlock+0x172/0x230
[  237.707973][ T7819]  __anon_inode_getfile+0xf7/0x370
[  237.708006][ T7819]  anon_inode_getfd+0x52/0xb0
[  237.708025][ T7819]  __x64_sys_fsopen+0x18b/0x240
[  237.708048][ T7819]  do_syscall_64+0xcd/0x260
[  237.708076][ T7819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.708094][ T7819] RIP: 0033:0x7fd81eb8e969
[  237.708108][ T7819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.708125][ T7819] RSP: 002b:00007fd81f931038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  237.708144][ T7819] RAX: ffffffffffffffda RBX: 00007fd81edb5fa0 RCX: 00007fd81eb8e969
[  237.708155][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  237.708165][ T7819] RBP: 00007fd81f931090 R08: 0000000000000000 R09: 0000000000000000
[  237.708175][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.708185][ T7819] R13: 0000000000000001 R14: 00007fd81edb5fa0 R15: 00007fff4ec997d8
[  237.708208][ T7819]  </TASK>
[  238.112323][ T7831] FAULT_INJECTION: forcing a failure.
[  238.112323][ T7831] name failslab, interval 1, probability 0, space 0, times 0
[  238.125452][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.2.472 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  238.125477][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  238.125487][ T7831] Call Trace:
[  238.125493][ T7831]  <TASK>
[  238.125500][ T7831]  dump_stack_lvl+0x16c/0x1f0
[  238.125531][ T7831]  should_fail_ex+0x512/0x640
[  238.125556][ T7831]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  238.125578][ T7831]  should_failslab+0xc2/0x120
[  238.125598][ T7831]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  238.125616][ T7831]  ? __alloc_skb+0x2b2/0x380
[  238.125636][ T7831]  ? bpf_lsm_capable+0x9/0x10
[  238.125656][ T7831]  __alloc_skb+0x2b2/0x380
[  238.125675][ T7831]  ? __pfx___alloc_skb+0x10/0x10
[  238.125693][ T7831]  ? genl_rcv_msg+0x510/0x800
[  238.125717][ T7831]  ? genl_rcv_msg+0x4bb/0x800
[  238.125749][ T7831]  netlink_ack+0x15d/0xb80
[  238.125772][ T7831]  ? __lock_acquire+0xaa4/0x1ba0
[  238.125805][ T7831]  netlink_rcv_skb+0x347/0x440
[  238.125826][ T7831]  ? __pfx_genl_rcv_msg+0x10/0x10
[  238.125850][ T7831]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  238.125881][ T7831]  ? __pfx_down_read+0x10/0x10
[  238.125898][ T7831]  ? netlink_deliver_tap+0x1ae/0xd30
[  238.125923][ T7831]  genl_rcv+0x28/0x40
[  238.125944][ T7831]  netlink_unicast+0x53a/0x7f0
[  238.125969][ T7831]  ? __pfx_netlink_unicast+0x10/0x10
[  238.125999][ T7831]  netlink_sendmsg+0x8d1/0xdd0
[  238.126026][ T7831]  ? __pfx_netlink_sendmsg+0x10/0x10
[  238.126057][ T7831]  ____sys_sendmsg+0xa95/0xc70
[  238.126081][ T7831]  ? copy_msghdr_from_user+0x10a/0x160
[  238.126100][ T7831]  ? __pfx_____sys_sendmsg+0x10/0x10
[  238.126136][ T7831]  ___sys_sendmsg+0x134/0x1d0
[  238.126156][ T7831]  ? __pfx____sys_sendmsg+0x10/0x10
[  238.126210][ T7831]  __sys_sendmsg+0x16d/0x220
[  238.126238][ T7831]  ? __pfx___sys_sendmsg+0x10/0x10
[  238.126267][ T7831]  ? rcu_is_watching+0x12/0xc0
[  238.126295][ T7831]  do_syscall_64+0xcd/0x260
[  238.126322][ T7831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.126339][ T7831] RIP: 0033:0x7fd81eb8e969
[  238.126353][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.126369][ T7831] RSP: 002b:00007fd81f931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  238.126386][ T7831] RAX: ffffffffffffffda RBX: 00007fd81edb5fa0 RCX: 00007fd81eb8e969
[  238.126398][ T7831] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000003
[  238.126408][ T7831] RBP: 00007fd81f931090 R08: 0000000000000000 R09: 0000000000000000
[  238.126418][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.126428][ T7831] R13: 0000000000000000 R14: 00007fd81edb5fa0 R15: 00007fff4ec997d8
[  238.126450][ T7831]  </TASK>
[  238.450151][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  238.450167][   T30] audit: type=1400 audit(1748087820.835:1029): avc:  denied  { read } for  pid=7836 comm="syz.2.477" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  238.620545][   T30] audit: type=1400 audit(1748087820.891:1030): avc:  denied  { open } for  pid=7836 comm="syz.2.477" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  238.708568][ T5126] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  238.718435][ T5126] Bluetooth: hci3: Injecting HCI hardware error event
[  238.727958][ T5126] Bluetooth: hci3: hardware error 0x00
[  240.192906][   T30] audit: type=1400 audit(1748087820.901:1031): avc:  denied  { ioctl } for  pid=7836 comm="syz.2.477" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  240.217755][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.224125][   T30] audit: type=1400 audit(1748087820.910:1032): avc:  denied  { write } for  pid=7836 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  240.244905][   T30] audit: type=1400 audit(1748087821.181:1033): avc:  denied  { mount } for  pid=7840 comm="syz.0.478" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  240.268555][   T30] audit: type=1400 audit(1748087821.200:1034): avc:  denied  { mounton } for  pid=7840 comm="syz.0.478" path="/99/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1
[  240.290277][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.309028][   T30] audit: type=1400 audit(1748087821.294:1035): avc:  denied  { write } for  pid=7840 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  240.368105][   T30] audit: type=1400 audit(1748087821.312:1036): avc:  denied  { nlmsg_write } for  pid=7840 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  240.445836][   T30] audit: type=1400 audit(1748087822.613:1037): avc:  denied  { unmount } for  pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  240.465600][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.835092][  T973] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  241.009251][  T973] usb 3-1: config 129 has an invalid interface number: 88 but max is 0
[  241.027218][  T973] usb 3-1: config 129 has no interface number 0
[  241.047856][  T973] usb 3-1: config 129 interface 88 has no altsetting 0
[  241.063290][  T973] usb 3-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=35.7f
[  241.083002][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.145732][ T5126] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  241.331986][  T973] usb 3-1: string descriptor 0 read error: -71
[  241.345205][  T973] usb 3-1: NDI device with a latency value of 1
[  241.356615][  T973] ftdi_sio 3-1:129.88: FTDI USB Serial Device converter detected
[  241.373202][  T973] ftdi_sio ttyUSB0: unknown device type: 0x357f
[  241.381002][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.393537][  T973] usb 3-1: USB disconnect, device number 18
[  241.404687][  T973] ftdi_sio 3-1:129.88: device disconnected
[  241.479316][  T951] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  241.553730][ T5887] usb 4-1: device descriptor read/64, error -71
[  241.647555][  T951] usb 2-1: Using ep0 maxpacket: 16
[  241.654210][  T951] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  241.663053][  T951] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  241.674841][  T951] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  241.685167][  T951] usb 2-1: config 0 has no interface number 0
[  241.691530][  T951] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 3840, setting to 64
[  241.702775][  T951] usb 2-1: config 0 interface 104 has no altsetting 1
[  241.711438][  T951] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  241.721132][  T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.729607][  T951] usb 2-1: Product: syz
[  241.735412][  T951] usb 2-1: Manufacturer: syz
[  241.740202][  T951] usb 2-1: SerialNumber: syz
[  241.755417][  T951] usb 2-1: config 0 descriptor??
