last executing test programs:

10m44.236732852s ago: executing program 0 (id=1206):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
dup3(r1, r0, 0x80000)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

10m44.150448786s ago: executing program 0 (id=1207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0xa2082, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

10m43.163713471s ago: executing program 0 (id=1210):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x802)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={<r2=>0x0, "5e1ffafd1902936cb80b8a933fad23f1"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001440)={r2, 0x6, 0x0, [0xe1f, 0x4, 0x101, 0x5, 0xfffffffffffffffa], [0x9, 0x4, 0x1, 0x1, 0x2, 0x0, 0x8, 0x4bc7df7a, 0x6, 0x7, 0xfffffffffffffffe, 0x1, 0xe, 0x0, 0xd, 0x1, 0x1, 0x9, 0xd0, 0xfffffffffffffc00, 0xffffffffffffffff, 0x0, 0x7, 0x8, 0x7f, 0x9, 0x6000000000000000, 0x2b, 0x7, 0x8000000000000001, 0x59e492b4, 0x7, 0x2, 0x7, 0x4, 0xfff, 0x4, 0x1, 0xf, 0x9, 0x0, 0x200, 0x8, 0x5, 0x4, 0x7b5, 0x10, 0x2, 0x8, 0xc, 0x0, 0x3ff, 0x8, 0xd, 0x101, 0x9, 0x5, 0x10000, 0x1, 0x7, 0xadf, 0x80, 0x6c, 0x8, 0x5, 0xd, 0xa19, 0x2, 0xffffffffffffffff, 0x4, 0x8, 0x2, 0x7, 0x2, 0x9, 0x822, 0x3, 0x5, 0x7fffffff, 0xffffffffffffffff, 0xa, 0x7, 0x2, 0x200, 0x1, 0x3, 0xfad9, 0x9, 0x7043cb6b, 0x972, 0x5, 0x0, 0xcd, 0x7, 0x7, 0x800, 0xf9, 0x239, 0x1, 0x6, 0x4, 0x300000, 0x0, 0x7, 0x8, 0x8, 0xee47, 0x7, 0xfffffffffffffff7, 0x40, 0xfffffffffffffff9, 0x7, 0x0, 0x4, 0x8, 0x8, 0x866d, 0x7fffffff, 0x8, 0x3]})
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000280)="80b0f277e4b5f3bbedffa7c7094d4be2eb1fb452b5826728d219bee9dc797407e46c18873c2fd26b7b2b1040bc1b4bbefc085e4dd3e2a6ef1afd6541c707cc15ae45487bb874a7c017bb2fa4a892b88c86bcfbd5bb1e4ebe0f35ba4cb3ffc316d551bbd1fc6d320c946b37b2e94484b13eadd7008fd5df11a9285a025ff90b0cbe86a50a6867af53bcbcf2a8e0c754b06b365222652793a9b6dd41b66a7a95722aaade8dbbe7d9dc569b6c109f9671bb0b9483186f5fa03ea8ffafe5dbb6d87cb526511e47910a643a12ef5f34e1d4b06d737c9607", &(0x7f0000000080)=@udp=r8, 0x1}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r7, 0x9}}, 0x10)
close(r6)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000003c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x3f, 0x24, 0x67, 0x0, 0x7f, 0x21, 0x0, @empty, @remote}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, "c9b20f", 0xb8}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r11 = dup(r10)
ioctl$BLKGETSIZE64(r11, 0x80081272, &(0x7f0000000580))
fchdir(r3)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f00000001c0))
write$binfmt_aout(r0, 0x0, 0xfdef)

10m42.981326082s ago: executing program 0 (id=1212):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pI4   \x00'}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x597dae12}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000084)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b347d4211a17c1d89ee99b6f73ac", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0xf5, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402030101040307b79c5f081d38c3b54f63f7bf00ff070c2402060002050502"], 0x0)
r6 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe80000000fb60be2f000000000000bbfe800000000000000000664f000000aa00004e22e7d3313173ae30f5a1708ba7d760", @ANYBLOB], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="2b29daff628e813bbd160b1377bad07f2dcee98e25", 0x15}, 0x1, 0x0, 0x0, 0x800}, 0x40000084)

10m40.83161498s ago: executing program 0 (id=1220):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0xa2082, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

10m38.252292133s ago: executing program 0 (id=1230):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @dead_binder_done, @increfs_done={0x40106308, 0x2}, @exit_looper], 0xa, 0x0, &(0x7f0000000380)="dcd63d23e5e310f30f10"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0xd)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003280)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000031c0)=ANY=[@ANYRES32, @ANYBLOB="31f82661"], 0x1000f)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a00000001891d1d182602120001000000000104000000bee4f9007bfcf91d54eef3248b119718fba688dc46831330554448b3bd728231eb09a33c87eff39559e60cff58e2828a88603631382a8c2a95f5b272ba246b716224e0e222e82eac6f1d7eee2c7664c5e20b6bbd5dd09454e2e6154ebf5bc030def1ba9b6d6c4e518e1cf41b162326e993098d938550e70d4232a8c09fc08c9e0473c48e7aad2b6e337c2a881966dbeca201c4b2e729736ea04b6e1bbc9b9b7a3c707b06"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)

10m37.953863301s ago: executing program 32 (id=1230):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x84, 0x0, &(0x7f00000002c0)=[@exit_looper, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @dead_binder_done, @increfs_done={0x40106308, 0x2}, @exit_looper], 0xa, 0x0, &(0x7f0000000380)="dcd63d23e5e310f30f10"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0xd)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003280)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000031c0)=ANY=[@ANYRES32, @ANYBLOB="31f82661"], 0x1000f)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100004107f540f30c75939e1a00000001891d1d182602120001000000000104000000bee4f9007bfcf91d54eef3248b119718fba688dc46831330554448b3bd728231eb09a33c87eff39559e60cff58e2828a88603631382a8c2a95f5b272ba246b716224e0e222e82eac6f1d7eee2c7664c5e20b6bbd5dd09454e2e6154ebf5bc030def1ba9b6d6c4e518e1cf41b162326e993098d938550e70d4232a8c09fc08c9e0473c48e7aad2b6e337c2a881966dbeca201c4b2e729736ea04b6e1bbc9b9b7a3c707b06"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)

3m46.52526575s ago: executing program 1 (id=2564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff84}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0)

3m46.272649523s ago: executing program 1 (id=2568):
pipe(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2001, 0x130)
accept4(r2, 0x0, 0x0, 0x80800)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x1, [<r6=>0x0], [], [], [0x0, 0x100000000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7})

3m44.489892524s ago: executing program 1 (id=2572):
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)

3m42.853886382s ago: executing program 1 (id=2577):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = gettid()
sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000180)=""/11)
prctl$PR_MCE_KILL(0x21, 0x0, 0x3)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0)
syz_open_dev$video4linux(&(0x7f0000000140), 0xff, 0x20000)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x34, 0x0, @void}, 0x10)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40000000000800, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x8, 0x1, 0x1})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381)
ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = io_uring_setup(0x2675, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_FILES2(r6, 0xf, &(0x7f0000000040)={0x46, 0x1, 0x0, 0x0, 0x0}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)

3m41.804389667s ago: executing program 1 (id=2581):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = memfd_create(&(0x7f0000000080)='}\xa4-}3q\xe4\x83a\x0f\xa4\x18d{\x00', 0x3)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'sit0\x00', 0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000081000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2, @ANYRES64=r6], 0x48)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r8}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r7, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r8}, 0x20)
r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)=0x7)
r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r12 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={<r13=>0x0, 0x9}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r13, 0x3}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r11, 0x80184153, &(0x7f0000000780)={0x0, 0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1014, &(0x7f00000026c0)=""/4116}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r14, 0x27, 0x46, 0x0, &(0x7f0000000240)="f897adf9fffcd92f4c931e8188a822612cdd3ec20556597ba0310a59bb9ac294cfd4cf781ce12e439d7638aacb34b697bf863d675bf01ddbadc9968c28e17fca09137551cb83", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x6, 0x6, "83d31e", 0x0, 0x84, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}}}}}}, 0x42)

3m41.000638028s ago: executing program 1 (id=2587):
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)

3m25.537449578s ago: executing program 33 (id=2587):
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0)

12.938576843s ago: executing program 3 (id=3317):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
getdents(r0, &(0x7f0000002f40)=""/4096, 0x1000)
r2 = syz_clone(0x94c000, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)="46628d232b42261787a725b5f96f42")
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000100)={0x1, 0x8, 0x10, 0xffffffff, 0xffffffff, 0x2, 0x4, 0x9, 0x102, 0x101, 0xffffffff, 0x7, 0x0, 0x0, 0x0})

11.681597026s ago: executing program 3 (id=3322):
msgget$private(0x0, 0x210)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4004040)
socket(0x28, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a)

10.224498855s ago: executing program 6 (id=3329):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9.936589904s ago: executing program 3 (id=3330):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000000)={0x8248851b466bc885, 0x17, 0x6, "da441b5bdf3e"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x10000008)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x34, r4, 0x1, 0x50bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

9.459959371s ago: executing program 4 (id=3332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = memfd_secret(0x0)
recvmsg$inet_nvme(r1, &(0x7f0000001400)={&(0x7f0000001080)=@generic, 0x80, &(0x7f0000001340)=[{&(0x7f0000001100)=""/39, 0x27}, {&(0x7f0000001140)=""/153, 0x99}, {&(0x7f0000001200)=""/188, 0xbc}, {&(0x7f00000012c0)=""/65, 0x41}], 0x4, &(0x7f0000001380)=""/80, 0x50}, 0x20)
ftruncate(r1, 0x51a9497)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x7ff, 0x0, 0xfffffffffffffffe, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x801, 0x0, 0x0, 0x1000000, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x20, 0x8000, 0x81, 0x400, {{0xc, 0x4, 0x3, 0x39, 0x30, 0x68, 0x0, 0x78, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0x1b, 0x6d, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @empty]}]}}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = dup(r0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000001480)={0x3, 0xdf87, 0x9, 0x3, '\x00', '\x00', '\x00', 0x9, 0x10000, 0x1, 0x8, "83f1a769c757fd186c5dc7a45ac12a21"})
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000a40)={<r7=>0x0, 0x4}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000ac0)={r7, 0x3}, &(0x7f0000000b00)=0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r3], 0x68}}, 0x0)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'gretap0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newtfilter={0x4c0, 0x2c, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0xfff2}, {0xb, 0xfff3}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x70a}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x46c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_POLICE={0x460, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x72d2, 0x5, 0x40, 0x3, 0x3, {0x2, 0x0, 0x100, 0xfffa, 0x8, 0x4c80}, {0x7, 0x0, 0x200, 0x9, 0x0, 0x5}, 0xfff, 0xd, 0x7fffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0xfffffff9, 0x7fff, 0x1, 0x9, 0x9, 0x4, 0x80, 0x3, 0x6, 0x9, 0x3, 0xff, 0x5, 0x7b, 0x2, 0x2, 0x6, 0x2, 0x7, 0x2f, 0x5, 0x4, 0x1ff, 0x4, 0x7, 0x3, 0x3bcc, 0x1, 0x47ae, 0x400, 0x3ff, 0x9, 0xfff, 0x0, 0x20000000, 0x5, 0x80000000, 0x4f, 0x4, 0x101, 0x8, 0x3, 0x1, 0xfffffff8, 0x1, 0x40, 0x401, 0x5755e85b, 0xfffffffe, 0x19bf, 0x1, 0x401, 0x4, 0x5, 0x0, 0x3, 0x9, 0x8, 0xffff, 0x0, 0x8722, 0xb, 0xb5aa, 0x9, 0x8000, 0x800, 0xe6b8, 0x1cb3, 0x2, 0xaed5, 0x3, 0x3, 0x401, 0x5, 0x5, 0x6, 0x0, 0x527943c, 0x4, 0x0, 0x1ffc, 0x3ff, 0x80, 0x5, 0x1, 0x3, 0x200, 0x9, 0xffffff01, 0x5, 0x375, 0x2, 0x1, 0x3, 0x8, 0xfffffff1, 0x4, 0x3b, 0xffffff7d, 0x400, 0xfffffffe, 0x7, 0xffffffff, 0x6, 0x29acd749, 0x6, 0x21a, 0xc, 0x3daa, 0x1, 0x6, 0x5, 0x7d, 0xd, 0x532, 0xe6, 0xa116, 0x5, 0x0, 0xffff, 0x4, 0xe, 0xd, 0x5, 0x3, 0xffff, 0x9, 0x400, 0xdc, 0xc, 0x4, 0x7fff, 0xfffffff8, 0x4, 0x7, 0x6, 0xc0, 0x2, 0xb, 0x2, 0xa4, 0x9, 0x9, 0xffc, 0xb, 0x7, 0xa00, 0x8fca, 0x7, 0x9, 0x2, 0x9, 0xfffffff9, 0x1ff00000, 0x4, 0x5, 0x0, 0xa9, 0x5, 0xf31, 0x94, 0x5, 0x7fc, 0x776, 0x3, 0x0, 0x5d, 0x7, 0x6, 0x0, 0x7fff, 0x9, 0x8, 0x9, 0x3, 0x0, 0x1ff, 0x72e4, 0xb, 0x8, 0xffffc419, 0x10001, 0x8, 0x6, 0x9, 0x3, 0x3, 0xe, 0x11f, 0x1, 0x7f, 0x3, 0x1, 0x9, 0x74a, 0x73b, 0x7, 0xfffffff7, 0xfffff801, 0x800, 0x3, 0x0, 0x0, 0x9, 0x1, 0x2ae, 0x7, 0x3, 0x1196, 0x6, 0x8, 0xe, 0xfffff8e3, 0x7, 0xfffffff0, 0x9, 0x80000000, 0x9, 0x3, 0x9, 0x0, 0x3, 0x6, 0x8, 0xec2, 0xf, 0x3, 0x5, 0x9, 0x4, 0x7, 0x2, 0x200, 0x80000001, 0xffff7fff, 0x6, 0x3e22, 0x0, 0xff, 0x10, 0x96, 0x7, 0x9, 0x7ff, 0x5, 0x1ff, 0x9, 0x80, 0x0, 0x7, 0x1, 0xf158, 0x5, 0xf56, 0xfca2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7d}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4001)
mq_open(&(0x7f0000000380)='-.%\xb4\\\x00', 0x40, 0x8, &(0x7f00000003c0)={0xfff, 0x7, 0x3654b17, 0x7})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})

9.223357296s ago: executing program 6 (id=3335):
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
io_uring_setup(0x6281, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000380))
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=0x0], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r2, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='xfs\x00', 0x0)

8.910048873s ago: executing program 4 (id=3336):
timer_create(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x2000001c})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0x4, 0x4}}, 0xe8)

6.54765289s ago: executing program 6 (id=3338):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x40, 0xd, 0x9d}]})
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = io_uring_setup(0x6281, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1c014b3a6d6f13f700906018dd329d7a"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000380))
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a10400019078a80efe06e2d4c3d901c90c6b9600a8b1c6fe8c10af0044b5482bf590c691ff95d07ca5d9f82d81608fab4c3f688f5cf2448f18243dcda4d8cefacb27b44b877f218c6639b01ffc37b10dce91a6e3d81fad9e88d6673214d1250c7ec52e6d5d34e962684e7aa1bd88035f5e9b55984cbe2de04e0e856a7b0c678df3f86718b6877a766e8c2ab10f345caea0d7b4817d36ef236f8ab8a82e4c2c0576b96135ffa5330003287666340ce203321c650fce8f5aceffa605309815364b02fc5459be0f402fc0ae3fe028bfb43e731e51003fedf1b9a9ba82580b156be225570ebf8b27b24e1bc52b4e5834a2b598e66d56efc711b1", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r4, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='xfs\x00', 0x0)

6.534928871s ago: executing program 4 (id=3339):
link(&(0x7f0000000140)='./cgroup/../file0\x00', &(0x7f0000000180)='./file0\x00')

6.437646327s ago: executing program 2 (id=3341):
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
r0 = getpid()
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/mcfilter\x00')
sigaltstack(&(0x7f0000001280)={&(0x7f0000000280)=""/4096, 0x80000000, 0x1000}, 0x0)
fchdir(r1)
sigaltstack(&(0x7f00000014c0)={0x0, 0x80000002}, &(0x7f00000015c0)={0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000018000100fc0f00000000000002100000000000090000000006001500060000000c001680050002007f00000011a9bca2b83a88e387cf7501c3f46b8c62c13926fa54467e788c99f25c3c5aa1ae27332c820ba2266bc876d6e73a4ed90df2ffd7a0670a65d13e49306af9adbb1d1c5478ce05519f8508e093c69c8aca3dba73e2c90e9fa1acdb4eb813160229dd7b79982c6de7f89386ae7de7683741cf2559f73fca2ae08ee97d8edd6b0a6591de771ca19bffcf7d8ab39f122407008e2e5403d96d347cbcd84a2142953eee2781a3e6e3df30f674a46701fc57f5"], 0x30}}, 0x44890)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x4)