[  241.820655][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  241.968176][ T5887] usb 4-1: device descriptor read/64, error -71
[  241.994165][  T951] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  242.040332][  T951] asix 2-1:0.104: probe with driver asix failed with error -71
[  242.051359][   T30] audit: type=1400 audit(1748087824.193:1038): avc:  denied  { shutdown } for  pid=7909 comm="syz.2.488" lport=35350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  242.081813][ T7911] syz.2.488 uses obsolete (PF_INET,SOCK_PACKET)
[  242.095527][  T951] usb 2-1: USB disconnect, device number 9
[  242.102040][ T5887] usb usb4-port1: attempt power cycle
[  242.963880][ T7926] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[  242.994593][ T7926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.490'.
[  243.023635][ T7929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7929 comm=syz.2.490
[  243.349981][ T5864] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  243.503567][ T7953] process 'syz.1.496' launched '/dev/fd/5' with NULL argv: empty string added
[  243.519712][ T5864] usb 1-1: config index 0 descriptor too short (expected 96, got 72)
[  243.579439][ T5864] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  243.627083][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.635123][ T5864] usb 1-1: Product: syz
[  243.682467][ T5864] usb 1-1: Manufacturer: syz
[  243.700072][ T5864] usb 1-1: SerialNumber: syz
[  243.750055][ T5864] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  243.786836][  T951] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  244.288099][ T5887] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  244.383381][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  244.383396][   T30] audit: type=1400 audit(1748087826.392:1043): avc:  denied  { getopt } for  pid=7957 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  244.512578][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  244.554459][ T7970] policy can only be matched on NF_INET_PRE_ROUTING
[  244.554555][ T7970] unable to load match
[  244.720784][ T7973] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  244.732681][ T5887] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  244.742021][ T7972] IPVS: stopping master sync thread 7973 ...
[  244.751432][ T5887] usb 4-1: config 0 has no interface number 0
[  244.762330][   T30] audit: type=1400 audit(1748087826.597:1044): avc:  denied  { bind } for  pid=7966 comm="syz.5.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  245.031022][  T951] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  245.058075][  T951] ath9k_htc: Failed to initialize the device
[  245.112753][ T7931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  245.113176][   T30] audit: type=1400 audit(1748087826.597:1045): avc:  denied  { name_bind } for  pid=7966 comm="syz.5.499" src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  245.119505][ T7931] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  245.153412][ T7931] vhci_hcd vhci_hcd.0: Device attached
[  245.167461][ T5887] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  245.179410][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.199300][  T951] usb 1-1: ath9k_htc: USB layer deinitialized
[  245.239554][ T5887] usb 4-1: Product: syz
[  245.378568][ T5863] vhci_hcd: vhci_device speed not set
[  245.506845][ T5863] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  245.796382][ T5887] usb 4-1: Manufacturer: syz
[  245.796509][   T30] audit: type=1400 audit(1748087826.597:1046): avc:  denied  { node_bind } for  pid=7966 comm="syz.5.499" saddr=fc00:: src=19998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  245.833997][   T30] audit: type=1400 audit(1748087826.850:1047): avc:  denied  { open } for  pid=7930 comm="syz.0.491" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  245.900413][ T5887] usb 4-1: SerialNumber: syz
[  245.941226][ T5887] usb 4-1: config 0 descriptor??
[  245.957876][ T7971] vhci_hcd: connection reset by peer
[  245.968883][ T5887] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  246.082996][  T973] usb 1-1: USB disconnect, device number 10
[  246.099967][   T36] vhci_hcd: stop threads
[  246.120348][   T36] vhci_hcd: release socket
[  246.137013][   T36] vhci_hcd: disconnect device
[  246.162387][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.501'.
[  246.191050][ T7986] netlink: 'syz.1.501': attribute type 7 has an invalid length.
[  246.214880][ T7986] netlink: 'syz.1.501': attribute type 8 has an invalid length.
[  246.233937][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'.
[  246.253324][ T7989] tmpfs: Bad value for 'size'
[  246.271696][ T7992] xt_hashlimit: size too large, truncated to 1048576
[  246.280195][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  246.284641][ T7986] team0: entered promiscuous mode
[  246.306372][ T7986] team_slave_0: entered promiscuous mode
[  246.337472][ T7986] team_slave_1: entered promiscuous mode
[  246.341495][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  246.376621][ T7986] team0: left promiscuous mode
[  246.381611][ T7986] team_slave_0: left promiscuous mode
[  246.398100][ T8001] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[  246.411253][ T8001] netlink: 224 bytes leftover after parsing attributes in process `syz.2.503'.
[  246.449398][ T7986] team_slave_1: left promiscuous mode
[  246.485421][ T8005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8005 comm=syz.2.503
[  246.779991][ T8014] FAULT_INJECTION: forcing a failure.