6.423300679s ago: executing program 4 (id=3342):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x40, 0xd, 0x9d}]})
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r0 = io_uring_setup(0x6281, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a10400019078a80efe06e2d4c3d901c90c6b9600a8b1c6fe8c10af0044b5482bf590c691ff95d07ca5d9f82d81608fab4c3f688f5cf2448f18243dcda4d8cefacb27b44b877f218c6639b01ffc37b10dce91a6e3d81fad9e88d6673214d1250c7ec52e6d5d34e962684e7aa1bd88035f5e9b55984cbe2de04e0e856a7b0c678df3f86718b6877a766e8c2ab10f345caea0d7b4817d36ef236f8ab8a82e4c2c0576b96135ffa5330003287666340ce203321c650fce8f5aceffa605309815364b02fc5459be0f402fc0ae3fe028bfb43e731e51003fedf1b9a9ba82580b156be225570ebf8b27b24e1bc52b4e5834a2b598e66d56efc711b1", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r4, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'gretap0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0xff, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
iopl(0x3)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='xfs\x00', 0x0)

5.892962486s ago: executing program 3 (id=3344):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4010)

4.816424461s ago: executing program 2 (id=3346):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xc1}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r1}, 0x18)
r2 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0)
r3 = gettid()
sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x5)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

4.488464808s ago: executing program 3 (id=3348):
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newchain={0xfffffffffffffe15, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xe}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040)
socket$netlink(0x10, 0x3, 0x2)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r5, @ANYBLOB="05"], 0x0)
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b0080904"], 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
splice(r0, 0x0, r6, 0x0, 0x80, 0x6)
write(r2, 0x0, 0x0)
r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3f00, 0x8000})
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="e415eb49a8d1ca978b06f435ebbd7153cd7fc5c038a7ae9634b36b5c441f9664c93b1360ffa597517edcccc7aa876000e0355f9e0dd0a2913cdbfa4e0b2d16080dcb06cef3c40b7469258c05d3683114631a9214a91ffc3c4885eb8de065ca462487d306081f"], 0x45)

4.328574301s ago: executing program 2 (id=3349):
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
io_uring_setup(0x6281, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000380))
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=0x0], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r2, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='xfs\x00', 0x0)

4.287048756s ago: executing program 6 (id=3350):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048001}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r2 = syz_usb_connect(0x2, 0x239, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)

4.138717883s ago: executing program 4 (id=3351):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
getdents(r0, &(0x7f0000002f40)=""/4096, 0x1000)
r2 = syz_clone(0x94c000, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)="46628d232b42261787a725b5f96f42")
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000100)={0x1, 0x8, 0x10, 0xffffffff, 0xffffffff, 0x2, 0x4, 0x9, 0x102, 0x101, 0xffffffff, 0x7, 0x0, 0x0, 0x0})

3.384625127s ago: executing program 5 (id=3352):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00', &(0x7f0000000440)='\x00']}, &(0x7f0000000380), 0x0)

3.098269354s ago: executing program 2 (id=3353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004859}, 0x4000)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x5, 0x2, 0x1}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0)
ioctl$TIOCMGET(r5, 0x5415, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})

3.079306136s ago: executing program 5 (id=3354):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2.062177431s ago: executing program 5 (id=3355):
prctl$PR_GET_CHILD_SUBREAPER(0x25)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff004c99000000000004000000000000000600000000b3802ca7985fe4ff0000000900000000000000000000000000000061f4ffffffffffff0000000000000000000000000000000000ac891cca25e63889119eac2e00010000a6f55ce251000000031a4802fb000800000000002abd70000000000002000000300000000000000048000200656362286369706865c9c929c567a5c861d44e2441725f6e756c6c2900"/265], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000200)={0x30}, 0x30)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/59, 0x3b)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000500)={0x35}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x700}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@mcast2, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c6, 0x6, 0x4000000001000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)

1.876121341s ago: executing program 5 (id=3356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x8000000000000002)
sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x100, 0x70bd27, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x44004)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0)
close(r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x30d, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x844c0}, 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x85f}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$caif_seqpacket(0x25, 0x5, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, &(0x7f0000000040)="fd643a", 0x3)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000240)={&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)="c821c414e3c786eab15e1559dbb78e33ca8a4bb6ab957d25435a8ff340a0e3bb6f2ad2a6de31e71ee817dd8939d54bf603f3", 0x32}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000340)="bbbde07501902c77893bd2101059b336001232979bbccbcde62aed4063d7515ee34124217bad9c60dcc7fa22ddd4d4f6917cedb46d0192c0ffc128c0da614a879c5d54961452e047b2531cb60ca1b6b95c2c73bfaa318f9ce24007a4012b4dad3c2242d0", 0x64}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000003c0)="ed08d839c776170163474b5ee3f472bddd64fdc0043b0acd854244fe9e56f53b197b647248746f15b3a8c3edfb4be86b57625cff3bead98bcf76fa7251635ab6c6", 0x41}, {&(0x7f0000000440)="6256cd4dd735ed43b950b4d0d03a07b32bbe1195e473c4e05f6b772dfc6c62a870fe72a869b696d9fe0d548345bb1cad4b199313cb0267f458977802ff5d85779a33da322e83b74208c3c5937a67b4d91b63519d6c851968f814994a19576c8f0a2254c53ed9904d3dfad16cfc6c05b597043e398362eb2a5d80e0c2b35c75bee7427011545e703d6229746c730df9e8f6c3f93ca57505779cada466cce3a6037c629926b8c735", 0xa7}], 0x6, &(0x7f0000000680)=[{0x60, 0x1, 0x4, "a8b0afe914f92e044f180c22a005960b0ed129f9832b1536101ab2e72ae8ddbaf79a325bd34b232673ca053730be21c282fd1a0ffc5e568252955f8a7c5823cf2850b7d093a52add4ceae0"}], 0x60}, 0x84)
r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000500), 0x48802, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r10, 0x80045010, &(0x7f00000007c0))

1.677411163s ago: executing program 2 (id=3357):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000f80))
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d, 0x0, r5}, &(0x7f00000001c0)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1})
io_uring_enter(r6, 0x234f, 0xb1e6, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r10=>0xffffffffffffffff})
tee(r10, r9, 0x3, 0x4)
r11 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, 0x0)

1.206957441s ago: executing program 6 (id=3358):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @broadcast}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7}, {0xd, 0x3}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

1.200961498s ago: executing program 5 (id=3359):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
io_setup(0x19, &(0x7f00000009c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}])
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00')
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.052332905s ago: executing program 3 (id=3360):
r0 = socket$inet6(0xa, 0x3, 0x2f)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYRESOCT=r0], 0x230}, 0x40)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ptrace$cont(0x1f, r2, 0x100, 0x10000)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x9d9, 0xffff, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, {0x0, 0x0, 0x40000000}, 0x5, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='wlan0\x00', 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = dup(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={<r6=>r0})
ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f00000004c0)={{r4}, 0x2, &(0x7f0000000340)=[0xff, 0x7], 0x100000001, 0x8, 0x1})
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008504"])
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100003040000000000ae26469f0000008f464f51917078b1735f1724604936d17269dafcfb9ae7153a7e7fb158e9195f80c2b9f832f9c607d0d29d7c171b3ca0b8617ff0d1bbd0c3517e1a6b099f5ce019e128dbc1ccc989fccd54ccd0304fc2db0cf2974906a8544376c3fadc009cb800c877b70603f56b3ea5654ac7fd8588a4836b62ff8727dc89faa4d870e7", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800e000100776972656775617264000000040002800800040000000000"], 0x40}}, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000)
r9 = fsopen(&(0x7f0000000080)='bpf\x00', 0x5ff4cbd5367756bf)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='/dev/ttyS3\x00', &(0x7f0000000180)='/dev/ttyS3\x00', 0x0)

930.209085ms ago: executing program 4 (id=3361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2504000000080004000200000008000500", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)

149.257005ms ago: executing program 5 (id=3362):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet6(0xa, 0x2, 0x0)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
userfaultfd(0x80001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x1, 0x5, 0xad}, 0x0, &(0x7f0000000040)={0x3ff, 0xfffffffffffffffc, 0x0, 0x4, 0xffffffff, 0x2, 0x344}, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x40000006}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x14, 0x2, "59d2230f5a2a819e70e6df8ca815c052"}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000440)={@void, @void, @arp=@generic={0x30d, 0x8914, 0x6, 0x1, 0x3, @empty, 's', @random="050d0cf01d20", "b4846ba084759f2687d3c4"}}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x10, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xfff1, 0xb}, {0x3, 0x7}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

13.312037ms ago: executing program 6 (id=3363):
socket(0x10, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x200)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c5200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f00000000c0)=@ethtool_gstrings})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r11, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000000a80)={{r6}, "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"})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

0s ago: executing program 2 (id=3364):
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
io_uring_setup(0x6281, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000380))
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0)
syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES32=0x0], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet(r2, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='xfs\x00', 0x0)

kernel console output (not intermixed with test programs):