[  246.779991][ T8014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.794563][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.2.504 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  246.794590][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  246.794600][ T8014] Call Trace:
[  246.794607][ T8014]  <TASK>
[  246.794614][ T8014]  dump_stack_lvl+0x16c/0x1f0
[  246.794644][ T8014]  should_fail_ex+0x512/0x640
[  246.794671][ T8014]  core_sys_select+0x9a2/0xbe0
[  246.794704][ T8014]  ? __pfx_core_sys_select+0x10/0x10
[  246.794755][ T8014]  ? set_user_sigmask+0x21b/0x2b0
[  246.794772][ T8014]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  246.794799][ T8014]  ? __pfx_set_user_sigmask+0x10/0x10
[  246.794824][ T8014]  do_pselect.constprop.0+0x19f/0x1e0
[  246.794852][ T8014]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  246.794888][ T8014]  __x64_sys_pselect6+0x182/0x240
[  246.794919][ T8014]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  246.794945][ T8014]  ? rcu_is_watching+0x12/0xc0
[  246.794971][ T8014]  do_syscall_64+0xcd/0x260
[  246.794999][ T8014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.795017][ T8014] RIP: 0033:0x7fd81eb8e969
[  246.795032][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.795049][ T8014] RSP: 002b:00007fd81f931038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  246.795065][ T8014] RAX: ffffffffffffffda RBX: 00007fd81edb5fa0 RCX: 00007fd81eb8e969
[  246.795076][ T8014] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040
[  246.795086][ T8014] RBP: 00007fd81f931090 R08: 0000000000000000 R09: 0000000000000000
[  246.795097][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.795107][ T8014] R13: 0000000000000000 R14: 00007fd81edb5fa0 R15: 00007fff4ec997d8
[  246.795130][ T8014]  </TASK>
[  247.217990][ T8022] FAULT_INJECTION: forcing a failure.
[  247.217990][ T8022] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.231290][ T8022] CPU: 0 UID: 0 PID: 8022 Comm: syz.5.505 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  247.231315][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.231326][ T8022] Call Trace:
[  247.231332][ T8022]  <TASK>
[  247.231339][ T8022]  dump_stack_lvl+0x16c/0x1f0
[  247.231373][ T8022]  should_fail_ex+0x512/0x640
[  247.231402][ T8022]  _copy_to_user+0x32/0xd0
[  247.231430][ T8022]  simple_read_from_buffer+0xcb/0x170
[  247.231459][ T8022]  proc_fail_nth_read+0x197/0x270
[  247.231488][ T8022]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  247.231516][ T8022]  ? rw_verify_area+0xcf/0x680
[  247.231539][ T8022]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  247.231566][ T8022]  vfs_read+0x1e1/0xc70
[  247.231591][ T8022]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  247.231617][ T8022]  ? __pfx___mutex_lock+0x10/0x10
[  247.231642][ T8022]  ? __pfx_vfs_read+0x10/0x10
[  247.231672][ T8022]  ? __rcu_read_unlock+0x2b4/0x580
[  247.231701][ T8022]  ? __fget_files+0x20e/0x3c0
[  247.231725][ T8022]  ksys_read+0x12a/0x240
[  247.231751][ T8022]  ? __pfx_ksys_read+0x10/0x10
[  247.231785][ T8022]  do_syscall_64+0xcd/0x260
[  247.231812][ T8022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.231830][ T8022] RIP: 0033:0x7fe23378d37c
[  247.231846][ T8022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  247.231863][ T8022] RSP: 002b:00007fe234675030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  247.231881][ T8022] RAX: ffffffffffffffda RBX: 00007fe2339b6160 RCX: 00007fe23378d37c
[  247.231892][ T8022] RDX: 000000000000000f RSI: 00007fe2346750a0 RDI: 0000000000000007
[  247.231903][ T8022] RBP: 00007fe234675090 R08: 0000000000000000 R09: 0000000000000000
[  247.231913][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.231923][ T8022] R13: 0000000000000000 R14: 00007fe2339b6160 R15: 00007ffcddfcd7e8
[  247.231953][ T8022]  </TASK>
[  247.430266][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.484295][ T8023] FAULT_INJECTION: forcing a failure.
[  247.484295][ T8023] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  247.498866][ T8023] CPU: 0 UID: 0 PID: 8023 Comm: syz.2.507 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  247.498891][ T8023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.498902][ T8023] Call Trace:
[  247.498908][ T8023]  <TASK>
[  247.498915][ T8023]  dump_stack_lvl+0x16c/0x1f0
[  247.498954][ T8023]  should_fail_ex+0x512/0x640
[  247.498983][ T8023]  _copy_from_user+0x2e/0xd0
[  247.499011][ T8023]  __sys_bpf+0x21d/0x4d80
[  247.499038][ T8023]  ? __pfx___sys_bpf+0x10/0x10
[  247.499061][ T8023]  ? ksys_write+0x190/0x240
[  247.499094][ T8023]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  247.499135][ T8023]  ? fput+0x70/0xf0
[  247.499153][ T8023]  ? ksys_write+0x1b9/0x240
[  247.499177][ T8023]  ? __pfx_ksys_write+0x10/0x10
[  247.499207][ T8023]  __x64_sys_bpf+0x78/0xc0
[  247.499229][ T8023]  ? lockdep_hardirqs_on+0x7c/0x110
[  247.499253][ T8023]  do_syscall_64+0xcd/0x260
[  247.499280][ T8023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.499298][ T8023] RIP: 0033:0x7fd81eb8e969
[  247.499312][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.499329][ T8023] RSP: 002b:00007fd81f910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  247.499345][ T8023] RAX: ffffffffffffffda RBX: 00007fd81edb6080 RCX: 00007fd81eb8e969
[  247.499356][ T8023] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000012
[  247.499367][ T8023] RBP: 00007fd81f910090 R08: 0000000000000000 R09: 0000000000000000
[  247.499377][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.499387][ T8023] R13: 0000000000000000 R14: 00007fd81edb6080 R15: 00007fff4ec997d8
[  247.499411][ T8023]  </TASK>
[  247.674952][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.895987][   T30] audit: type=1400 audit(1748087829.675:1048): avc:  denied  { ioctl } for  pid=7959 comm="syz.3.497" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  248.614787][ T8043] netlink: 132 bytes leftover after parsing attributes in process `syz.1.512'.
[  248.626174][   T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  248.635473][   T30] audit: type=1400 audit(1748087830.348:1049): avc:  denied  { connect } for  pid=8042 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  248.966464][   T30] audit: type=1400 audit(1748087830.676:1050): avc:  denied  { setopt } for  pid=8040 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  249.041409][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.063158][   T10] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  249.091716][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.111561][   T10] usb 1-1: Product: syz
[  249.115868][   T10] usb 1-1: Manufacturer: syz
[  249.128542][   T10] usb 1-1: SerialNumber: syz
[  249.154880][   T10] usb 1-1: config 0 descriptor??
[  249.184036][   T10] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  249.204375][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  249.235077][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  249.253069][   T10] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  249.274618][   T10] usb 1-1: media controller created
[  249.283074][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  249.300334][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  249.307299][   T10] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  249.338046][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  249.372505][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  249.387086][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  249.402235][  T951] usb 4-1: USB disconnect, device number 14
[  249.424884][  T951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  249.442819][ T8037] (syz.0.510,8037,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  249.470150][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  249.489694][ T8037] (syz.0.510,8037,0):ocfs2_fill_super:1177 ERROR: status = -22
[  249.502368][   T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  249.515873][  T951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  250.241722][ T5864] dvb-usb: bulk message failed: -22 (1/0)
[  250.247959][ T5864] dvb-usb: error while querying for an remote control event.
[  250.264063][  T951] quatech2 4-1:0.51: device disconnected
[  250.315714][   T30] audit: type=1400 audit(1748087831.938:1051): avc:  denied  { read } for  pid=8036 comm="syz.0.510" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  250.338827][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.421045][   T30] audit: type=1400 audit(1748087831.938:1052): avc:  denied  { open } for  pid=8036 comm="syz.0.510" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  250.445119][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.452533][ T5864] dvb-usb: bulk message failed: -22 (1/0)
[  250.480553][ T5864] dvb-usb: error while querying for an remote control event.
[  250.557460][   T30] audit: type=1400 audit(1748087832.079:1053): avc:  denied  { create } for  pid=8058 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.600435][   T30] audit: type=1400 audit(1748087832.088:1054): avc:  denied  { ioctl } for  pid=8058 comm="syz.5.515" path="socket:[15904]" dev="sockfs" ino=15904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.624964][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.633069][   T30] audit: type=1400 audit(1748087832.088:1055): avc:  denied  { bind } for  pid=8058 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.634801][  T973] usb 1-1: USB disconnect, device number 11
[  250.773980][  T973] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  250.796159][   T30] audit: type=1400 audit(1748087832.088:1056): avc:  denied  { setopt } for  pid=8058 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  250.828450][   T30] audit: type=1400 audit(1748087832.126:1057): avc:  denied  { ioctl } for  pid=8036 comm="syz.0.510" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  250.853987][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.973851][ T8067] FAULT_INJECTION: forcing a failure.
[  250.973851][ T8067] name failslab, interval 1, probability 0, space 0, times 0
[  250.989646][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.3.517 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  250.989674][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  250.989685][ T8067] Call Trace:
[  250.989690][ T8067]  <TASK>
[  250.989698][ T8067]  dump_stack_lvl+0x16c/0x1f0
[  250.989729][ T8067]  should_fail_ex+0x512/0x640
[  250.989753][ T8067]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  250.989782][ T8067]  should_failslab+0xc2/0x120
[  250.989801][ T8067]  __kmalloc_cache_noprof+0x6a/0x3e0
[  250.989827][ T8067]  ? uprobe_register+0x17c/0xb60
[  250.989853][ T8067]  uprobe_register+0x17c/0xb60
[  250.989882][ T8067]  bpf_uprobe_multi_link_attach+0x8ea/0x1070
[  250.989911][ T8067]  ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10
[  250.989930][ T8067]  ? __fget_files+0x20e/0x3c0
[  250.989951][ T8067]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  250.989976][ T8067]  __sys_bpf+0x3fb6/0x4d80
[  250.990003][ T8067]  ? __pfx___sys_bpf+0x10/0x10
[  250.990025][ T8067]  ? ksys_write+0x190/0x240
[  250.990055][ T8067]  ? __mutex_unlock_slowpath+0x161/0x6a0
[  250.990097][ T8067]  ? fput+0x70/0xf0
[  250.990116][ T8067]  ? ksys_write+0x1b9/0x240
[  250.990140][ T8067]  ? __pfx_ksys_write+0x10/0x10
[  250.990169][ T8067]  ? rcu_is_watching+0x12/0xc0
[  250.990195][ T8067]  __x64_sys_bpf+0x78/0xc0
[  250.990216][ T8067]  ? lockdep_hardirqs_on+0x7c/0x110
[  250.990239][ T8067]  do_syscall_64+0xcd/0x260
[  250.990266][ T8067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.990284][ T8067] RIP: 0033:0x7fc53dd8e969
[  250.990299][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.990319][ T8067] RSP: 002b:00007fc53ecc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  250.990335][ T8067] RAX: ffffffffffffffda RBX: 00007fc53dfb5fa0 RCX: 00007fc53dd8e969
[  250.990346][ T8067] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  250.990357][ T8067] RBP: 00007fc53ecc6090 R08: 0000000000000000 R09: 0000000000000000
[  250.990367][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.990377][ T8067] R13: 0000000000000000 R14: 00007fc53dfb5fa0 R15: 00007ffd43c21d78
[  250.990401][ T8067]  </TASK>
[  251.208293][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.312227][ T5863] vhci_hcd: vhci_device speed not set
[  251.585194][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  252.595102][   T10] usb 4-1: Using ep0 maxpacket: 32
[  252.651521][   T30] audit: type=1400 audit(1748087834.118:1058): avc:  denied  { mounton } for  pid=8078 comm="syz.1.522" path="/109/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  252.673715][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.717119][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.835196][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.991290][   T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.131369][   T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  253.331529][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  253.406455][   T30] audit: type=1400 audit(1748087834.801:1059): avc:  denied  { mount } for  pid=8088 comm="syz.0.524" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  253.431892][ T8090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  253.448632][   T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 7.00
[  253.458248][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.471685][   T30] audit: type=1326 audit(1748087834.894:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedc98e969 code=0x7ffc0000
[  253.472463][   T10] usb 4-1: config 0 descriptor??
[  253.693590][ T8096] FAULT_INJECTION: forcing a failure.