1: SerialNumber: syz
[  895.797409][ T1205] usb 3-1: config 0 descriptor??
[  896.095127][ T1205] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  896.104518][ T1205] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  896.119797][ T1205] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  896.360286][ T1205] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  896.379920][ T1205] usb 3-1: USB disconnect, device number 109
[  897.839195][T16509] netlink: 'syz.4.2718': attribute type 4 has an invalid length.
[  897.939490][T16512] netlink: 'syz.4.2718': attribute type 4 has an invalid length.
[  898.014368][ T1205] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  898.048051][T16514] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  898.059440][T16514] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  898.070901][T16517] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[  898.669988][ T1205] usb 7-1: Using ep0 maxpacket: 16
[  898.675252][   T30] audit: type=1400 audit(1752472604.814:7050): avc:  denied  { write } for  pid=16513 comm="syz.2.2725" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  898.732449][ T1205] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  898.833906][ T1205] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  898.964676][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.974051][ T1205] usb 7-1: Product: syz
[  898.978227][ T1205] usb 7-1: Manufacturer: syz
[  898.982820][ T1205] usb 7-1: SerialNumber: syz
[  898.996125][ T1205] usb 7-1: config 0 descriptor??
[  899.032434][ T1205] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  899.062986][T16523] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  899.557094][ T1205] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  899.833237][ T5913] libceph: connect (1)[c::]:6789 error -22
[  899.834996][ T5888] libceph: connect (1)[c::]:6789 error -22
[  899.849474][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  899.849652][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  899.970498][ T1205] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  899.999060][   T30] audit: type=1400 audit(1752472606.154:7051): avc:  denied  { accept } for  pid=16541 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  900.134461][ T5913] libceph: connect (1)[c::]:6789 error -22
[  900.140530][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  900.253924][ T5888] libceph: connect (1)[c::]:6789 error -22
[  900.259950][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  900.777440][ T5888] libceph: connect (1)[c::]:6789 error -22
[  900.787784][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  900.798157][ T5913] libceph: connect (1)[c::]:6789 error -22
[  900.820616][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  901.056098][ T1205] em28xx 7-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  901.098494][ T1205] em28xx 7-1:0.0: board has no eeprom
[  901.107782][T16530] ceph: No mds server is up or the cluster is laggy
[  901.107956][T16535] ceph: No mds server is up or the cluster is laggy
[  901.355247][ T1205] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  901.367700][ T1205] em28xx 7-1:0.0: dvb set to bulk mode.
[  901.383560][    T9] em28xx 7-1:0.0: Binding DVB extension
[  901.395886][ T1205] usb 7-1: USB disconnect, device number 2
[  901.415217][ T1205] em28xx 7-1:0.0: Disconnecting em28xx
[  901.752537][    T9] em28xx 7-1:0.0: Registering input extension
[  901.777619][ T1205] em28xx 7-1:0.0: Closing input extension
[  902.162137][ T1205] em28xx 7-1:0.0: Freeing device
[  903.233054][   T30] audit: type=1400 audit(1752472609.384:7052): avc:  denied  { ioctl } for  pid=16562 comm="syz.5.2735" path="socket:[59171]" dev="sockfs" ino=59171 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  903.470509][T16581] overlayfs: missing 'lowerdir'
[  904.245439][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2739'.
[  904.774203][T13075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  905.746303][T16603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2745'.
[  905.796989][T16603] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2745'.
[  905.808131][T16603] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2745'.
[  905.822329][T16603] netlink: 'syz.5.2745': attribute type 5 has an invalid length.
[  905.830334][T16603] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2745'.
[  905.844308][T16603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16603 comm=syz.5.2745
[  906.174012][T16603] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2745'.
[  907.098809][ T1205] libceph: connect (1)[c::]:6789 error -101
[  907.106511][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  907.114457][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  907.131263][ T1205] libceph: connect (1)[c::]:6789 error -101
[  907.138394][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  907.208891][ T5940] libceph: connect (1)[c::]:6789 error -101
[  907.222716][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  907.373137][ T5888] usb 7-1: Using ep0 maxpacket: 16
[  907.382711][ T5888] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  907.426287][ T5888] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  907.443338][ T1205] libceph: connect (1)[c::]:6789 error -101
[  907.452216][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  907.480754][ T5888] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  907.494097][ T5940] libceph: connect (1)[c::]:6789 error -101
[  907.512757][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  907.527470][ T5888] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  907.540464][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.551333][ T5888] usb 7-1: Product: syz
[  907.555674][ T5888] usb 7-1: Manufacturer: syz
[  907.560435][ T5888] usb 7-1: SerialNumber: syz
[  907.976362][ T1205] libceph: connect (1)[c::]:6789 error -101
[  908.034015][ T5940] libceph: connect (1)[c::]:6789 error -101
[  908.041062][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  908.041123][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  908.084534][T16623] ceph: No mds server is up or the cluster is laggy
[  908.084541][T16619] ceph: No mds server is up or the cluster is laggy
[  908.239679][ T5888] usb 7-1: 0:2 : does not exist
[  908.244867][   T30] audit: type=1400 audit(1752472614.395:7053): avc:  denied  { connect } for  pid=16634 comm="syz.2.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  908.782312][T16643] xt_hashlimit: max too large, truncated to 1048576
[  908.865696][T16641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  908.872246][T16641] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  908.906370][   T30] audit: type=1400 audit(1752472615.065:7054): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  908.931405][T16641] vhci_hcd vhci_hcd.0: Device attached
[  909.031181][    T9] hid-generic 0000:0004:0034.0031: unknown main item tag 0x0
[  909.039096][    T9] hid-generic 0000:0004:0034.0031: unknown main item tag 0x0
[  909.054983][    T9] hid-generic 0000:0004:0034.0031: unknown main item tag 0x0
[  909.090129][    T9] hid-generic 0000:0004:0034.0031: hidraw0: <UNKNOWN> HID v0.0e Device [syz0] on syz1
[  909.164307][T16652] block nbd5: NBD_DISCONNECT
[  909.173265][ T1205] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  909.191568][T16652] block nbd5: Send disconnect failed -22
[  909.225366][T16652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  909.270385][T16652] syzkaller0: entered promiscuous mode
[  909.275918][T16652] syzkaller0: entered allmulticast mode
[  909.282055][T16652] tipc: Resetting bearer <eth:syzkaller0>
[  909.289367][T16644] vhci_hcd: connection reset by peer
[  909.297404][T13069] vhci_hcd: stop threads
[  909.301676][T13069] vhci_hcd: release socket
[  909.306338][T13069] vhci_hcd: disconnect device
[  909.308609][ T5888] usb 7-1: 1:0: failed to get current value for ch 0 (-22)
[  909.321907][T16660] overlayfs: missing 'lowerdir'
[  910.809979][ T5888] usb 7-1: USB disconnect, device number 3
[  910.893876][T16047] tipc: Resetting bearer <eth:syzkaller0>
[  910.979739][T16651] tipc: Resetting bearer <eth:syzkaller0>
[  911.419302][T16673] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2760'.
[  912.155451][    T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  912.348221][ T5888] libceph: connect (1)[c::]:6789 error -22
[  912.382816][    T9] usb 4-1: Using ep0 maxpacket: 32
[  912.388085][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  912.389431][    T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  912.402291][    T9] usb 4-1: config 0 has no interface number 0
[  912.409313][    T9] usb 4-1: config 0 interface 196 has no altsetting 0
[  912.520776][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  912.702494][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  912.757262][ T5888] libceph: connect (1)[c::]:6789 error -22
[  912.768682][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  913.003170][T16651] tipc: Disabling bearer <eth:syzkaller0>
[  913.012705][T16676] ceph: No mds server is up or the cluster is laggy
[  913.042984][    T9] usb 4-1: Product: syz
[  913.044728][T16651] block nbd5: Disconnected due to user request.
[  913.053947][T16651] block nbd5: shutting down sockets
[  913.104850][    T9] usb 4-1: Manufacturer: syz
[  913.112974][    T9] usb 4-1: SerialNumber: syz
[  913.145522][    T9] usb 4-1: config 0 descriptor??
[  913.742373][    T9] ipheth 4-1:0.196: Unable to find endpoints
[  913.750634][    T9] usb 4-1: USB disconnect, device number 115
[  913.832442][ T5940] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  913.945951][ T5913] libceph: connect (1)[c::]:6789 error -101
[  913.952634][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  914.204848][   T30] audit: type=1400 audit(1752472620.226:7055): avc:  denied  { mount } for  pid=16698 comm="syz.4.2764" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  914.207153][ T5913] libceph: connect (1)[c::]:6789 error -101
[  914.234037][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'.
[  914.244064][   T30] audit: type=1400 audit(1752472620.236:7056): avc:  denied  { watch } for  pid=16698 comm="syz.4.2764" path="/569/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  914.268826][    T9] libceph: connect (1)[c::]:6789 error -101
[  914.309844][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  914.309939][ T1205] vhci_hcd: vhci_device speed not set
[  914.339966][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  914.365741][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  914.375640][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  914.414452][T16703] vxlan1: entered promiscuous mode
[  914.437096][ T5940] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  914.614250][    T9] libceph: connect (1)[c::]:6789 error -101
[  914.627671][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  914.662388][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.679124][ T5940] usb 3-1: config 0 descriptor??
[  914.705040][T16697] ceph: No mds server is up or the cluster is laggy
[  914.705106][T16694] ceph: No mds server is up or the cluster is laggy
[  914.961706][   T30] audit: type=1400 audit(1752472621.116:7057): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  915.988697][ T5940] hid-led 0003:27B8:01ED.0032: probe with driver hid-led failed with error -32
[  916.742038][ T5940] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  916.922554][ T5940] usb 7-1: Using ep0 maxpacket: 32
[  916.948012][ T1205] usb 3-1: USB disconnect, device number 110
[  916.960717][ T5940] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  916.969850][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.996987][ T5940] usb 7-1: config 0 descriptor??
[  917.022323][ T5940] as10x_usb: device has been detected
[  917.030148][ T5940] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  917.382925][T16736] overlayfs: missing 'lowerdir'
[  917.393591][ T5940] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  917.583278][ T5940] as10x_usb: error during firmware upload part1
[  917.589782][ T5940] Registered device nBox DVB-T Dongle
[  918.198430][T16741] netlink: 'syz.5.2776': attribute type 1 has an invalid length.
[  918.230603][T16725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  918.255914][ T5940] usb 7-1: USB disconnect, device number 4
[  918.529161][T16751] siw: device registration error -23
[  918.543210][T16741] bond2 (unregistering): Released all slaves
[  918.544986][ T5940] Unregistered device nBox DVB-T Dongle
[  918.553847][ T5940] as10x_usb: device has been disconnected
[  919.049070][   T30] audit: type=1400 audit(1752472625.186:7058): avc:  denied  { unmount } for  pid=16169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  919.152598][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  919.161321][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  919.381990][ T5940] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  919.571766][ T5940] usb 7-1: Using ep0 maxpacket: 32
[  919.589173][ T5940] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  919.598540][ T5940] usb 7-1: config 0 has no interface number 0
[  919.636450][ T5940] usb 7-1: config 0 interface 12 has no altsetting 0
[  919.648261][ T5940] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  919.661298][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.724326][ T5940] usb 7-1: Product: syz
[  919.732439][ T5940] usb 7-1: Manufacturer: syz
[  919.737165][ T5940] usb 7-1: SerialNumber: syz
[  919.750422][ T5940] usb 7-1: config 0 descriptor??
[  919.966634][ T5940] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  919.975206][ T5940] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  919.982798][ T5940] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  920.064044][ T5940] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  920.098789][ T5940] usb 7-1: USB disconnect, device number 5
[  920.173365][ T5913] libceph: connect (1)[c::]:6789 error -22
[  920.181850][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  920.288630][ T5913] libceph: connect (1)[c::]:6789 error -22
[  920.296636][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  920.307072][ T5888] libceph: connect (1)[c::]:6789 error -22
[  920.323230][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  920.561989][ T5913] libceph: connect (1)[c::]:6789 error -22
[  920.610602][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  920.611905][ T5940] libceph: connect (1)[c::]:6789 error -22
[  920.629054][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  921.076165][T16799] overlay: ./file0 is not a directory
[  921.105046][T16785] ceph: No mds server is up or the cluster is laggy
[  921.115890][T16788] ceph: No mds server is up or the cluster is laggy
[  921.161044][ T5888] libceph: connect (1)[c::]:6789 error -22
[  921.181035][ T5888] libceph: mon0 (1)[c::]:6789 connect error
[  921.361455][ T5940] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[  921.544540][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  921.558985][ T5940] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  921.591671][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.674926][ T5940] usb 6-1: config 0 descriptor??
[  921.856478][ T1205] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[  922.119811][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.391745][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.401866][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.412112][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.671620][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.678363][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.688363][ T5940] kye 0003:0458:0153.0033: unknown main item tag 0x0
[  922.696916][T16812] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  922.699446][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  922.706025][T16812] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  922.706075][T16812] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  922.729629][ T1205] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  922.735306][T16812] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  922.746767][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.777556][ T1205] usb 4-1: config 0 descriptor??
[  922.832856][ T5940] kye 0003:0458:0153.0033: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.5-1/input0
[  922.941659][T16796] Process accounting resumed
[  923.028368][ T5913] usb 6-1: USB disconnect, device number 54
[  923.359463][   T30] audit: type=1400 audit(1752472629.417:7059): avc:  denied  { override_creds } for  pid=16817 comm="syz.6.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  925.244345][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.255802][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.291242][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.297984][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.307358][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.314135][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.320834][ T1205] kye 0003:0458:0153.0034: unknown main item tag 0x0
[  925.415898][T16828] overlayfs: missing 'lowerdir'
[  925.464425][ T1205] kye 0003:0458:0153.0034: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[  925.712350][ T5940] usb 4-1: USB disconnect, device number 116
[  927.726039][ T1205] libceph: connect (1)[c::]:6789 error -101
[  927.733036][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  927.991165][ T1205] libceph: connect (1)[c::]:6789 error -101
[  927.998736][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  928.522290][ T1205] libceph: connect (1)[c::]:6789 error -101
[  928.529561][T16851] ceph: No mds server is up or the cluster is laggy
[  928.539792][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  928.738540][T16834] ALSA: mixer_oss: invalid OSS volume ''
[  929.050983][   T30] audit: type=1400 audit(1752472635.197:7060): avc:  denied  { watch watch_reads } for  pid=16869 comm="syz.3.2810" path="/522" dev="tmpfs" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  929.399367][T16879] overlayfs: missing 'lowerdir'
[  930.331553][T16886] overlay: ./file0 is not a directory
[  930.819782][   T30] audit: type=1400 audit(1752472636.977:7061): avc:  denied  { shutdown } for  pid=16889 comm="syz.6.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  931.046499][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  931.062472][   T30] audit: type=1400 audit(1752472636.977:7062): avc:  denied  { read } for  pid=16889 comm="syz.6.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  931.824197][T16883] Process accounting resumed
[  932.336408][   T30] audit: type=1400 audit(1752472638.298:7063): avc:  denied  { watch_with_perm } for  pid=16914 comm="syz.4.2819" path="/579/bus" dev="tmpfs" ino=3052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  933.169019][   T30] audit: type=1400 audit(1752472639.328:7064): avc:  denied  { create } for  pid=16921 comm="syz.5.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  933.734441][T16928] QAT: Invalid ioctl -1070033884
[  933.790322][T16935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'.
[  934.118745][T16937] geneve2: entered promiscuous mode
[  934.124107][T16937] geneve2: entered allmulticast mode
[  934.291944][T16941] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.299103][T16941] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.338640][T16941] bridge0: entered allmulticast mode
[  934.496253][T16948] bridge_slave_1: left allmulticast mode
[  934.502654][T16948] bridge_slave_1: left promiscuous mode
[  934.510194][T16948] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.547694][T16948] bridge_slave_0: left allmulticast mode
[  934.709998][T16948] bridge_slave_0: left promiscuous mode
[  934.715833][T16948] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.260356][ T5913] libceph: connect (1)[c::]:6789 error -101
[  935.288289][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  935.580223][ T1205] libceph: connect (1)[c::]:6789 error -101
[  935.599444][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'.
[  935.608900][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  935.784462][T16959] ceph: No mds server is up or the cluster is laggy
[  935.945446][   T43] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[  936.171470][T16979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16979 comm=syz.5.2835
[  936.184216][   T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  936.184247][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 30768, setting to 64