[  253.693590][ T8096] name failslab, interval 1, probability 0, space 0, times 0
[  253.719202][ T8096] CPU: 0 UID: 0 PID: 8096 Comm: syz.1.526 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  253.719232][ T8096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  253.719243][ T8096] Call Trace:
[  253.719249][ T8096]  <TASK>
[  253.719256][ T8096]  dump_stack_lvl+0x16c/0x1f0
[  253.719291][ T8096]  should_fail_ex+0x512/0x640
[  253.719315][ T8096]  ? __kvmalloc_node_noprof+0x122/0x600
[  253.719346][ T8096]  should_failslab+0xc2/0x120
[  253.719366][ T8096]  __kvmalloc_node_noprof+0x135/0x600
[  253.719395][ T8096]  ? alloc_netdev_mqs+0xd2/0x1570
[  253.719419][ T8096]  ? __pfx_vlan_setup+0x10/0x10
[  253.719438][ T8096]  ? alloc_netdev_mqs+0xd2/0x1570
[  253.719457][ T8096]  alloc_netdev_mqs+0xd2/0x1570
[  253.719484][ T8096]  rtnl_create_link+0xc10/0xfa0
[  253.719510][ T8096]  rtnl_newlink+0xb69/0x2000
[  253.719540][ T8096]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.719559][ T8096]  ? find_held_lock+0x2b/0x80
[  253.719582][ T8096]  ? avc_has_perm_noaudit+0x117/0x3b0
[  253.719607][ T8096]  ? avc_has_perm_noaudit+0x149/0x3b0
[  253.719652][ T8096]  ? find_held_lock+0x2b/0x80
[  253.719672][ T8096]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.719692][ T8096]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.719710][ T8096]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  253.719732][ T8096]  ? __pfx_rtnl_newlink+0x10/0x10
[  253.719754][ T8096]  rtnetlink_rcv_msg+0x95e/0xe90
[  253.719777][ T8096]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  253.719811][ T8096]  netlink_rcv_skb+0x16d/0x440
[  253.719834][ T8096]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  253.719855][ T8096]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  253.719898][ T8096]  ? netlink_deliver_tap+0x1ae/0xd30
[  253.719926][ T8096]  netlink_unicast+0x53a/0x7f0
[  253.719953][ T8096]  ? __pfx_netlink_unicast+0x10/0x10
[  253.719983][ T8096]  netlink_sendmsg+0x8d1/0xdd0
[  253.720010][ T8096]  ? __pfx_netlink_sendmsg+0x10/0x10
[  253.720044][ T8096]  ____sys_sendmsg+0xa95/0xc70
[  253.720071][ T8096]  ? copy_msghdr_from_user+0x10a/0x160
[  253.720092][ T8096]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.720130][ T8096]  ___sys_sendmsg+0x134/0x1d0
[  253.720151][ T8096]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.720203][ T8096]  __sys_sendmsg+0x16d/0x220
[  253.720222][ T8096]  ? __pfx___sys_sendmsg+0x10/0x10
[  253.720250][ T8096]  ? rcu_is_watching+0x12/0xc0
[  253.720278][ T8096]  do_syscall_64+0xcd/0x260
[  253.720304][ T8096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.720321][ T8096] RIP: 0033:0x7f26c458e969
[  253.720335][ T8096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.720352][ T8096] RSP: 002b:00007f26c53f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.720370][ T8096] RAX: ffffffffffffffda RBX: 00007f26c47b5fa0 RCX: 00007f26c458e969
[  253.720381][ T8096] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  253.720391][ T8096] RBP: 00007f26c53f6090 R08: 0000000000000000 R09: 0000000000000000
[  253.720401][ T8096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.720410][ T8096] R13: 0000000000000000 R14: 00007f26c47b5fa0 R15: 00007ffc1f761288
[  253.720435][ T8096]  </TASK>
[  254.332766][   T10] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  254.354746][   T10] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  254.513460][ T5816] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  254.650345][   T10] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  254.671387][   T10] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  254.683370][   T10] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0
[  254.704664][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  254.711594][   T10] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  254.748745][   T10] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints?
[  254.765601][    C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71
[  254.786083][   T10] usb 4-1: USB disconnect, device number 15
[  254.882469][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  254.910620][ T8106] fido_id[8106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  254.926415][ T5816] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  254.935486][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.946570][ T5816] usb 2-1: Product: syz
[  254.950769][ T5816] usb 2-1: Manufacturer: syz
[  254.978731][ T5816] usb 2-1: SerialNumber: syz
[  255.253681][ T5816] usb 2-1: config 0 descriptor??
[  255.887399][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  256.402008][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.415420][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.433051][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.445195][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.483979][   T10] usb 6-1: SerialNumber: syz
[  256.601285][ T8125] FAULT_INJECTION: forcing a failure.
[  256.601285][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.615004][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.3.535 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  256.615031][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  256.615042][ T8125] Call Trace:
[  256.615048][ T8125]  <TASK>
[  256.615055][ T8125]  dump_stack_lvl+0x16c/0x1f0
[  256.615090][ T8125]  should_fail_ex+0x512/0x640
[  256.615118][ T8125]  core_sys_select+0x9a2/0xbe0
[  256.615152][ T8125]  ? __pfx_core_sys_select+0x10/0x10
[  256.615205][ T8125]  ? set_user_sigmask+0x21b/0x2b0
[  256.615227][ T8125]  ? __pfx_set_user_sigmask+0x10/0x10
[  256.615252][ T8125]  do_pselect.constprop.0+0x19f/0x1e0
[  256.615280][ T8125]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  256.615318][ T8125]  __x64_sys_pselect6+0x182/0x240
[  256.615347][ T8125]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  256.615373][ T8125]  ? rcu_is_watching+0x12/0xc0
[  256.615401][ T8125]  do_syscall_64+0xcd/0x260
[  256.615429][ T8125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.615448][ T8125] RIP: 0033:0x7fc53dd8e969
[  256.615462][ T8125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.615480][ T8125] RSP: 002b:00007fc53ecc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  256.615497][ T8125] RAX: ffffffffffffffda RBX: 00007fc53dfb5fa0 RCX: 00007fc53dd8e969
[  256.615509][ T8125] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040
[  256.615520][ T8125] RBP: 00007fc53ecc6090 R08: 0000000000000000 R09: 0000000000000000
[  256.615530][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.615539][ T8125] R13: 0000000000000000 R14: 00007fc53dfb5fa0 R15: 00007ffd43c21d78
[  256.615562][ T8125]  </TASK>
[  256.783244][ T8126] netlink: 248 bytes leftover after parsing attributes in process `syz.5.530'.
[  257.400050][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  257.400067][   T30] audit: type=1400 audit(1748087838.570:1121): avc:  denied  { write } for  pid=8128 comm="syz.3.536" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  257.444808][   T30] audit: type=1400 audit(1748087838.608:1122): avc:  denied  { getopt } for  pid=8128 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  257.924768][   T30] audit: type=1400 audit(1748087838.870:1123): avc:  denied  { create } for  pid=8137 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  258.328723][   T30] audit: type=1400 audit(1748087838.879:1124): avc:  denied  { connect } for  pid=8137 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  258.348613][   T30] audit: type=1400 audit(1748087839.141:1125): avc:  denied  { read } for  pid=8137 comm="syz.2.539" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  258.372003][   T30] audit: type=1400 audit(1748087839.141:1126): avc:  denied  { open } for  pid=8137 comm="syz.2.539" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  258.414573][   T30] audit: type=1400 audit(1748087839.150:1127): avc:  denied  { ioctl } for  pid=8137 comm="syz.2.539" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  258.482505][   T30] audit: type=1400 audit(1748087839.188:1128): avc:  denied  { ioctl } for  pid=8137 comm="syz.2.539" path="socket:[15355]" dev="sockfs" ino=15355 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  258.574392][   T30] audit: type=1400 audit(1748087839.609:1129): avc:  denied  { setopt } for  pid=8145 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  258.833870][ T8154] fuse: Bad value for 'user_id'
[  258.907818][ T8154] fuse: Bad value for 'user_id'
[  259.287313][   T30] audit: type=1400 audit(1748087840.254:1130): avc:  denied  { mount } for  pid=8153 comm="syz.2.542" name="/" dev="autofs" ino=16393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  259.534305][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  259.571208][   T10] usb 6-1: 0:2 : does not exist
[  259.608973][   T10] usb 6-1: USB disconnect, device number 3
[  259.626584][ T5816] usb 2-1: USB disconnect, device number 10
[  259.714787][   T24] usb 1-1: Using ep0 maxpacket: 16
[  259.864236][ T5864] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  260.233948][   T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  260.271624][   T24] usb 1-1: config 0 has no interface number 0
[  260.295658][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  260.327591][   T24] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  260.340022][   T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  260.346524][ T5864] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.356046][   T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  260.385036][   T24] usb 1-1: Product: syz
[  260.388006][ T5864] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  260.394218][   T24] usb 1-1: SerialNumber: syz
[  260.407518][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.434534][   T24] usb 1-1: config 0 descriptor??
[  260.436984][ T5864] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40
[  260.582238][ T8178] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.535076][   T24] cm109 1-1:0.8: invalid payload size 0, expected 4
[  261.545945][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  261.563020][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.571124][ T5864] usb 3-1: Product: syz
[  261.575687][ T5864] usb 3-1: Manufacturer: syz
[  261.581307][ T5864] usb 3-1: SerialNumber: syz
[  261.612908][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15
[  261.906435][ T8165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  262.145461][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  262.671540][ T8165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  262.814899][ T5863] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  262.935588][ T5864] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  262.942268][ T5864] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  263.037122][ T5864] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  263.086646][   T10] usb 1-1: USB disconnect, device number 12
[  263.099452][   T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  263.128829][ T5863] usb 2-1: not running at top speed; connect to a high speed hub
[  263.142381][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0
[  263.152035][ T5863] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.40
[  263.161491][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.169572][ T5863] usb 2-1: Product: syz
[  263.173873][ T5863] usb 2-1: Manufacturer: syz
[  263.178561][ T5863] usb 2-1: SerialNumber: syz
[  263.351338][ T5864] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  263.401141][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  263.401157][   T30] audit: type=1400 audit(1748087844.173:1135): avc:  denied  { read } for  pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  263.565697][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  263.724527][   T10] usb 3-1: USB disconnect, device number 19
[  263.737042][   T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  263.747589][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.823215][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  263.848558][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.886563][   T24] usb 6-1: config 0 descriptor??
[  263.921347][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  264.354689][ T5887] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  264.386051][ T8227] FAULT_INJECTION: forcing a failure.
[  264.386051][ T8227] name failslab, interval 1, probability 0, space 0, times 0
[  264.399746][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.3.559 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  264.399769][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  264.399777][ T8227] Call Trace:
[  264.399783][ T8227]  <TASK>
[  264.399788][ T8227]  dump_stack_lvl+0x16c/0x1f0
[  264.399814][ T8227]  should_fail_ex+0x512/0x640
[  264.399837][ T8227]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  264.399856][ T8227]  should_failslab+0xc2/0x120
[  264.399872][ T8227]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  264.399886][ T8227]  ? __alloc_skb+0x2b2/0x380
[  264.399911][ T8227]  __alloc_skb+0x2b2/0x380
[  264.399925][ T8227]  ? __pfx___alloc_skb+0x10/0x10
[  264.399940][ T8227]  ? __mutex_trylock_common+0xd0/0x250
[  264.399965][ T8227]  ? __pfx___mutex_trylock_common+0x10/0x10
[  264.399993][ T8227]  netlink_dump+0x698/0xd00
[  264.400012][ T8227]  ? __mutex_lock+0x1ca/0xb90
[  264.400033][ T8227]  ? __pfx_netlink_dump+0x10/0x10
[  264.400050][ T8227]  ? __rhashtable_lookup.constprop.0+0x3a5/0x760
[  264.400067][ T8227]  ? __netlink_dump_start+0x150/0x990
[  264.400092][ T8227]  ? netlink_lookup+0x258/0x520
[  264.400108][ T8227]  ? __pfx_netlink_lookup+0x10/0x10
[  264.400126][ T8227]  ? __mutex_trylock_common+0xe9/0x250
[  264.400154][ T8227]  __netlink_dump_start+0x6d6/0x990
[  264.400175][ T8227]  ctnetlink_get_conntrack+0x608/0x7d0
[  264.400196][ T8227]  ? __pfx_ctnetlink_get_conntrack+0x10/0x10