[  936.204845][   T43] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  936.227235][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.252528][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  936.262257][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  936.267637][   T43] usb 4-1: Product: syz
[  936.276228][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  936.288582][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  936.297021][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  936.304592][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'.
[  936.322304][T16984] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  936.351548][   T43] usb 4-1: Manufacturer: syz
[  936.405245][T16984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  936.678800][T16980] wg1 speed is unknown, defaulting to 1000
[  936.684794][   T43] usb 4-1: SerialNumber: syz
[  936.778399][T16048] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  936.802083][   T43] usb 4-1: config 0 descriptor??
[  936.909979][ T1205] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  937.029805][   T43] rc_core: IR keymap rc-streamzap not found
[  937.035746][   T43] Registered IR keymap rc-empty
[  937.046702][   T43] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  937.069877][ T1205] usb 7-1: unable to read config index 0 descriptor/start: -61
[  937.108645][ T1205] usb 7-1: can't read configurations, error -61
[  937.128551][   T43] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input57
[  937.202356][   T43] usb 4-1: USB disconnect, device number 117
[  937.261703][ T1205] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  937.441405][ T1205] usb 7-1: unable to read config index 0 descriptor/start: -61
[  937.449183][ T1205] usb 7-1: can't read configurations, error -61
[  937.456255][ T1205] usb usb7-port1: attempt power cycle
[  937.572980][T13069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.595523][T16980] chnl_net:caif_netlink_parms(): no params data found
[  937.619600][ T5888] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  937.647195][T13069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.790813][T13069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.803459][ T1205] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  937.813627][T16980] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.830379][T16980] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.830565][ T5888] usb 6-1: Using ep0 maxpacket: 8
[  937.837658][T16980] bridge_slave_0: entered allmulticast mode
[  937.857149][ T5888] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  937.865798][ T5888] usb 6-1: config 179 has no interface number 0
[  937.867137][ T1205] usb 7-1: unable to read config index 0 descriptor/start: -61
[  937.872091][ T5888] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  937.872120][ T5888] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  937.872146][ T5888] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  937.872168][ T5888] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  937.872190][ T5888] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  937.872213][ T5888] usb 6-1: config 179 interface 65 has no altsetting 0
[  937.872242][ T5888] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  937.872261][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.968326][T16980] bridge_slave_0: entered promiscuous mode
[  937.970021][ T5888] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input58
[  937.987777][T16980] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.996883][T16980] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.009822][T16980] bridge_slave_1: entered allmulticast mode
[  938.016802][T16980] bridge_slave_1: entered promiscuous mode
[  938.128193][T13069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  938.148543][ T1205] usb 7-1: can't read configurations, error -61
[  938.254515][T16980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  938.288055][T16980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.297460][ T1205] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  938.323200][ T1205] usb 7-1: unable to read config index 0 descriptor/start: -61
[  938.330970][ T1205] usb 7-1: can't read configurations, error -61
[  938.359847][ T5832] Bluetooth: hci5: command tx timeout
[  938.369939][ T1205] usb usb7-port1: unable to enumerate USB device
[  938.374142][   T30] audit: type=1400 audit(1752472644.528:7065): avc:  denied  { write } for  pid=16992 comm="syz.5.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  938.398326][ T5888] usb 6-1: USB disconnect, device number 55
[  938.398363][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  938.466983][T16980] team0: Port device team_slave_0 added
[  938.478855][T16980] team0: Port device team_slave_1 added
[  939.289579][T13069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  939.312544][T13069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  939.723982][ T5888] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  939.734190][T13069] bond0 (unregistering): Released all slaves
[  939.766919][T17020] syz_tun: entered allmulticast mode
[  939.783761][T16980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  939.813791][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  939.850820][T16980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  939.864426][T16980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  939.887778][T16980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  940.053605][T17027] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2844'.
[  940.091122][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  940.106033][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  940.449481][ T5832] Bluetooth: hci5: command tx timeout
[  940.462211][T16980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  940.471176][ T5888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  940.497526][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  940.498063][T17016] syz_tun: left allmulticast mode
[  940.506095][ T5888] usb 4-1: SerialNumber: syz
[  940.516686][T13069] tipc: Left network mode
[  940.585349][T16980] hsr_slave_0: entered promiscuous mode
[  940.596924][T16980] hsr_slave_1: entered promiscuous mode
[  940.611149][T16980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  940.618813][T16980] Cannot create hsr debugfs directory
[  940.703542][   T30] audit: type=1400 audit(1752472646.859:7066): avc:  denied  { watch } for  pid=17030 comm="syz.5.2846" path="/320" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  940.729731][   T30] audit: type=1400 audit(1752472646.859:7067): avc:  denied  { watch_sb } for  pid=17030 comm="syz.5.2846" path="/320" dev="tmpfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  940.835202][ T5888] usb 4-1: 0:2 : does not exist
[  940.853331][ T5888] usb 4-1: USB disconnect, device number 118
[  940.903892][   T30] audit: type=1400 audit(1752472647.059:7068): avc:  denied  { map } for  pid=17037 comm="syz.4.2849" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  940.938641][   T30] audit: type=1400 audit(1752472647.059:7069): avc:  denied  { execute } for  pid=17037 comm="syz.4.2849" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  941.064158][T17039] x_tables: duplicate entry at hook 2
[  941.099239][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  941.409763][    T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  941.418401][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  941.436919][   T30] audit: type=1400 audit(1752472647.599:7070): avc:  denied  { listen } for  pid=17037 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  941.471777][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  941.661012][T17043] syzkaller0: entered promiscuous mode
[  941.666658][T17043] syzkaller0: entered allmulticast mode
[  941.719684][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  941.810237][    T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  941.843652][    T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  941.869304][    T9] usb 7-1: Product: syz
[  941.876025][    T9] usb 7-1: Manufacturer: syz
[  941.945168][    T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  942.269907][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2847'.
[  942.349514][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2847'.
[  942.380907][ T5888] usb 7-1: USB disconnect, device number 10
[  942.416450][T13069] hsr_slave_0: left promiscuous mode
[  942.449575][T13069] hsr_slave_1: left promiscuous mode
[  942.460864][T13069] batman_adv: batadv0: Interface deactivated: dummy0
[  942.486275][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2852'.
[  942.497264][T13069] batman_adv: batadv0: Removing interface: dummy0
[  942.522882][ T5832] Bluetooth: hci5: command tx timeout
[  942.529052][T13069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.537837][T13069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.545713][T13069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.553207][T13069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.582119][T13069] veth1_macvtap: left promiscuous mode
[  942.587673][T13069] veth0_macvtap: left promiscuous mode
[  942.930760][   T30] audit: type=1400 audit(1752472649.059:7071): avc:  denied  { mount } for  pid=17064 comm="syz.4.2855" name="/" dev="configfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  943.253672][   T30] audit: type=1400 audit(1752472649.399:7072): avc:  denied  { getopt } for  pid=17069 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  944.255489][T13069] team0 (unregistering): Port device team_slave_1 removed
[  944.326653][T13069] team0 (unregistering): Port device team_slave_0 removed
[  944.501932][ T5832] Bluetooth: hci3: SCO packet for unknown connection handle 954
[  944.598904][ T5832] Bluetooth: hci5: command tx timeout
[  944.644080][T17057] veth0: entered promiscuous mode
[  944.893230][T17088] netlink: 'syz.3.2860': attribute type 1 has an invalid length.
[  945.198383][T13069] IPVS: stop unused estimator thread 0...
[  945.206390][   T30] audit: type=1400 audit(1752472651.359:7073): avc:  denied  { mounton } for  pid=17089 comm="syz.5.2861" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  945.503537][   T30] audit: type=1400 audit(1752472651.639:7074): avc:  denied  { bind } for  pid=17091 comm="syz.6.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  945.523655][   T30] audit: type=1400 audit(1752472651.639:7075): avc:  denied  { name_bind } for  pid=17091 comm="syz.6.2862" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  945.545195][   T30] audit: type=1400 audit(1752472651.639:7076): avc:  denied  { node_bind } for  pid=17091 comm="syz.6.2862" saddr=fe80::f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  945.820979][   T30] audit: type=1400 audit(1752472651.639:7077): avc:  denied  { write } for  pid=17091 comm="syz.6.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  945.910941][   T30] audit: type=1326 audit(1752472652.069:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.3.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20918e929 code=0x7ffc0000
[  945.934413][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.967116][T17100] tipc: Cannot configure node identity twice
[  945.974223][   T30] audit: type=1326 audit(1752472652.069:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.3.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20918e929 code=0x7ffc0000
[  946.049543][T16980] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  946.058734][   T30] audit: type=1326 audit(1752472652.069:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.3.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff20918e929 code=0x7ffc0000
[  946.082195][    C0] vkms_vblank_simulate: vblank timer overrun
[  946.089786][   T30] audit: type=1400 audit(1752472652.069:7081): avc:  denied  { kexec_image_load } for  pid=17099 comm="syz.3.2864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  946.167555][T16980] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  946.184312][T16980] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  946.202759][   T30] audit: type=1326 audit(1752472652.069:7082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.3.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20918e929 code=0x7ffc0000
[  946.348412][T16980] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  946.424025][T16980] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.437843][T16980] 8021q: adding VLAN 0 to HW filter on device team0
[  946.456237][T13059] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.463338][T13059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.511107][T13059] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.518223][T13059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.577318][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2867'.
[  946.607343][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2867'.
[  946.648882][ T5888] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  946.679532][T16980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  946.813073][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.826235][ T5888] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  946.844359][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.872103][ T5888] usb 6-1: config 0 descriptor??
[  947.021192][T16980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  947.124496][T16980] veth0_vlan: entered promiscuous mode
[  947.159940][T16980] veth1_vlan: entered promiscuous mode
[  947.220672][T16980] veth0_macvtap: entered promiscuous mode
[  947.233548][T16980] veth1_macvtap: entered promiscuous mode
[  947.270928][T16980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  947.313551][T16980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  947.407554][T16980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  947.432737][T16980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  947.445791][T16980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  947.458564][T16980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  947.624287][T16046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  947.632566][T16046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  947.677884][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  947.686059][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  947.929059][T12720] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  948.148596][T12720] usb 7-1: Using ep0 maxpacket: 32
[  948.187846][T12720] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  948.204470][T12720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.214946][T12720] usb 7-1: Product: syz
[  948.220102][T12720] usb 7-1: Manufacturer: syz
[  948.227384][T12720] usb 7-1: SerialNumber: syz
[  948.284151][T12720] usb 7-1: config 0 descriptor??
[  948.308860][T12720] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  949.012835][T17137] FAULT_INJECTION: forcing a failure.
[  949.012835][T17137] name failslab, interval 1, probability 0, space 0, times 0
[  949.029751][T17137] CPU: 0 UID: 0 PID: 17137 Comm: syz.4.2873 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  949.029781][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  949.029792][T17137] Call Trace:
[  949.029798][T17137]  <TASK>
[  949.029806][T17137]  dump_stack_lvl+0x16c/0x1f0
[  949.029839][T17137]  should_fail_ex+0x512/0x640
[  949.029865][T17137]  should_failslab+0xc2/0x120
[  949.029892][T17137]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  949.029916][T17137]  ? skb_clone+0x190/0x3f0
[  949.029945][T17137]  skb_clone+0x190/0x3f0
[  949.029969][T17137]  netlink_deliver_tap+0xabd/0xd30
[  949.030003][T17137]  netlink_unicast+0x62f/0x850
[  949.030024][T17137]  ? __pfx_netlink_unicast+0x10/0x10
[  949.030050][T17137]  netlink_sendmsg+0x8d1/0xdd0
[  949.030072][T17137]  ? __pfx_netlink_sendmsg+0x10/0x10
[  949.030100][T17137]  ____sys_sendmsg+0xa95/0xc70
[  949.030119][T17137]  ? copy_msghdr_from_user+0x10a/0x160
[  949.030144][T17137]  ? __pfx_____sys_sendmsg+0x10/0x10
[  949.030175][T17137]  ___sys_sendmsg+0x134/0x1d0
[  949.030201][T17137]  ? __pfx____sys_sendmsg+0x10/0x10
[  949.030222][T17137]  ? __lock_acquire+0x622/0x1c90
[  949.030272][T17137]  __sys_sendmsg+0x16d/0x220
[  949.030296][T17137]  ? __pfx___sys_sendmsg+0x10/0x10
[  949.030337][T17137]  do_syscall_64+0xcd/0x4c0
[  949.030364][T17137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.030382][T17137] RIP: 0033:0x7ff05c78e929
[  949.030398][T17137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.030414][T17137] RSP: 002b:00007ff05d611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  949.030431][T17137] RAX: ffffffffffffffda RBX: 00007ff05c9b5fa0 RCX: 00007ff05c78e929
[  949.030443][T17137] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  949.030453][T17137] RBP: 00007ff05d611090 R08: 0000000000000000 R09: 0000000000000000
[  949.030464][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.030474][T17137] R13: 0000000000000000 R14: 00007ff05c9b5fa0 R15: 00007ffc59e21208
[  949.030504][T17137]  </TASK>
[  949.237071][    C0] vkms_vblank_simulate: vblank timer overrun
[  949.248981][T17138] veth0: entered promiscuous mode
[  949.254773][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2871'.
[  949.327941][ T5888] usbhid 6-1:0.0: can't add hid device: -71
[  949.343694][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  949.406941][ T5888] usb 6-1: USB disconnect, device number 56
[  949.433597][T17144] FAULT_INJECTION: forcing a failure.
[  949.433597][T17144] name failslab, interval 1, probability 0, space 0, times 0
[  949.465885][T17144] CPU: 0 UID: 0 PID: 17144 Comm: syz.5.2875 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  949.465914][T17144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  949.465925][T17144] Call Trace:
[  949.465931][T17144]  <TASK>
[  949.465938][T17144]  dump_stack_lvl+0x16c/0x1f0
[  949.465965][T17144]  should_fail_ex+0x512/0x640
[  949.465991][T17144]  should_failslab+0xc2/0x120
[  949.466015][T17144]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  949.466038][T17144]  ? skb_clone+0x190/0x3f0
[  949.466065][T17144]  skb_clone+0x190/0x3f0
[  949.466088][T17144]  netlink_deliver_tap+0xabd/0xd30
[  949.466120][T17144]  netlink_unicast+0x62f/0x850
[  949.466140][T17144]  ? __pfx_netlink_unicast+0x10/0x10
[  949.466163][T17144]  netlink_sendmsg+0x8d1/0xdd0
[  949.466185][T17144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  949.466212][T17144]  ____sys_sendmsg+0xa95/0xc70
[  949.466230][T17144]  ? copy_msghdr_from_user+0x10a/0x160
[  949.466253][T17144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  949.466280][T17144]  ___sys_sendmsg+0x134/0x1d0
[  949.466304][T17144]  ? __pfx____sys_sendmsg+0x10/0x10
[  949.466323][T17144]  ? __lock_acquire+0x622/0x1c90
[  949.466370][T17144]  __sys_sendmsg+0x16d/0x220
[  949.466392][T17144]  ? __pfx___sys_sendmsg+0x10/0x10
[  949.466433][T17144]  do_syscall_64+0xcd/0x4c0
[  949.466462][T17144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.466487][T17144] RIP: 0033:0x7fbd0518e929
[  949.466503][T17144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.466520][T17144] RSP: 002b:00007fbd05f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  949.466538][T17144] RAX: ffffffffffffffda RBX: 00007fbd053b5fa0 RCX: 00007fbd0518e929
[  949.466550][T17144] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  949.466561][T17144] RBP: 00007fbd05f78090 R08: 0000000000000000 R09: 0000000000000000
[  949.466572][T17144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  949.466582][T17144] R13: 0000000000000000 R14: 00007fbd053b5fa0 R15: 00007ffcb9d40fd8
[  949.466607][T17144]  </TASK>
[  949.673842][    C0] vkms_vblank_simulate: vblank timer overrun
[  950.526572][T17160] xt_TCPMSS: Only works on TCP SYN packets
[  950.686097][T12720] gspca_stk1135: reg_w 0x2ff err -71
[  950.693529][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  950.702161][T12720] gspca_stk1135: Sensor write failed
[  950.707444][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  950.804893][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  950.804910][   T30] audit: type=1400 audit(1752472656.960:7110): avc:  denied  { bind } for  pid=17170 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  950.834753][T12720] gspca_stk1135: Sensor write failed
[  950.852487][   T30] audit: type=1400 audit(1752472657.000:7111): avc:  denied  { write } for  pid=17170 comm="syz.2.2885" path="socket:[63751]" dev="sockfs" ino=63751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  950.878426][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  950.884781][T12720] gspca_stk1135: Sensor read failed