[  264.400216][ T8227]  ? __pfx_ctnetlink_start+0x10/0x10
[  264.400232][ T8227]  ? __pfx_ctnetlink_dump_table+0x10/0x10
[  264.400249][ T8227]  ? __pfx_ctnetlink_done+0x10/0x10
[  264.400274][ T8227]  ? find_held_lock+0x2b/0x80
[  264.400297][ T8227]  nfnetlink_rcv_msg+0x9fc/0x1200
[  264.400325][ T8227]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  264.400343][ T8227]  ? kmem_cache_free+0x2d4/0x4d0
[  264.400386][ T8227]  ? avc_has_perm_noaudit+0x117/0x3b0
[  264.400411][ T8227]  netlink_rcv_skb+0x16d/0x440
[  264.400430][ T8227]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  264.400452][ T8227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.400480][ T8227]  ? bpf_lsm_capable+0x9/0x10
[  264.400493][ T8227]  ? security_capable+0x7e/0x260
[  264.400512][ T8227]  ? ns_capable+0xd7/0x110
[  264.400532][ T8227]  nfnetlink_rcv+0x1b3/0x430
[  264.400553][ T8227]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  264.400574][ T8227]  ? netlink_deliver_tap+0x1ae/0xd30
[  264.400595][ T8227]  netlink_unicast+0x53a/0x7f0
[  264.400615][ T8227]  ? __pfx_netlink_unicast+0x10/0x10
[  264.400639][ T8227]  netlink_sendmsg+0x8d1/0xdd0
[  264.400675][ T8227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.400704][ T8227]  ____sys_sendmsg+0xa95/0xc70
[  264.400726][ T8227]  ? copy_msghdr_from_user+0x10a/0x160
[  264.400742][ T8227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.400771][ T8227]  ___sys_sendmsg+0x134/0x1d0
[  264.400789][ T8227]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.400831][ T8227]  __sys_sendmsg+0x16d/0x220
[  264.400850][ T8227]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.400873][ T8227]  ? rcu_is_watching+0x12/0xc0
[  264.400901][ T8227]  do_syscall_64+0xcd/0x260
[  264.400924][ T8227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.400938][ T8227] RIP: 0033:0x7fc53dd8e969
[  264.400950][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.400964][ T8227] RSP: 002b:00007fc53ecc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.400979][ T8227] RAX: ffffffffffffffda RBX: 00007fc53dfb5fa0 RCX: 00007fc53dd8e969
[  264.400990][ T8227] RDX: 0000000000008800 RSI: 0000200000000400 RDI: 0000000000000003
[  264.400999][ T8227] RBP: 00007fc53ecc6090 R08: 0000000000000000 R09: 0000000000000000
[  264.401008][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.401016][ T8227] R13: 0000000000000000 R14: 00007fc53dfb5fa0 R15: 00007ffd43c21d78
[  264.401036][ T8227]  </TASK>
[  264.775105][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.039886][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'.
[  265.085518][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  265.831074][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  265.982913][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  266.045164][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  266.125851][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.147708][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short
[  266.150993][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.228858][ T5887] usb 1-1: unable to read config index 0 descriptor/start: -71
[  266.236657][ T5863] usbhid 2-1:1.0: can't add hid device: -71
[  266.242651][ T5863] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  266.252071][ T5887] usb 1-1: can't read configurations, error -71
[  266.258840][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'.
[  266.273431][ T5863] usb 2-1: USB disconnect, device number 11
[  266.299740][ T8238] nbd: device at index 64 is going down
[  267.174697][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  267.205140][ T5126] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  267.261638][   T30] audit: type=1400 audit(1748087847.737:1136): avc:  denied  { create } for  pid=8255 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  267.395380][   T30] audit: type=1326 audit(1748087847.915:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  267.535619][   T24] pwc: recv_control_msg error -71 req 02 val 2000
[  267.673383][   T30] audit: type=1326 audit(1748087847.915:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  267.701448][   T24] pwc: recv_control_msg error -71 req 02 val 2100
[  267.713958][   T30] audit: type=1326 audit(1748087847.953:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  267.739064][   T24] pwc: recv_control_msg error -71 req 04 val 1500
[  267.767732][ T7363] udevd[7363]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  267.782534][   T24] pwc: recv_control_msg error -71 req 02 val 2500
[  267.810944][   T24] pwc: recv_control_msg error -71 req 02 val 2400
[  267.829310][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  267.845731][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  267.851184][   T30] audit: type=1326 audit(1748087847.953:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  267.884896][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  267.908995][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  267.933711][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  267.941145][   T30] audit: type=1326 audit(1748087847.953:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  267.948742][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  268.006371][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  268.069158][   T24] pwc: Registered as video103.
[  268.078498][   T30] audit: type=1326 audit(1748087847.953:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  268.102093][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  268.138897][   T24] usb 6-1: USB disconnect, device number 4
[  268.254570][ T8286] sctp: [Deprecated]: syz.0.570 (pid 8286) Use of int in max_burst socket option deprecated.
[  268.254570][ T8286] Use struct sctp_assoc_value instead
[  268.299159][   T30] audit: type=1326 audit(1748087847.953:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  268.394484][   T30] audit: type=1326 audit(1748087847.953:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc53dd8e969 code=0x7ffc0000
[  269.645590][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  269.654214][   T30] audit: type=1400 audit(1748087849.926:1163): avc:  denied  { bind } for  pid=8287 comm="syz.5.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  269.687985][ T8295] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.801170][   T30] audit: type=1400 audit(1748087850.029:1164): avc:  denied  { set_context_mgr } for  pid=8297 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  269.905054][ T8306] binder: 8297:8306 ioctl c0306201 200000000540 returned -22
[  270.483738][ T8308] x_tables: duplicate underflow at hook 3
[  270.491683][   T30] audit: type=1400 audit(1748087850.805:1165): avc:  denied  { connect } for  pid=8307 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  270.512471][ T8310] binfmt_misc: Unknown parameter '&'
[  270.546626][   T30] audit: type=1400 audit(1748087850.834:1166): avc:  denied  { write } for  pid=8307 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  271.950394][ T8326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.579'.
[  271.961127][ T8325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.579'.
[  271.984290][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'.