[  950.890413][T17169] wg1 speed is unknown, defaulting to 1000
[  950.908292][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  950.916119][T12720] gspca_stk1135: Sensor read failed
[  950.943604][T12720] gspca_stk1135: Detected sensor type unknown (0x0)
[  950.967646][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  950.980259][T12720] gspca_stk1135: Sensor read failed
[  950.985779][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  951.000958][T12720] gspca_stk1135: Sensor read failed
[  951.010516][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  951.025931][T12720] gspca_stk1135: Sensor write failed
[  951.047602][T12720] gspca_stk1135: serial bus timeout: status=0x00
[  951.066386][T12720] gspca_stk1135: Sensor write failed
[  951.089704][T12720] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  951.106675][T12720] usb 7-1: USB disconnect, device number 11
[  951.199496][   T30] audit: type=1400 audit(1752472657.350:7112): avc:  denied  { connect } for  pid=17173 comm="syz.2.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  951.351444][   T30] audit: type=1400 audit(1752472657.510:7113): avc:  denied  { read } for  pid=17179 comm="syz.6.2887" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  951.765893][   T30] audit: type=1400 audit(1752472657.540:7114): avc:  denied  { open } for  pid=17179 comm="syz.6.2887" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  953.137864][    T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  953.226129][T17207] fuse: Bad value for 'fd'
[  953.231227][T17207] FAULT_INJECTION: forcing a failure.
[  953.231227][T17207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.246035][T17207] CPU: 0 UID: 0 PID: 17207 Comm: syz.4.2893 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[  953.246052][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  953.246059][T17207] Call Trace:
[  953.246063][T17207]  <TASK>
[  953.246067][T17207]  dump_stack_lvl+0x16c/0x1f0
[  953.246088][T17207]  should_fail_ex+0x512/0x640
[  953.246105][T17207]  _copy_from_iter+0x29f/0x16f0
[  953.246124][T17207]  ? __lock_acquire+0x622/0x1c90
[  953.246135][T17207]  ? __pfx__copy_from_iter+0x10/0x10
[  953.246157][T17207]  vhost_chr_write_iter+0xc8/0x10f0
[  953.246174][T17207]  ? get_pid_task+0xfc/0x250
[  953.246187][T17207]  ? __pfx_vhost_chr_write_iter+0x10/0x10
[  953.246203][T17207]  ? selinux_file_permission+0x126/0x660
[  953.246221][T17207]  ? bpf_lsm_file_permission+0x9/0x10
[  953.246231][T17207]  ? security_file_permission+0x71/0x210
[  953.246249][T17207]  ? rw_verify_area+0xcf/0x680
[  953.246263][T17207]  vfs_write+0x6c7/0x1150
[  953.246278][T17207]  ? __pfx_vhost_vsock_chr_write_iter+0x10/0x10
[  953.246297][T17207]  ? __pfx_vfs_write+0x10/0x10
[  953.246310][T17207]  ? find_held_lock+0x2b/0x80
[  953.246333][T17207]  ksys_write+0x12a/0x250
[  953.246347][T17207]  ? __pfx_ksys_write+0x10/0x10
[  953.246365][T17207]  do_syscall_64+0xcd/0x4c0
[  953.246382][T17207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.246394][T17207] RIP: 0033:0x7ff05c78e929
[  953.246403][T17207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  953.246414][T17207] RSP: 002b:00007ff05d611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  953.246425][T17207] RAX: ffffffffffffffda RBX: 00007ff05c9b5fa0 RCX: 00007ff05c78e929
[  953.246432][T17207] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000005
[  953.246439][T17207] RBP: 00007ff05d611090 R08: 0000000000000000 R09: 0000000000000000
[  953.246445][T17207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.246451][T17207] R13: 0000000000000000 R14: 00007ff05c9b5fa0 R15: 00007ffc59e21208
[  953.246465][T17207]  </TASK>
[  953.451272][    C0] vkms_vblank_simulate: vblank timer overrun
[  953.461579][T17211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=17211 comm=syz.4.2893
[  953.496520][T17212] serio: Serial port ptm0
[  953.519548][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  953.528051][    T9] usb 3-1: can't read configurations, error -61
[  953.538221][T17211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=17211 comm=syz.4.2893
[  953.657782][    T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  953.825837][T17221] fuse: Bad value for 'fd'
[  953.839583][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  953.847357][    T9] usb 3-1: can't read configurations, error -61
[  953.860071][    T9] usb usb3-port1: attempt power cycle
[  953.887348][T17223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=17223 comm=syz.3.2895
[  953.916671][T17223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=17223 comm=syz.3.2895
[  954.337803][    T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  954.382594][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  954.392071][    T9] usb 3-1: can't read configurations, error -61
[  954.527871][    T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  954.553025][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  954.562944][    T9] usb 3-1: can't read configurations, error -61
[  954.579281][    T9] usb usb3-port1: unable to enumerate USB device
[  954.745639][   T30] audit: type=1400 audit(1752472660.900:7115): avc:  denied  { create } for  pid=17228 comm="syz.5.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  954.765212][    C0] vkms_vblank_simulate: vblank timer overrun
[  955.566576][T17203] delete_channel: no stack
[  955.731294][T17247] overlayfs: missing 'lowerdir'
[  956.587476][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  956.655790][ T5824] syz_tun (unregistering): left allmulticast mode
[  956.847939][    T9] usb 7-1: Using ep0 maxpacket: 32
[  956.968620][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.981284][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  957.000326][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  957.014589][    T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  957.024037][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.121094][T15354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  957.138055][T15354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  957.146463][T15354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  957.154409][T15354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  957.162816][T15354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  957.189587][    T9] usb 7-1: config 0 descriptor??
[  957.332177][T17254] wg1 speed is unknown, defaulting to 1000
[  958.520189][T17254] chnl_net:caif_netlink_parms(): no params data found
[  958.895070][T17254] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.903565][T17254] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.919208][T17254] bridge_slave_0: entered allmulticast mode
[  959.911542][ T5832] Bluetooth: hci0: command tx timeout
[  960.471826][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  960.480513][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  960.537648][    T9] usb 7-1: USB disconnect, device number 12
[  960.618946][T17254] bridge_slave_0: entered promiscuous mode
[  960.640632][T17254] bridge0: port 2(bridge_slave_1) entered blocking state
[  960.661744][T17254] bridge0: port 2(bridge_slave_1) entered disabled state
[  960.752578][T17254] bridge_slave_1: entered allmulticast mode
[  960.769648][T17254] bridge_slave_1: entered promiscuous mode
[  960.856305][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  960.987241][ T5940] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  960.988161][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  961.269360][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  961.328244][T17254] team0: Port device team_slave_0 added
[  961.340576][T17254] team0: Port device team_slave_1 added
[  961.359916][   T30] audit: type=1400 audit(1752472667.511:7116): avc:  denied  { write } for  pid=17300 comm="syz.5.2913" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  961.387156][ T5940] usb 3-1: Using ep0 maxpacket: 32
[  961.402121][ T5940] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  961.411714][ T5940] usb 3-1: config 0 has no interface number 0
[  961.417927][ T5940] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  961.429670][ T5940] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  961.438372][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  961.443618][ T5940] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  961.460074][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.462377][ T5913] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  961.471548][ T5940] usb 3-1: Product: syz
[  961.494547][T17301] netlink: 'syz.5.2913': attribute type 10 has an invalid length.
[  961.495282][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  961.516353][ T5940] usb 3-1: Manufacturer: syz
[  961.526454][ T5940] usb 3-1: SerialNumber: syz
[  961.537943][    T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  961.543249][ T5940] usb 3-1: config 0 descriptor??
[  961.564603][   T30] audit: type=1400 audit(1752472667.721:7117): avc:  denied  { setopt } for  pid=17300 comm="syz.5.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  961.599146][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  961.610215][    T9] usb 7-1: SerialNumber: syz
[  961.611744][T17301] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  961.642041][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  961.657039][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.705770][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.721948][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[  961.733915][ T5913] usb 4-1: can't read configurations, error -61
[  961.748647][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.760106][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.787793][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.815769][ T5940] radio-si470x 3-1:0.35: this is not a si470x device.
[  961.871895][ T5940] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  961.887992][ T5913] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  961.952961][T17254] hsr_slave_0: entered promiscuous mode
[  961.958649][T15354] Bluetooth: hci0: command tx timeout
[  961.978008][T17254] hsr_slave_1: entered promiscuous mode
[  961.984250][T17254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  962.026007][T17254] Cannot create hsr debugfs directory
[  962.052769][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[  962.067641][ T5913] usb 4-1: can't read configurations, error -61
[  962.072986][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  962.084855][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  962.093126][ T5913] usb usb4-port1: attempt power cycle
[  962.412415][ T5940] usb 3-1: USB disconnect, device number 115
[  962.439000][ T5913] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  962.481477][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[  962.499458][ T5913] usb 4-1: can't read configurations, error -61
[  962.568094][T17254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.578733][T17254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.632259][T17254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.642970][T17254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.653629][ T5913] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  962.678884][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[  962.686603][ T5913] usb 4-1: can't read configurations, error -61
[  962.693324][ T5913] usb usb4-port1: unable to enumerate USB device
[  962.721112][T17254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.731570][T17254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.792550][T17254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  962.802929][T17254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.947942][T17254] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  962.967820][T17254] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  962.984076][T17254] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  962.998623][T17254] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  963.154328][T17254] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.185197][T17254] 8021q: adding VLAN 0 to HW filter on device team0
[  963.213154][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  963.220316][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  963.313117][T16046] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.320347][T16046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  963.370742][   T30] audit: type=1400 audit(1752472669.531:7118): avc:  denied  { read } for  pid=17316 comm="syz.2.2917" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  963.393442][T17254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  963.410576][T17254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  963.413194][   T30] audit: type=1400 audit(1752472669.571:7119): avc:  denied  { open } for  pid=17316 comm="syz.2.2917" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  963.676086][    T9] usb 7-1: 0:2 : does not exist
[  963.691661][    T9] usb 7-1: unit 5: unexpected type 0x0b
[  963.753709][    T9] usb 7-1: USB disconnect, device number 13
[  963.798885][T17254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.911777][   T30] audit: type=1400 audit(1752472669.981:7120): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.169 src=38986 daddr=10.128.0.208 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  963.956340][T17330] veth0: entered promiscuous mode
[  963.962227][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2919'.
[  964.009508][T17296] delete_channel: no stack
[  964.037148][T15354] Bluetooth: hci0: command tx timeout
[  964.624960][T17254] veth0_vlan: entered promiscuous mode
[  964.653451][T17254] veth1_vlan: entered promiscuous mode
[  965.349093][T17254] veth0_macvtap: entered promiscuous mode
[  965.410382][T17254] veth1_macvtap: entered promiscuous mode
[  965.542894][T17254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  965.748154][T17254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  965.822044][T17254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  965.836337][T17254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  965.865340][T17254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  965.874671][T17254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  966.038677][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.079906][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.121256][T15354] Bluetooth: hci0: command tx timeout
[  966.198366][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'.
[  966.298810][T16046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  966.339098][T16046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  966.539082][T17379] overlayfs: missing 'lowerdir'
[  966.721668][ T5940] usb 6-1: new low-speed USB device number 57 using dummy_hcd
[  966.748293][   T30] audit: type=1400 audit(1752472672.902:7121): avc:  denied  { ioctl } for  pid=17380 comm="syz.4.2900" path="socket:[64908]" dev="sockfs" ino=64908 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  966.773036][    C1] vkms_vblank_simulate: vblank timer overrun
[  967.356231][ T5933] usb 3-1: new full-speed USB device number 116 using dummy_hcd
[  967.389226][   T30] audit: type=1400 audit(1752472672.912:7122): avc:  denied  { listen } for  pid=17380 comm="syz.4.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  967.466837][   T30] audit: type=1400 audit(1752472672.912:7123): avc:  denied  { connect } for  pid=17380 comm="syz.4.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  967.516259][ T5940] usb 6-1: Invalid ep0 maxpacket: 16
[  967.531599][ T5933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  967.546518][ T5933] usb 3-1: config 0 has no interface number 0
[  967.558675][ T5933] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  967.568175][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.589715][ T5933] usb 3-1: config 0 descriptor??
[  967.610016][ T5933] usb 3-1: selecting invalid altsetting 1
[  967.617180][ T5933] dvb_ttusb_budget: ttusb_init_controller: error
[  967.623818][ T5933] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  967.686353][ T5940] usb 6-1: new low-speed USB device number 58 using dummy_hcd
[  967.719997][ T5933] DVB: Unable to find symbol cx22700_attach()
[  967.733538][    T9] libceph: connect (1)[c::]:6789 error -22
[  967.740445][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  967.747274][    T9] libceph: connect (1)[c::]:6789 error -22
[  967.753271][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  967.908826][ T5933] DVB: Unable to find symbol tda10046_attach()
[  967.915335][ T5933] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  967.934885][ T5933] usb 3-1: USB disconnect, device number 116
[  967.940933][ T5940] usb 6-1: Invalid ep0 maxpacket: 16
[  967.946740][ T5940] usb usb6-port1: attempt power cycle
[  968.019583][ T5886] libceph: connect (1)[c::]:6789 error -22
[  968.028595][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[  968.306167][ T5940] usb 6-1: new low-speed USB device number 59 using dummy_hcd
[  968.337215][ T5940] usb 6-1: Invalid ep0 maxpacket: 16
[  968.486213][ T5940] usb 6-1: new low-speed USB device number 60 using dummy_hcd
[  968.496399][T17388] ceph: No mds server is up or the cluster is laggy
[  968.576482][ T1205] libceph: connect (1)[c::]:6789 error -22
[  968.594958][ T1205] libceph: mon0 (1)[c::]:6789 connect error
[  968.608715][ T5940] usb 6-1: Invalid ep0 maxpacket: 16
[  968.614422][ T5940] usb usb6-port1: unable to enumerate USB device
[  969.730280][T17411] CIFS: Unable to determine destination address
[  970.835375][T17429] syz_tun: entered allmulticast mode
[  971.461983][T17425] syz_tun: left allmulticast mode
[  971.959198][T17430] overlayfs: conflicting lowerdir path
[  972.014383][   T30] audit: type=1400 audit(1752472678.172:7124): avc:  denied  { ioctl } for  pid=17433 comm="syz.3.2942" path="socket:[65761]" dev="sockfs" ino=65761 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  972.057442][T17431] 9pnet: Could not find request transport: 0xffffffffffffffff
[  972.172757][   T30] audit: type=1400 audit(1752472678.222:7125): avc:  denied  { create } for  pid=17421 comm="syz.6.2939" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  973.715846][T17470] netlink: 'syz.2.2951': attribute type 1 has an invalid length.
[  974.747020][T17490] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2954'.
[  974.765507][T17490] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2954'.
[  974.916871][T17497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'.
[  975.446189][ T5886] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  975.616995][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  975.759896][T17508] tipc: Started in network mode
[  975.764957][T17508] tipc: Node identity 96358f3b363, cluster identity 4711
[  975.772662][T17508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  975.820446][T17508] tipc: Resetting bearer <eth:syzkaller0>
[  976.143436][T17515] FAT-fs (nullb0): bogus number of reserved sectors
[  976.200751][T17515] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  976.765703][ T5886] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  976.785137][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.815157][T12720] tipc: Node number set to 2684718907
[  976.868427][ T5886] usb 7-1: config 0 descriptor??
[  976.898620][T17507] tipc: Disabling bearer <eth:syzkaller0>
[  977.284661][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.308696][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.325120][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.333036][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.398187][T17527] syz_tun: entered allmulticast mode
[  977.465327][T17526] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  977.769373][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.778670][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.785554][ T5886] kye 0003:0458:0153.0035: unknown main item tag 0x0
[  977.794586][ T5886] kye 0003:0458:0153.0035: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0
[  977.909382][   T30] audit: type=1400 audit(1752472684.073:7126): avc:  denied  { name_bind } for  pid=17528 comm="syz.3.2966" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  977.917694][ T5886] usb 7-1: USB disconnect, device number 14
[  977.965183][T17521] syz_tun: left allmulticast mode
[  978.031368][   T30] audit: type=1400 audit(1752472684.193:7127): avc:  denied  { read } for  pid=17530 comm="syz.4.2967" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  978.184450][ T5940] libceph: connect (1)[c::]:6789 error -101
[  978.192208][ T5940] libceph: mon0 (1)[c::]:6789 connect error
[  978.495683][T17531] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  978.515532][T17531] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  978.533540][T17531] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  978.539645][T17531] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  978.561980][T17531] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  978.580856][T17531] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  978.592965][T17531] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  978.600292][T17531] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  978.756092][T12720] libceph: connect (1)[c::]:6789 error -101
[  978.762415][T12720] libceph: mon0 (1)[c::]:6789 connect error
[  978.872387][ T5940] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  979.127088][ T5940] usb 3-1: config index 0 descriptor too short (expected 69, got 36)
[  979.151958][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.357180][T17536] ceph: No mds server is up or the cluster is laggy
[  979.366012][ T5940] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  979.367160][ T5886] hid-generic 0000:0000:0000.0036: item fetching failed at offset 0/1
[  979.376900][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.391629][T12720] libceph: connect (1)[c::]:6789 error -101
[  979.398062][T12720] libceph: mon0 (1)[c::]:6789 connect error
[  979.404105][ T5940] usb 3-1: Product: syz
[  979.409398][ T5940] usb 3-1: Manufacturer: syz
[  979.411394][ T5886] hid-generic 0000:0000:0000.0036: probe with driver hid-generic failed with error -22
[  979.414093][ T5940] usb 3-1: SerialNumber: syz
[  979.453957][ T5940] usb 3-1: config 0 descriptor??
[  979.493060][ T5940] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  980.544513][ T5940] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110
[  980.610926][ T5940] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  982.096240][T17561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  982.414854][ T5933] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  982.584193][ T5940] usb 3-1: USB disconnect, device number 118
[  982.743518][ T5933] usb 7-1: config 0 has an invalid interface number: 214 but max is 0
[  982.752480][ T5933] usb 7-1: config 0 has no interface number 0
[  982.759170][ T5933] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  982.772180][ T5933] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  982.783734][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.793401][ T5933] usb 7-1: Product: syz
[  982.813258][ T5933] usb 7-1: Manufacturer: syz
[  982.878557][ T5933] usb 7-1: SerialNumber: syz
[  982.962949][ T5933] usb 7-1: config 0 descriptor??
[  983.292331][T17597] siw: device registration error -23
[  983.853414][ T5933] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0
[  983.868579][ T5933] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5
[  984.357212][ T5886] usb 7-1: USB disconnect, device number 15
[  984.410742][T17609] netlink: 'syz.2.2986': attribute type 1 has an invalid length.
[  984.587587][   T30] audit: type=1400 audit(2000000005.200:7128): avc:  denied  { connect } for  pid=17611 comm="syz.5.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  984.952690][T17622] tipc: Started in network mode
[  984.957797][T17622] tipc: Node identity d242dfeedcb2, cluster identity 4711
[  984.965444][T17622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  985.017774][T17622] tipc: Resetting bearer <eth:syzkaller0>
[  985.999175][T17621] tipc: Disabling bearer <eth:syzkaller0>
[  986.005007][ T5886] tipc: Node number set to 250666990
[  986.192695][T17638] binder: 17634:17638 ioctl 81f8943c 2000000003c0 returned -22
[  986.225065][ T5933] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  986.265397][   T30] audit: type=1400 audit(2000000006.830:7129): avc:  denied  { setopt } for  pid=17636 comm="syz.5.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  986.400358][ T5933] usb 4-1: Using ep0 maxpacket: 16
[  986.463259][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  986.574532][   T30] audit: type=1400 audit(2000000006.910:7130): avc:  denied  { write } for  pid=17631 comm="syz.2.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  986.594065][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  986.615282][ T5933] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  986.631875][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.641166][ T5933] usb 4-1: Product: syz
[  986.682316][ T5933] usb 4-1: Manufacturer: syz
[  986.692520][ T5933] usb 4-1: SerialNumber: syz
[  986.728528][ T5933] usb 4-1: config 0 descriptor??
[  986.757512][ T5933] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  986.809900][ T5933] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  987.603640][T17655] netlink: 'syz.6.2998': attribute type 1 has an invalid length.
[  987.922372][ T5933] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  987.930324][ T5933] em28xx 4-1:0.0: Config register raw data: 0x56
[  988.020172][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3001'.
[  988.373546][ T5933] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  988.392778][ T5933] em28xx 4-1:0.0: No AC97 audio processor
[  988.865671][T17679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  988.881506][T17679] tipc: Resetting bearer <eth:syzkaller0>
[  989.585381][T17677] CIFS: Unable to determine destination address
[  989.655539][T12720] usb 4-1: USB disconnect, device number 123
[  989.662300][T12720] em28xx 4-1:0.0: Disconnecting em28xx
[  989.672399][T12720] em28xx 4-1:0.0: Freeing device
[  989.683534][T17678] tipc: Disabling bearer <eth:syzkaller0>
[  990.729151][T17698] wg1 speed is unknown, defaulting to 1000
[  991.080375][T17707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3016'.
[  992.278782][T17713] xt_nfacct: accounting object `syz1' does not exists
[  992.439698][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  992.637657][T17731] netlink: 'syz.3.3021': attribute type 1 has an invalid length.
[  993.151077][T17731] bond2 (unregistering): Released all slaves
[  993.548615][   T30] audit: type=1400 audit(2000000014.160:7131): avc:  denied  { bind } for  pid=17743 comm="syz.2.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  994.174500][T17753] netlink: 'syz.4.3028': attribute type 1 has an invalid length.
[  994.745394][T12720] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  994.759391][T17771] syz_tun: entered allmulticast mode
[  994.904901][T12720] usb 4-1: device descriptor read/64, error -71
[  995.666649][T12720] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  995.725645][T17762] syz_tun: left allmulticast mode
[  995.815176][T12720] usb 4-1: device descriptor read/64, error -71
[  995.925180][T12720] usb usb4-port1: attempt power cycle
[  996.079130][T17789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  996.089399][T17789] syzkaller0: entered promiscuous mode
[  996.094964][T17789] syzkaller0: entered allmulticast mode
[  997.066844][T17786] delete_channel: no stack
[  997.165153][T12720] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  997.187449][T17790] tipc: Resetting bearer <eth:syzkaller0>
[  997.224313][T17785] tipc: Resetting bearer <eth:syzkaller0>
[  997.282625][T17785] tipc: Disabling bearer <eth:syzkaller0>
[  997.395048][T12720] usb 4-1: device not accepting address 126, error -71
[  997.562536][T17804] netlink: 'syz.5.3044': attribute type 1 has an invalid length.
[  997.679350][   T30] audit: type=1400 audit(2000000018.290:7132): avc:  denied  { name_connect } for  pid=17808 comm="syz.6.3045" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  997.732674][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3045'.
[  998.204917][T12720] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[  998.239542][T12720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  998.271474][T12720] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  998.364816][T12720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.383966][T12720] usb 4-1: config 0 descriptor??
[  998.516383][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3047'.
[  998.554991][   T30] audit: type=1400 audit(2000000019.160:7133): avc:  denied  { module_load } for  pid=17820 comm="syz.5.3049" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  998.774915][   T30] audit: type=1400 audit(2000000019.380:7134): avc:  denied  { read write } for  pid=17828 comm="syz.2.3051" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  998.801487][   T30] audit: type=1400 audit(2000000019.420:7135): avc:  denied  { open } for  pid=17828 comm="syz.2.3051" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  998.867105][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.873822][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.888178][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.903918][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.911267][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.918452][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.925574][T12720] kye 0003:0458:0153.0037: unknown main item tag 0x0
[  998.948510][T12720] kye 0003:0458:0153.0037: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[  999.017658][T12720] usb 4-1: USB disconnect, device number 127
[  999.359162][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3055'.
[  999.441098][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3055'.
[  999.450173][T17845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3055'.
[  999.896525][   T30] audit: type=1400 audit(2000000020.500:7136): avc:  denied  { write } for  pid=17847 comm="syz.2.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1000.180110][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'.
[ 1000.194985][   T30] audit: type=1400 audit(2000000020.810:7137): avc:  denied  { name_bind } for  pid=17851 comm="syz.5.3057" path="socket:[66934]" dev="sockfs" ino=66934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1000.446970][T17867] pim6reg: entered allmulticast mode
[ 1000.569248][T17868] overlayfs: missing 'lowerdir'
[ 1001.292537][T17874] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1001.304916][   T30] audit: type=1400 audit(2000000021.890:7138): avc:  denied  { mount } for  pid=17873 comm="syz.4.3063" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1001.427425][T17874] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.437065][T17874] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.558560][T17881] xt_limit: Overflow, try lower: 0/0
[ 1001.945803][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'.
[ 1002.337812][   T30] audit: type=1400 audit(2000000022.950:7139): avc:  denied  { unmount } for  pid=17254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1002.604968][ T5933] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[ 1002.781013][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1002.807686][ T5933] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[ 1002.840673][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.860355][ T5933] usb 7-1: config 0 descriptor??
[ 1003.610753][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.618080][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.634862][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.665489][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.669760][T17915] overlayfs: missing 'lowerdir'
[ 1003.674831][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.684869][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.691573][ T5933] kye 0003:0458:0153.0038: unknown main item tag 0x0
[ 1003.723037][ T5933] kye 0003:0458:0153.0038: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0
[ 1003.996769][ T5933] usb 7-1: USB disconnect, device number 16
[ 1004.485997][T17926] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3078'.
[ 1005.583163][T17942] netlink: 'syz.5.3081': attribute type 1 has an invalid length.
[ 1005.944925][ T5888] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[ 1006.746290][ T5888] usb 3-1: config index 0 descriptor too short (expected 69, got 36)
[ 1006.754413][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1006.815384][ T5888] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 1006.827703][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.844901][ T5888] usb 3-1: Product: syz
[ 1006.849128][ T5888] usb 3-1: Manufacturer: syz
[ 1006.853707][ T5888] usb 3-1: SerialNumber: syz
[ 1006.885576][ T5888] usb 3-1: config 0 descriptor??
[ 1006.896797][ T5888] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1007.847120][T17968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1007.858670][T17968] syzkaller0: entered promiscuous mode
[ 1007.869909][T17968] syzkaller0: entered allmulticast mode
[ 1007.932154][ T5888] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60
[ 1008.973597][ T5933] tipc: Node number set to 2007122459
[ 1008.993040][ T5888] usb 3-1: USB disconnect, device number 119
[ 1009.134338][T17970] tipc: Resetting bearer <eth:syzkaller0>
[ 1009.204670][T17960] tipc: Resetting bearer <eth:syzkaller0>
[ 1009.273692][T17960] tipc: Disabling bearer <eth:syzkaller0>
[ 1010.605755][T17987] FAULT_INJECTION: forcing a failure.
[ 1010.605755][T17987] name failslab, interval 1, probability 0, space 0, times 0
[ 1010.665604][T17987] CPU: 1 UID: 0 PID: 17987 Comm: syz.2.3097 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[ 1010.665632][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1010.665650][T17987] Call Trace:
[ 1010.665656][T17987]  <TASK>
[ 1010.665664][T17987]  dump_stack_lvl+0x16c/0x1f0
[ 1010.665693][T17987]  should_fail_ex+0x512/0x640
[ 1010.665722][T17987]  should_failslab+0xc2/0x120
[ 1010.665749][T17987]  kmem_cache_alloc_noprof+0x6d/0x3b0
[ 1010.665773][T17987]  ? skb_clone+0x190/0x3f0
[ 1010.665802][T17987]  skb_clone+0x190/0x3f0
[ 1010.665827][T17987]  netlink_deliver_tap+0xabd/0xd30
[ 1010.665861][T17987]  netlink_unicast+0x62f/0x850
[ 1010.665882][T17987]  ? __pfx_netlink_unicast+0x10/0x10
[ 1010.665908][T17987]  netlink_sendmsg+0x8d1/0xdd0
[ 1010.665931][T17987]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1010.665957][T17987]  ____sys_sendmsg+0xa95/0xc70
[ 1010.665976][T17987]  ? copy_msghdr_from_user+0x10a/0x160
[ 1010.666001][T17987]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1010.666033][T17987]  ___sys_sendmsg+0x134/0x1d0
[ 1010.666058][T17987]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1010.666080][T17987]  ? __lock_acquire+0x622/0x1c90
[ 1010.666132][T17987]  __sys_sendmsg+0x16d/0x220
[ 1010.666155][T17987]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1010.666197][T17987]  do_syscall_64+0xcd/0x4c0
[ 1010.666223][T17987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.666242][T17987] RIP: 0033:0x7f014438e929
[ 1010.666257][T17987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1010.666274][T17987] RSP: 002b:00007f01452e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1010.666292][T17987] RAX: ffffffffffffffda RBX: 00007f01445b5fa0 RCX: 00007f014438e929
[ 1010.666304][T17987] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1010.666315][T17987] RBP: 00007f01452e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1010.666326][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1010.666337][T17987] R13: 0000000000000000 R14: 00007f01445b5fa0 R15: 00007fffb1b7d368
[ 1010.666362][T17987]  </TASK>
[ 1011.323494][T17995] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3098'.
[ 1011.333736][T17995] netlink: 'syz.5.3098': attribute type 6 has an invalid length.
[ 1011.341854][T17995] netlink: 'syz.5.3098': attribute type 5 has an invalid length.
[ 1011.350304][T17995] netlink: 'syz.5.3098': attribute type 4 has an invalid length.
[ 1011.369129][T17995] 9pnet_fd: Insufficient options for proto=fd
[ 1013.264307][T18035] kvm: MWAIT instruction emulated as NOP!
[ 1014.411614][ T5886] usb 3-1: new low-speed USB device number 120 using dummy_hcd
[ 1014.586468][ T5886] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1014.625404][ T5886] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1014.637608][ T5886] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1014.653916][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.871307][ T5886] usb 3-1: string descriptor 0 read error: -71
[ 1014.896770][ T5886] hub 3-1:32.0: USB hub found
[ 1014.902676][ T5886] hub 3-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1015.065103][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1015.254118][ T5886] usb 3-1: USB disconnect, device number 120
[ 1015.410831][ T5933] usb 4-1: Using ep0 maxpacket: 16
[ 1015.465952][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.519968][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.612050][ T5933] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1015.696076][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.869204][ T5933] usb 4-1: config 0 descriptor??
[ 1016.413154][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3133'.
[ 1016.426833][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3133'.
[ 1016.833890][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'.
[ 1017.327472][ T5933] ntrig 0003:1B96:0008.0039: nested delimiters
[ 1017.333690][ T5933] ntrig 0003:1B96:0008.0039: item 0 1 2 10 parsing failed
[ 1017.355405][ T5933] ntrig 0003:1B96:0008.0039: parse failed
[ 1017.361235][ T5933] ntrig 0003:1B96:0008.0039: probe with driver ntrig failed with error -22
[ 1017.460892][T18109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1017.840878][T18103] usb 4-1: USB disconnect, device number 2
[ 1017.890561][   T30] audit: type=1400 audit(2000000038.500:7140): avc:  denied  { read } for  pid=18117 comm="syz.6.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1018.280064][T18125] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1020.414862][ T5886] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[ 1020.582793][T18114] delete_channel: no stack
[ 1020.615189][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1020.626629][ T5886] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[ 1020.711983][T18167] Cannot find add_set index 0 as target
[ 1021.127252][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.137387][ T5886] usb 7-1: config 0 descriptor??
[ 1021.230176][   T30] audit: type=1400 audit(2000000041.845:7141): avc:  denied  { bind } for  pid=18171 comm="syz.5.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1021.254861][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1021.854764][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1021.928214][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.935268][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.942185][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.949654][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.956693][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1021.967863][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.975372][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1021.985450][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1021.993528][ T5886] kye 0003:0458:0153.003A: unknown main item tag 0x0
[ 1022.000407][    T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[ 1022.011598][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.019845][ T5886] kye 0003:0458:0153.003A: hidraw0: USB HID v0.06 Device [HID 0458:0153] on usb-dummy_hcd.6-1/input0
[ 1022.032239][    T9] usb 4-1: config 0 descriptor??
[ 1022.134422][ T5886] usb 7-1: USB disconnect, device number 17
[ 1022.218829][T18183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1022.546894][    T9] ntrig 0003:1B96:0008.003B: nested delimiters
[ 1022.553091][    T9] ntrig 0003:1B96:0008.003B: item 0 1 2 10 parsing failed
[ 1022.562349][    T9] ntrig 0003:1B96:0008.003B: parse failed
[ 1022.568215][    T9] ntrig 0003:1B96:0008.003B: probe with driver ntrig failed with error -22
[ 1022.703767][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'.
[ 1023.133288][T18103] usb 4-1: USB disconnect, device number 3
[ 1024.822365][T18228] tipc: Started in network mode
[ 1024.827347][T18228] tipc: Node identity f66985d66382, cluster identity 4711
[ 1024.841629][T18228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1024.843090][ T5940] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1024.863659][T18228] syzkaller0: entered promiscuous mode
[ 1024.869183][T18228] syzkaller0: entered allmulticast mode
[ 1025.258589][T18231] tipc: Resetting bearer <eth:syzkaller0>
[ 1025.344918][T18235] Invalid logical block size (117440512)
[ 1025.908479][T18224] tipc: Resetting bearer <eth:syzkaller0>
[ 1025.942404][T18224] tipc: Disabling bearer <eth:syzkaller0>
[ 1026.153228][T18239] veth0: entered promiscuous mode
[ 1026.163277][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'.