[  272.264374][ T8329] Lens B: =================  START STATUS  =================
[  272.271940][ T8329] Lens B: Focus, Absolute: 0
[  272.277126][ T8329] Lens B: ==================  END STATUS  ==================
[  272.366706][ T8330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  326.345115][ T5555] sched: DL replenish lagged too much
[  339.160438][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  385.457486][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  385.464465][    C1] rcu: 	0-...!: (0 ticks this GP) idle=0bf4/1/0x4000000000000000 softirq=33348/33348 fqs=0
[  385.475170][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=23113, q=308 ncpus=2)
[  385.482894][    C1] Sending NMI from CPU 1 to CPUs 0:
[  385.482922][    C0] NMI backtrace for cpu 0
[  385.482938][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) 
[  385.482954][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  385.482965][    C0] Workqueue: bat_events batadv_nc_worker
[  385.482988][    C0] RIP: 0010:advance_sched+0x5e7/0xc80
[  385.483010][    C0] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 85 05 00 00 48 8b 44 24 18 48 8b 74 24 20 48 8b 7c 24 48 <4c> 89 a0 50 01 00 00 48 89 c2 e8 8a 3d ff ff e8 35 50 39 f8 48 b8
[  385.483023][    C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00000046
[  385.483034][    C0] RAX: ffff888029f57c00 RBX: ffff888026dba340 RCX: ffffffff8981f39c
[  385.483043][    C0] RDX: 1ffff110053eafaa RSI: ffff888029f54400 RDI: ffff888026dba2c0
[  385.483052][    C0] RBP: ffff888029f54400 R08: 0000000000000004 R09: 0000000000000002
[  385.483060][    C0] R10: 0000000000000002 R11: 0000000000000000 R12: 1856e51e89b9461d
[  385.483068][    C0] R13: 1856e51e89b9461d R14: 0000000000000002 R15: ffff888029f57c10
[  385.483077][    C0] FS:  0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000
[  385.483091][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  385.483100][    C0] CR2: 00007fdeae5238ed CR3: 000000003456a000 CR4: 00000000003526f0
[  385.483108][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  385.483116][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  385.483124][    C0] Call Trace:
[  385.483130][    C0]  <IRQ>
[  385.483141][    C0]  ? __pfx_advance_sched+0x10/0x10
[  385.483159][    C0]  __hrtimer_run_queues+0x202/0xad0
[  385.483177][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  385.483191][    C0]  ? read_tsc+0x9/0x20
[  385.483212][    C0]  hrtimer_interrupt+0x397/0x8e0
[  385.483231][    C0]  __sysvec_apic_timer_interrupt+0x108/0x3f0
[  385.483248][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  385.483266][    C0]  </IRQ>
[  385.483270][    C0]  <TASK>
[  385.483275][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  385.483290][    C0] RIP: 0010:do_raw_spin_lock+0x13d/0x2b0
[  385.483305][    C0] Code: 28 00 00 00 00 e8 b3 5d 88 00 be 04 00 00 00 48 8d 7c 24 28 e8 a4 5d 88 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 94 00 00 00 65 44 8b 35 c9 ef 0b 12 48 b8 00 00 00 00 00 fc
[  385.483323][    C0] RSP: 0018:ffffc90000127a20 EFLAGS: 00000246
[  385.483333][    C0] RAX: 0000000000000000 RBX: ffff88805c0a0f40 RCX: ffffffff8198704c
[  385.483341][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000127a48
[  385.483349][    C0] RBP: 1ffff92000024f45 R08: 0000000000000001 R09: fffff52000024f49
[  385.483358][    C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805c0a0f48
[  385.483366][    C0] R13: ffff88805c0a0f50 R14: ffff88805c088d80 R15: ffff88805c7179e8
[  385.483377][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  385.483394][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  385.483408][    C0]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  385.483425][    C0]  ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10
[  385.483442][    C0]  batadv_nc_purge_paths+0xd9/0x3a0
[  385.483460][    C0]  batadv_nc_worker+0x921/0x1030
[  385.483477][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  385.483495][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  385.483514][    C0]  ? rcu_is_watching+0x12/0xc0
[  385.483531][    C0]  process_one_work+0x9cf/0x1b70
[  385.483549][    C0]  ? __pfx_batadv_nc_worker+0x10/0x10
[  385.483564][    C0]  ? __pfx_process_one_work+0x10/0x10
[  385.483581][    C0]  ? assign_work+0x1a0/0x250
[  385.483595][    C0]  worker_thread+0x6c8/0xf10
[  385.483614][    C0]  ? __pfx_worker_thread+0x10/0x10
[  385.483627][    C0]  kthread+0x3c2/0x780
[  385.483640][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483650][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483662][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483673][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483685][    C0]  ? rcu_is_watching+0x12/0xc0
[  385.483699][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483712][    C0]  ret_from_fork+0x45/0x80
[  385.483724][    C0]  ? __pfx_kthread+0x10/0x10
[  385.483736][    C0]  ret_from_fork_asm+0x1a/0x30
[  385.483760][    C0]  </TASK>
[  385.483915][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g23113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  385.896819][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=15648
[  385.904701][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g23113 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  385.916061][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  385.926025][    C1] rcu: RCU grace-period kthread stack dump:
[  385.931902][    C1] task:rcu_preempt     state:I stack:27704 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  385.943823][    C1] Call Trace:
[  385.947098][    C1]  <TASK>
[  385.950030][    C1]  __schedule+0x116f/0x5de0
[  385.954550][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  385.959501][    C1]  ? __pfx___schedule+0x10/0x10
[  385.964360][    C1]  ? find_held_lock+0x2b/0x80
[  385.969039][    C1]  ? schedule+0x2d7/0x3a0
[  385.973375][    C1]  schedule+0xe7/0x3a0
[  385.977447][    C1]  schedule_timeout+0x123/0x290
[  385.982298][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  385.987671][    C1]  ? __pfx_process_timeout+0x10/0x10
[  385.992960][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  385.998767][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  386.004237][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  386.009011][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  386.014301][    C1]  ? rcu_gp_init+0xc76/0x15a0
[  386.018988][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  386.023857][    C1]  rcu_gp_kthread+0x270/0x380
[  386.028539][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  386.033742][    C1]  ? rcu_is_watching+0x12/0xc0
[  386.038511][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  386.043716][    C1]  ? __kthread_parkme+0x19e/0x250
[  386.048747][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  386.053951][    C1]  kthread+0x3c2/0x780
[  386.058019][    C1]  ? __pfx_kthread+0x10/0x10
[  386.062605][    C1]  ? __pfx_kthread+0x10/0x10
[  386.067195][    C1]  ? __pfx_kthread+0x10/0x10
[  386.071780][    C1]  ? __pfx_kthread+0x10/0x10
[  386.076368][    C1]  ? rcu_is_watching+0x12/0xc0
[  386.081148][    C1]  ? __pfx_kthread+0x10/0x10
[  386.085767][    C1]  ret_from_fork+0x45/0x80
[  386.090194][    C1]  ? __pfx_kthread+0x10/0x10
[  386.094786][    C1]  ret_from_fork_asm+0x1a/0x30
[  386.099571][    C1]  </TASK>