[ 1026.952026][ T5940] usb 4-1: Using ep0 maxpacket: 32
[ 1026.967553][ T5940] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1026.998018][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1027.007022][ T5940] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[ 1027.019801][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1027.028070][ T5940] usb 4-1: Product: syz
[ 1027.040674][ T5940] usb 4-1: config 0 descriptor??
[ 1027.663907][ T5940] waterforce 0003:1044:7A4D.003C: unknown main item tag 0x0
[ 1027.671254][ T5940] waterforce 0003:1044:7A4D.003C: unknown main item tag 0x0
[ 1027.678647][ T5940] waterforce 0003:1044:7A4D.003C: unknown main item tag 0x0
[ 1027.686005][ T5940] waterforce 0003:1044:7A4D.003C: unknown main item tag 0x0
[ 1027.693509][ T5940] waterforce 0003:1044:7A4D.003C: unknown main item tag 0x0
[ 1027.705865][ T5940] waterforce 0003:1044:7A4D.003C: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1027.767385][T18222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.807451][T18222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.240434][ T5940] waterforce 0003:1044:7A4D.003C: fw version request failed with -38
[ 1029.328772][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3180'.
[ 1029.688561][ T5941] usb 4-1: USB disconnect, device number 4
[ 1029.785806][   T30] audit: type=1400 audit(2000000050.369:7142): avc:  denied  { remount } for  pid=18277 comm="syz.5.3181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1029.856884][T18280] pvfs2: Unknown parameter '00000000000000000003'
[ 1029.910376][T18282] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3184'.
[ 1030.056571][T18289] overlayfs: missing 'lowerdir'
[ 1030.545398][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3187'.
[ 1030.569237][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3187'.
[ 1031.705210][T18315] syzkaller1: entered promiscuous mode
[ 1031.735946][T18315] syzkaller1: entered allmulticast mode
[ 1032.418886][T18336] syz_tun: entered allmulticast mode
[ 1032.642137][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3200'.
[ 1032.663327][   T30] audit: type=1400 audit(2000000053.271:7143): avc:  denied  { getopt } for  pid=18337 comm="syz.3.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1032.693521][T18318] syz_tun: left allmulticast mode
[ 1033.218367][T18353] overlayfs: missing 'lowerdir'
[ 1033.693085][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'.
[ 1034.038300][T18367] syz_tun: entered allmulticast mode
[ 1034.659905][T18362] syz_tun: left allmulticast mode
[ 1034.737571][T18371] syz_tun: entered allmulticast mode
[ 1035.303425][T18368] syz_tun: left allmulticast mode
[ 1037.868797][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3220'.
[ 1038.256499][T18405] syz_tun: entered allmulticast mode
[ 1038.312368][T18403] syz_tun: left allmulticast mode
[ 1039.126383][T18422] overlayfs: missing 'lowerdir'
[ 1039.518395][T18429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1040.309420][T18441] FAULT_INJECTION: forcing a failure.
[ 1040.309420][T18441] name failslab, interval 1, probability 0, space 0, times 0
[ 1040.322166][T18441] CPU: 1 UID: 0 PID: 18441 Comm: syz.4.3231 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[ 1040.322183][T18441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1040.322190][T18441] Call Trace:
[ 1040.322194][T18441]  <TASK>
[ 1040.322199][T18441]  dump_stack_lvl+0x16c/0x1f0
[ 1040.322220][T18441]  should_fail_ex+0x512/0x640
[ 1040.322238][T18441]  should_failslab+0xc2/0x120
[ 1040.322256][T18441]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1040.322271][T18441]  ? __hw_addr_add_ex+0x3c9/0x7c0
[ 1040.322284][T18441]  __hw_addr_add_ex+0x3c9/0x7c0
[ 1040.322302][T18441]  ? __pfx___hw_addr_add_ex+0x10/0x10
[ 1040.322314][T18441]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1040.322331][T18441]  dev_uc_add+0xb6/0x110
[ 1040.322344][T18441]  macsec_set_mac_address+0x35e/0x5d0
[ 1040.322360][T18441]  ? __pfx_macsec_set_mac_address+0x10/0x10
[ 1040.322374][T18441]  ? ib_device_get_by_netdev+0x1c2/0x520
[ 1040.322386][T18441]  ? vxlan_netdevice_event+0x11f/0x370
[ 1040.322403][T18441]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[ 1040.322415][T18441]  ? __pfx_vxlan_netdevice_event+0x10/0x10
[ 1040.322432][T18441]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1040.322446][T18441]  ? ip6_route_dev_notify+0xe4/0x750
[ 1040.322464][T18441]  ? ndisc_netdev_event+0xa1/0x560
[ 1040.322484][T18441]  ? notifier_call_chain+0x369/0x410
[ 1040.322506][T18441]  ? __pfx_ip6_route_dev_notify+0x10/0x10
[ 1040.322529][T18441]  netif_set_mac_address+0x303/0x4a0
[ 1040.322546][T18441]  ? __pfx_netif_set_mac_address+0x10/0x10
[ 1040.322565][T18441]  ? __pfx_down_write+0x10/0x10
[ 1040.322582][T18441]  ? __asan_memset+0x23/0x50
[ 1040.322597][T18441]  do_setlink.constprop.0+0x75f/0x4380
[ 1040.322618][T18441]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[ 1040.322636][T18441]  ? stack_trace_save+0x8e/0xc0
[ 1040.322653][T18441]  ? __lock_acquire+0xb8a/0x1c90
[ 1040.322665][T18441]  ? find_held_lock+0x2b/0x80
[ 1040.322682][T18441]  ? __mutex_trylock_common+0xe9/0x250
[ 1040.322694][T18441]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1040.322706][T18441]  ? __pfx___might_resched+0x10/0x10
[ 1040.322722][T18441]  ? rcu_is_watching+0x12/0xc0
[ 1040.322737][T18441]  ? trace_contention_end+0xdd/0x130
[ 1040.322752][T18441]  ? __mutex_lock+0x1ca/0xb90
[ 1040.322769][T18441]  ? rtnl_newlink+0x600/0x2000
[ 1040.322790][T18441]  ? full_name_hash+0xbc/0x110
[ 1040.322809][T18441]  ? netdev_name_node_lookup+0x127/0x180
[ 1040.322824][T18441]  rtnl_newlink+0x1446/0x2000
[ 1040.322845][T18441]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1040.322859][T18441]  ? find_held_lock+0x2b/0x80
[ 1040.322874][T18441]  ? avc_has_perm_noaudit+0x117/0x3b0
[ 1040.322887][T18441]  ? avc_has_perm_noaudit+0x149/0x3b0
[ 1040.322902][T18441]  ? __lock_acquire+0x622/0x1c90
[ 1040.322919][T18441]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1040.322935][T18441]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1040.322949][T18441]  ? rtnetlink_rcv_msg+0x93a/0xe90
[ 1040.322966][T18441]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1040.322982][T18441]  rtnetlink_rcv_msg+0x95b/0xe90
[ 1040.323000][T18441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1040.323020][T18441]  ? ref_tracker_free+0x37c/0x830
[ 1040.323037][T18441]  netlink_rcv_skb+0x158/0x420
[ 1040.323051][T18441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1040.323068][T18441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1040.323084][T18441]  ? netlink_deliver_tap+0x1ae/0xd30
[ 1040.323104][T18441]  netlink_unicast+0x58a/0x850
[ 1040.323117][T18441]  ? __pfx_netlink_unicast+0x10/0x10
[ 1040.323131][T18441]  netlink_sendmsg+0x8d1/0xdd0
[ 1040.323144][T18441]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1040.323160][T18441]  ____sys_sendmsg+0xa95/0xc70
[ 1040.323171][T18441]  ? copy_msghdr_from_user+0x10a/0x160
[ 1040.323187][T18441]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1040.323204][T18441]  ___sys_sendmsg+0x134/0x1d0
[ 1040.323220][T18441]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1040.323234][T18441]  ? __lock_acquire+0x622/0x1c90
[ 1040.323260][T18441]  __sys_sendmsg+0x16d/0x220
[ 1040.323276][T18441]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1040.323305][T18441]  do_syscall_64+0xcd/0x4c0
[ 1040.323322][T18441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.323334][T18441] RIP: 0033:0x7fa06678e929
[ 1040.323344][T18441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1040.323355][T18441] RSP: 002b:00007fa067682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1040.323366][T18441] RAX: ffffffffffffffda RBX: 00007fa0669b5fa0 RCX: 00007fa06678e929
[ 1040.323373][T18441] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1040.323380][T18441] RBP: 00007fa067682090 R08: 0000000000000000 R09: 0000000000000000
[ 1040.323386][T18441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1040.323393][T18441] R13: 0000000000000000 R14: 00007fa0669b5fa0 R15: 00007ffd6cda69c8
[ 1040.323406][T18441]  </TASK>
[ 1041.064769][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3235'.
[ 1041.084995][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1042.394484][ T5913] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1042.870156][ T5913] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1042.895170][ T5913] usb 7-1: can't read configurations, error -61
[ 1043.064261][ T5913] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1043.451784][ T5913] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1043.475698][ T5913] usb 7-1: can't read configurations, error -61
[ 1043.494100][ T5913] usb usb7-port1: attempt power cycle
[ 1043.695517][   T30] audit: type=1400 audit(2000000064.326:7144): avc:  denied  { accept } for  pid=18485 comm="syz.5.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1043.864312][ T5913] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1043.888924][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1043.901300][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1043.910242][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1043.920692][ T5913] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1043.928466][ T5913] usb 7-1: can't read configurations, error -61
[ 1043.935578][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1043.947802][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1044.009957][   T30] audit: type=1400 audit(2000000064.636:7145): avc:  denied  { connect } for  pid=18490 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1044.035106][T15354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1044.087402][   T30] audit: type=1400 audit(2000000064.717:7146): avc:  denied  { listen } for  pid=18490 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1044.087449][T15354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1044.116036][ T5913] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1044.180831][T15354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1044.193170][T15354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1044.203719][ T5913] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1044.213015][ T5913] usb 7-1: can't read configurations, error -61
[ 1044.219785][ T5913] usb usb7-port1: unable to enumerate USB device
[ 1044.226595][T15354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1044.260974][T18488] wg1 speed is unknown, defaulting to 1000
[ 1044.435807][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3248'.
[ 1044.723483][T18499] overlayfs: missing 'lowerdir'
[ 1044.822720][T18468] delete_channel: no stack
[ 1045.272835][ T6645] syz_tun (unregistering): left allmulticast mode
[ 1045.422839][T18103] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1045.778557][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3254'.
[ 1046.009212][T18103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1046.045558][ T5913] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1046.057747][T18103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.068009][T18103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1046.081984][T18103] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1046.091272][T18103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.159680][  T197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.173754][  T197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.190532][T18103] usb 3-1: config 0 descriptor??
[ 1046.252503][ T5913] usb 7-1: Using ep0 maxpacket: 32
[ 1046.262484][T15354] Bluetooth: hci2: command tx timeout
[ 1046.341166][ T5913] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1046.365623][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[ 1046.380958][ T5913] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[ 1046.402418][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.475425][ T5913] usb 7-1: config 0 descriptor??
[ 1046.575259][  T197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.592384][  T197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.625857][T18103] plantronics 0003:047F:FFFF.003D: reserved main item tag 0xd
[ 1046.687783][ T5913] usb 7-1: string descriptor 0 read error: -71
[ 1046.702437][T18488] chnl_net:caif_netlink_parms(): no params data found
[ 1046.710482][ T5913] usbhid 7-1:0.0: can't add hid device: -71
[ 1046.718151][T18103] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1046.722373][ T5913] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1046.767229][ T5913] usb 7-1: USB disconnect, device number 22
[ 1046.806051][  T197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1046.833731][  T197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1046.967316][T18488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.975484][T18505] overlay: ./bus is not a directory
[ 1046.985638][   T43] usb 3-1: USB disconnect, device number 121
[ 1047.012331][T18488] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.043839][T18488] bridge_slave_0: entered allmulticast mode
[ 1047.067343][T18488] bridge_slave_0: entered promiscuous mode
[ 1047.114390][  T197] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1047.140895][  T197] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.166851][T18488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.174478][T18488] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.182211][T18488] bridge_slave_1: entered allmulticast mode
[ 1047.196447][T18488] bridge_slave_1: entered promiscuous mode
[ 1047.308855][T18488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.350688][T18488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1048.310893][T18488] team0: Port device team_slave_0 added
[ 1048.341589][T15354] Bluetooth: hci2: command tx timeout
[ 1048.509054][T18488] team0: Port device team_slave_1 added
[ 1048.577053][T18549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1048.589935][T18549] ubi31: attaching mtd0
[ 1048.612195][T18549] ubi31: scanning is finished
[ 1048.616992][T18549] ubi31: empty MTD device detected
[ 1049.016564][T18549] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1049.024279][T18549] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1049.031618][T18549] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1049.038624][T18549] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1049.046093][T18549] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1049.052941][T18549] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1049.061980][T18549] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1073810890
[ 1049.072114][T18549] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1049.099688][T18554] ubi31: background thread "ubi_bgt31d" started, PID 18554
[ 1050.422943][T15354] Bluetooth: hci2: command tx timeout
[ 1050.668124][  T197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1050.678189][  T197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1050.687685][  T197] bond0 (unregistering): Released all slaves
[ 1050.777472][  T197] bond1 (unregistering): Released all slaves
[ 1050.797058][T18488] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1050.804207][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1050.830084][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1050.836490][T18488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1050.857084][T18488] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1050.864809][T18488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1050.891918][T18488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1050.941951][  T197] tipc: Left network mode
[ 1051.076940][T18488] hsr_slave_0: entered promiscuous mode
[ 1051.084593][T18488] hsr_slave_1: entered promiscuous mode
[ 1051.092104][T18488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1051.099744][T18488] Cannot create hsr debugfs directory
[ 1051.437638][  T197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1051.445751][  T197] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1051.918962][  T197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.934804][  T197] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.960541][  T197] veth1_macvtap: left promiscuous mode
[ 1051.976466][  T197] veth0_macvtap: left promiscuous mode
[ 1051.996470][  T197] veth1_vlan: left promiscuous mode
[ 1052.051515][T18595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3274'.
[ 1052.219877][   T30] audit: type=1400 audit(2000000072.841:7147): avc:  denied  { accept } for  pid=18596 comm="syz.2.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1052.459321][T18103] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[ 1052.509223][ T5836] Bluetooth: hci2: command tx timeout
[ 1052.821320][T13057] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1053.002292][T18103] usb 7-1: config index 0 descriptor too short (expected 69, got 36)
[ 1053.017642][T18103] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.039470][T18103] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 1053.048543][T18103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.058696][T18103] usb 7-1: Product: syz
[ 1053.071040][T18103] usb 7-1: Manufacturer: syz
[ 1053.075744][T18103] usb 7-1: SerialNumber: syz
[ 1053.107579][T18103] usb 7-1: config 0 descriptor??
[ 1053.118616][T18103] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1053.265221][  T197] team0 (unregistering): Port device team_slave_1 removed
[ 1053.312347][  T197] team0 (unregistering): Port device team_slave_0 removed
[ 1053.729913][T18593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.740297][T18593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.837575][T18602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1053.853332][T18607] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1053.869103][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.964310][T18103] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[ 1053.984945][T18103] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71
[ 1054.053031][T18103] usb 7-1: USB disconnect, device number 23
[ 1054.293282][  T197] IPVS: stop unused estimator thread 0...
[ 1054.418382][ T5836] Bluetooth: hci3: command 0x1003 tx timeout
[ 1054.425316][ T5832] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1054.457629][T18488] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1054.593139][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[ 1054.617147][T18488] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1054.682670][T18488] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1054.861602][T18488] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1055.238624][T18488] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1055.256540][T18488] 8021q: adding VLAN 0 to HW filter on device team0
[ 1055.324106][T13059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.331269][T13059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1055.339237][   T30] audit: type=1400 audit(2000000075.972:7148): avc:  denied  { ioctl } for  pid=18639 comm="syz.6.3284" path="socket:[71537]" dev="sockfs" ino=71537 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1055.347508][T13059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.371889][T13059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1055.742041][T18647] syz.6.3284: attempt to access beyond end of device
[ 1055.742041][T18647] loop6: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1055.755212][T18647] vxfs: unable to read disk superblock at 1
[ 1055.761614][T18647] syz.6.3284: attempt to access beyond end of device
[ 1055.761614][T18647] loop6: rw=0, sector=16, nr_sectors = 2 limit=0
[ 1055.775349][T18647] vxfs: unable to read disk superblock at 8
[ 1055.781423][T18647] vxfs: can't find superblock.
[ 1056.388373][T18103] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1056.548990][T18660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1056.558797][T18660] syzkaller0: entered promiscuous mode
[ 1056.564290][T18660] syzkaller0: entered allmulticast mode
[ 1057.259319][T18103] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1057.268420][T18103] usb 3-1: can't read configurations, error -61
[ 1057.314592][T18661] tipc: Resetting bearer <eth:syzkaller0>
[ 1057.370854][T18655] tipc: Resetting bearer <eth:syzkaller0>
[ 1057.398602][T18103] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1058.007248][   T30] audit: type=1400 audit(2000000078.633:7149): avc:  denied  { create } for  pid=18670 comm="syz.5.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1058.192746][T18103] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 1058.246265][T18655] tipc: Disabling bearer <eth:syzkaller0>
[ 1058.260404][T18103] usb 3-1: can't read configurations, error -61
[ 1058.277229][T18103] usb usb3-port1: attempt power cycle
[ 1058.499758][T18488] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1058.616439][T18103] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1058.683882][T18488] veth0_vlan: entered promiscuous mode
[ 1059.035575][T18488] veth1_vlan: entered promiscuous mode
[ 1059.052364][T18648] delete_channel: no stack
[ 1059.056938][T18103] usb 3-1: device descriptor read/8, error -71
[ 1059.160748][T18488] veth0_macvtap: entered promiscuous mode
[ 1059.207686][T18488] veth1_macvtap: entered promiscuous mode
[ 1059.249511][T18488] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1059.280053][T18488] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1059.299402][T18488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.345187][T18488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.395263][T18488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.404438][T18488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.121790][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.129808][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.166649][T13069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1060.205844][T13069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.530017][T18710] syz_tun: entered allmulticast mode
[ 1061.157140][T18704] syz_tun: left allmulticast mode
[ 1061.384843][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1061.671346][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1061.679219][ T5913] usb 4-1: can't read configurations, error -61
[ 1061.704719][T18103] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1061.801999][T18726] Cannot find add_set index 0 as target
[ 1061.818838][T18726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input62
[ 1062.195904][ T5913] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1062.205752][T18103] usb 7-1: device descriptor read/64, error -71
[ 1062.356268][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1062.504279][ T5913] usb 4-1: can't read configurations, error -61
[ 1062.504341][T18103] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1062.530160][ T5913] usb usb4-port1: attempt power cycle
[ 1062.803415][T18742] netlink: 'syz.2.3310': attribute type 62 has an invalid length.
[ 1063.167930][T18103] usb 7-1: device descriptor read/64, error -71
[ 1063.233884][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1063.266468][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1063.279405][ T5913] usb 4-1: can't read configurations, error -61
[ 1063.297315][T18103] usb usb7-port1: attempt power cycle
[ 1063.524907][T18753] trusted_key: encrypted_key: insufficient parameters specified
[ 1063.544052][ T5913] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1063.614524][T18754] Cannot find add_set index 0 as target
[ 1063.992104][ T5913] usb 4-1: device descriptor read/all, error -71
[ 1064.003754][T18103] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1064.006171][ T5913] usb usb4-port1: unable to enumerate USB device
[ 1064.034013][T18103] usb 7-1: device descriptor read/8, error -71
[ 1064.325299][T18764] overlayfs: missing 'lowerdir'
[ 1066.111465][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'.
[ 1066.174458][T18795] bond0: Error: Cannot enslave bond to itself.
[ 1066.674698][T18799] netlink: 'syz.5.3326': attribute type 4 has an invalid length.
[ 1066.690489][T18799] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3326'.
[ 1066.827924][T18799] wlan1: mtu less than device minimum
[ 1067.575516][T18811] Bluetooth: MGMT ver 1.23
[ 1067.588386][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'.
[ 1067.654933][T18817] overlayfs: missing 'lowerdir'
[ 1067.863954][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1068.041519][ T5913] usb 4-1: Using ep0 maxpacket: 8
[ 1068.060315][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1068.454697][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.474464][ T5913] usb 4-1: Product: syz
[ 1068.484554][ T5913] usb 4-1: Manufacturer: syz
[ 1068.489210][ T5913] usb 4-1: SerialNumber: syz
[ 1068.602192][ T5913] usb 4-1: config 0 descriptor??
[ 1069.472122][ T5913] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 1070.447826][ T5913] usb write operation failed. (-71)
[ 1070.454656][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1070.480672][ T5913] dvbdev: DVB: registering new adapter (Terratec H7)
[ 1070.511875][ T5913] usb 4-1: media controller created
[ 1070.520078][ T5913] usb read operation failed. (-71)
[ 1070.535382][ T5913] usb write operation failed. (-71)
[ 1070.551195][ T5913] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 1070.607142][ T5913] usb 4-1: USB disconnect, device number 10
[ 1070.820128][T18853] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0
[ 1071.376458][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3345'.
[ 1072.539874][   T30] audit: type=1400 audit(2000000093.171:7150): avc:  denied  { mount } for  pid=18871 comm="syz.2.3346" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 1072.709280][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1072.864290][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.879144][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1072.901146][ T5913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1072.913234][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1072.928625][ T5913] usb 4-1: SerialNumber: syz
[ 1072.929149][T18882] overlayfs: missing 'lowerdir'
[ 1072.949016][ T5933] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[ 1073.304748][ T5933] usb 7-1: device descriptor read/64, error -71
[ 1073.715585][T18888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.781341][T18888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.828599][ T5933] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 1074.002486][ T5933] usb 7-1: device descriptor read/64, error -71
[ 1074.531056][ T5933] usb usb7-port1: attempt power cycle
[ 1074.920678][T18900] netlink: 280 bytes leftover after parsing attributes in process `syz.5.3355'.
[ 1074.938064][ T5933] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[ 1074.954306][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'.
[ 1074.997987][ T5933] usb 7-1: device descriptor read/8, error -71
[ 1075.067009][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3356'.
[ 1075.299712][ T5933] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[ 1075.335589][ T5933] usb 7-1: device descriptor read/8, error -71
[ 1075.362032][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3357'.
[ 1075.371618][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3357'.
[ 1075.450435][ T5933] usb usb7-port1: unable to enumerate USB device
[ 1075.773217][ T5913] usb 4-1: 0:2 : does not exist
[ 1075.786566][ T5913] usb 4-1: unit 5: unexpected type 0x0c
[ 1075.879825][ T5913] usb 4-1: USB disconnect, device number 11
[ 1076.129673][T18914] netlink: 'syz.3.3360': attribute type 3 has an invalid length.
[ 1076.174729][T18914] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3360'.
[ 1076.318794][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3358'.
[ 1076.834692][T18913] sp0: Synchronizing with TNC
[ 1076.940018][T13069] 
[ 1076.942356][T13069] =====================================================
[ 1076.949276][T13069] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[ 1076.956722][T13069] 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 Not tainted
[ 1076.963812][T13069] -----------------------------------------------------
[ 1076.970721][T13069] kworker/u8:17/13069 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1076.978682][T13069] ffffffff8f79a938 (disc_data_lock#3){.+.+}-{3:3}, at: sp_get+0x18/0xf0
[ 1076.987027][T13069] 
[ 1076.987027][T13069] and this task is already holding:
[ 1076.994367][T13069] ffffffff9b0c7db8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[ 1077.003053][T13069] which would create a new lock dependency:
[ 1077.008920][T13069]  (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#3){.+.+}-{3:3}
[ 1077.016761][T13069] 
[ 1077.016761][T13069] but this new dependency connects a HARDIRQ-irq-safe lock:
[ 1077.026187][T13069]  (&port_lock_key){-.-.}-{3:3}
[ 1077.026206][T13069] 
[ 1077.026206][T13069] ... which became HARDIRQ-irq-safe at:
[ 1077.038725][T13069]   lock_acquire+0x179/0x350
[ 1077.043307][T13069]   _raw_spin_lock_irqsave+0x3a/0x60
[ 1077.048585][T13069]   serial8250_handle_irq+0x95/0xcb0
[ 1077.053859][T13069]   serial8250_default_handle_irq+0x9a/0x210
[ 1077.059831][T13069]   serial8250_interrupt+0x103/0x210
[ 1077.065105][T13069]   __handle_irq_event_percpu+0x22c/0x7d0
[ 1077.070813][T13069]   handle_irq_event+0xab/0x1e0
[ 1077.075649][T13069]   handle_edge_irq+0x28e/0xab0
[ 1077.080483][T13069]   __common_interrupt+0xe2/0x250
[ 1077.085491][T13069]   common_interrupt+0xba/0xe0
[ 1077.090240][T13069]   asm_common_interrupt+0x26/0x40
[ 1077.095332][T13069]   pv_native_safe_halt+0xf/0x20
[ 1077.100257][T13069]   default_idle+0x13/0x20
[ 1077.104663][T13069]   default_idle_call+0x6d/0xb0
[ 1077.109493][T13069]   do_idle+0x391/0x510
[ 1077.113633][T13069]   cpu_startup_entry+0x4f/0x60
[ 1077.118470][T13069]   start_secondary+0x21d/0x2b0
[ 1077.123306][T13069]   common_startup_64+0x13e/0x148
[ 1077.128311][T13069] 
[ 1077.128311][T13069] to a HARDIRQ-irq-unsafe lock:
[ 1077.135306][T13069]  (disc_data_lock#3){.+.+}-{3:3}
[ 1077.135333][T13069] 
[ 1077.135333][T13069] ... which became HARDIRQ-irq-unsafe at:
[ 1077.148188][T13069] ...
[ 1077.148193][T13069]   lock_acquire+0x179/0x350
[ 1077.155324][T13069]   _raw_read_lock+0x5f/0x70
[ 1077.159905][T13069]   sp_get+0x18/0xf0
[ 1077.163799][T13069]   sixpack_receive_buf+0x59/0x1c90
[ 1077.168986][T13069]   tty_ldisc_receive_buf+0x15a/0x1a0
[ 1077.174346][T13069]   tty_port_default_receive_buf+0x70/0xb0
[ 1077.180201][T13069]   flush_to_ldisc+0x268/0x780
[ 1077.184981][T13069]   process_one_work+0x9cf/0x1b70
[ 1077.190004][T13069]   worker_thread+0x6c8/0xf10
[ 1077.194672][T13069]   kthread+0x3c5/0x780
[ 1077.198811][T13069]   ret_from_fork+0x5d7/0x6f0
[ 1077.203477][T13069]   ret_from_fork_asm+0x1a/0x30
[ 1077.208313][T13069] 
[ 1077.208313][T13069] other info that might help us debug this:
[ 1077.208313][T13069] 
[ 1077.218521][T13069]  Possible interrupt unsafe locking scenario:
[ 1077.218521][T13069] 
[ 1077.226829][T13069]        CPU0                    CPU1
[ 1077.232191][T13069]        ----                    ----
[ 1077.237544][T13069]   lock(disc_data_lock#3);
[ 1077.242039][T13069]                                local_irq_disable();
[ 1077.248778][T13069]                                lock(&port_lock_key);
[ 1077.255608][T13069]                                lock(disc_data_lock#3);
[ 1077.262617][T13069]   <Interrupt>
[ 1077.266049][T13069]     lock(&port_lock_key);
[ 1077.270553][T13069] 
[ 1077.270553][T13069]  *** DEADLOCK ***
[ 1077.270553][T13069] 
[ 1077.278680][T13069] 6 locks held by kworker/u8:17/13069:
[ 1077.284117][T13069]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1077.295237][T13069]  #1: ffffc900042bfd10 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1077.306265][T13069]  #2: ffff8880261c0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x780
[ 1077.315300][T13069]  #3: ffff888030d340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[ 1077.324592][T13069]  #4: ffffffff9b0c7db8 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30
[ 1077.333715][T13069]  #5: ffff888030d340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80
[ 1077.343010][T13069] 
[ 1077.343010][T13069] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[ 1077.353394][T13069] -> (&port_lock_key){-.-.}-{3:3} {
[ 1077.358588][T13069]    IN-HARDIRQ-W at:
[ 1077.362549][T13069]                     lock_acquire+0x179/0x350
[ 1077.368684][T13069]                     _raw_spin_lock_irqsave+0x3a/0x60
[ 1077.375518][T13069]                     serial8250_handle_irq+0x95/0xcb0
[ 1077.382346][T13069]                     serial8250_default_handle_irq+0x9a/0x210
[ 1077.389884][T13069]                     serial8250_interrupt+0x103/0x210
[ 1077.396718][T13069]                     __handle_irq_event_percpu+0x22c/0x7d0
[ 1077.403996][T13069]                     handle_irq_event+0xab/0x1e0
[ 1077.410393][T13069]                     handle_edge_irq+0x28e/0xab0
[ 1077.416793][T13069]                     __common_interrupt+0xe2/0x250
[ 1077.423367][T13069]                     common_interrupt+0xba/0xe0
[ 1077.429673][T13069]                     asm_common_interrupt+0x26/0x40
[ 1077.436330][T13069]                     pv_native_safe_halt+0xf/0x20
[ 1077.442817][T13069]                     default_idle+0x13/0x20
[ 1077.448800][T13069]                     default_idle_call+0x6d/0xb0
[ 1077.455195][T13069]                     do_idle+0x391/0x510
[ 1077.460918][T13069]                     cpu_startup_entry+0x4f/0x60
[ 1077.467328][T13069]                     start_secondary+0x21d/0x2b0
[ 1077.473733][T13069]                     common_startup_64+0x13e/0x148
[ 1077.480304][T13069]    IN-SOFTIRQ-W at:
[ 1077.484265][T13069]                     lock_acquire+0x179/0x350
[ 1077.490397][T13069]                     _raw_spin_lock_irqsave+0x3a/0x60
[ 1077.497230][T13069]                     serial8250_handle_irq+0x95/0xcb0
[ 1077.504062][T13069]                     serial8250_default_handle_irq+0x9a/0x210
[ 1077.511599][T13069]                     serial8250_interrupt+0x103/0x210
[ 1077.518430][T13069]                     __handle_irq_event_percpu+0x22c/0x7d0
[ 1077.525700][T13069]                     handle_irq_event+0xab/0x1e0
[ 1077.532098][T13069]                     handle_edge_irq+0x28e/0xab0
[ 1077.538499][T13069]                     __common_interrupt+0xe2/0x250
[ 1077.545073][T13069]                     common_interrupt+0x61/0xe0
[ 1077.551384][T13069]                     asm_common_interrupt+0x26/0x40
[ 1077.558044][T13069]                     sched_balance_update_blocked_averages+0x11c5/0x2100
[ 1077.566524][T13069]                     sched_balance_softirq+0x122/0x1a0
[ 1077.573447][T13069]                     handle_softirqs+0x219/0x8e0
[ 1077.579846][T13069]                     __irq_exit_rcu+0x109/0x170
[ 1077.586156][T13069]                     irq_exit_rcu+0x9/0x30
[ 1077.592033][T13069]                     sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1077.599316][T13069]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1077.606937][T13069]                     console_flush_all+0x9a2/0xc60
[ 1077.613510][T13069]                     console_unlock+0xd8/0x210
[ 1077.619736][T13069]                     vprintk_emit+0x418/0x6d0
[ 1077.625874][T13069]                     _printk+0xc7/0x100
[ 1077.631486][T13069]                     kauditd_hold_skb+0x205/0x250
[ 1077.637974][T13069]                     kauditd_send_queue+0x239/0x290
[ 1077.644640][T13069]                     kauditd_thread+0x623/0xa70
[ 1077.650958][T13069]                     kthread+0x3c5/0x780
[ 1077.656661][T13069]                     ret_from_fork+0x5d7/0x6f0
[ 1077.662888][T13069]                     ret_from_fork_asm+0x1a/0x30
[ 1077.669287][T13069]    INITIAL USE at:
[ 1077.673162][T13069]                    lock_acquire+0x179/0x350
[ 1077.679381][T13069]                    _raw_spin_lock_irqsave+0x3a/0x60
[ 1077.686125][T13069]                    serial8250_do_set_termios+0x310/0x1710
[ 1077.693387][T13069]                    serial8250_set_termios+0x6e/0x80
[ 1077.700144][T13069]                    uart_set_options+0x31a/0x5f0
[ 1077.706544][T13069]                    serial8250_console_setup+0x189/0x450
[ 1077.713637][T13069]                    univ8250_console_setup+0x1eb/0x2e0
[ 1077.720552][T13069]                    try_enable_preferred_console+0x2fd/0x530
[ 1077.727996][T13069]                    register_console+0x3ab/0x11b0
[ 1077.734481][T13069]                    univ8250_console_init+0x5f/0x90
[ 1077.741145][T13069]                    console_init+0x14f/0x680
[ 1077.747202][T13069]                    start_kernel+0x29f/0x4d0
[ 1077.753255][T13069]                    x86_64_start_reservations+0x18/0x30
[ 1077.760265][T13069]                    x86_64_start_kernel+0x130/0x190
[ 1077.766931][T13069]                    common_startup_64+0x13e/0x148
[ 1077.773417][T13069]  }
[ 1077.775896][T13069]  ... key      at: [<ffffffff9b0c7020>] port_lock_key+0x0/0x40
[ 1077.783512][T13069] 
[ 1077.783512][T13069] the dependencies between the lock to be acquired
[ 1077.783519][T13069]  and HARDIRQ-irq-unsafe lock:
[ 1077.796997][T13069] -> (disc_data_lock#3){.+.+}-{3:3} {
[ 1077.802380][T13069]    HARDIRQ-ON-R at:
[ 1077.806340][T13069]                     lock_acquire+0x179/0x350
[ 1077.812495][T13069]                     _raw_read_lock+0x5f/0x70
[ 1077.818634][T13069]                     sp_get+0x18/0xf0
[ 1077.824080][T13069]                     sixpack_receive_buf+0x59/0x1c90
[ 1077.830829][T13069]                     tty_ldisc_receive_buf+0x15a/0x1a0
[ 1077.837751][T13069]                     tty_port_default_receive_buf+0x70/0xb0
[ 1077.845110][T13069]                     flush_to_ldisc+0x268/0x780
[ 1077.851422][T13069]                     process_one_work+0x9cf/0x1b70
[ 1077.857992][T13069]                     worker_thread+0x6c8/0xf10
[ 1077.864215][T13069]                     kthread+0x3c5/0x780
[ 1077.869913][T13069]                     ret_from_fork+0x5d7/0x6f0
[ 1077.876146][T13069]                     ret_from_fork_asm+0x1a/0x30
[ 1077.882543][T13069]    SOFTIRQ-ON-R at:
[ 1077.886503][T13069]                     lock_acquire+0x179/0x350
[ 1077.892636][T13069]                     _raw_read_lock+0x5f/0x70
[ 1077.898795][T13069]                     sp_get+0x18/0xf0
[ 1077.904240][T13069]                     sixpack_receive_buf+0x59/0x1c90
[ 1077.910988][T13069]                     tty_ldisc_receive_buf+0x15a/0x1a0
[ 1077.917909][T13069]                     tty_port_default_receive_buf+0x70/0xb0
[ 1077.925269][T13069]                     flush_to_ldisc+0x268/0x780
[ 1077.931583][T13069]                     process_one_work+0x9cf/0x1b70
[ 1077.938150][T13069]                     worker_thread+0x6c8/0xf10
[ 1077.944370][T13069]                     kthread+0x3c5/0x780
[ 1077.950071][T13069]                     ret_from_fork+0x5d7/0x6f0
[ 1077.956299][T13069]                     ret_from_fork_asm+0x1a/0x30
[ 1077.962697][T13069]    INITIAL READ USE at:
[ 1077.967005][T13069]                         lock_acquire+0x179/0x350
[ 1077.973485][T13069]                         _raw_read_lock+0x5f/0x70
[ 1077.979972][T13069]                         sp_get+0x18/0xf0
[ 1077.985767][T13069]                         sixpack_receive_buf+0x59/0x1c90
[ 1077.992871][T13069]                         tty_ldisc_receive_buf+0x15a/0x1a0
[ 1078.000155][T13069]                         tty_port_default_receive_buf+0x70/0xb0
[ 1078.007981][T13069]                         flush_to_ldisc+0x268/0x780
[ 1078.014657][T13069]                         process_one_work+0x9cf/0x1b70
[ 1078.021577][T13069]                         worker_thread+0x6c8/0xf10
[ 1078.028149][T13069]                         kthread+0x3c5/0x780
[ 1078.034197][T13069]                         ret_from_fork+0x5d7/0x6f0
[ 1078.040802][T13069]                         ret_from_fork_asm+0x1a/0x30
[ 1078.047548][T13069]  }
[ 1078.050026][T13069]  ... key      at: [<ffffffff8f79a938>] disc_data_lock+0x18/0xfe0
[ 1078.057905][T13069]  ... acquired at:
[ 1078.061689][T13069]    lock_acquire+0x179/0x350
[ 1078.066348][T13069]    _raw_read_lock+0x5f/0x70
[ 1078.071015][T13069]    sp_get+0x18/0xf0
[ 1078.074982][T13069]    sixpack_write_wakeup+0x20/0x390
[ 1078.080270][T13069]    tty_wakeup+0xe8/0x120
[ 1078.084672][T13069]    tty_port_default_wakeup+0x2a/0x40
[ 1078.090119][T13069]    serial8250_tx_chars+0x68e/0x860
[ 1078.095407][T13069]    __start_tx+0x3e9/0x4a0
[ 1078.099901][T13069]    serial8250_start_tx+0x368/0x530
[ 1078.105175][T13069]    __uart_start+0x295/0x4c0
[ 1078.109848][T13069]    uart_write+0x218/0xb30
[ 1078.114341][T13069]    sixpack_receive_buf+0x3d0/0x1c90
[ 1078.119715][T13069]    tty_ldisc_receive_buf+0x15a/0x1a0
[ 1078.125161][T13069]    tty_port_default_receive_buf+0x70/0xb0
[ 1078.131041][T13069]    flush_to_ldisc+0x268/0x780
[ 1078.135878][T13069]    process_one_work+0x9cf/0x1b70
[ 1078.140980][T13069]    worker_thread+0x6c8/0xf10
[ 1078.145725][T13069]    kthread+0x3c5/0x780
[ 1078.149948][T13069]    ret_from_fork+0x5d7/0x6f0
[ 1078.154699][T13069]    ret_from_fork_asm+0x1a/0x30
[ 1078.159620][T13069] 
[ 1078.161926][T13069] 
[ 1078.161926][T13069] stack backtrace:
[ 1078.167796][T13069] CPU: 1 UID: 0 PID: 13069 Comm: kworker/u8:17 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) 
[ 1078.167816][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1078.167827][T13069] Workqueue: events_unbound flush_to_ldisc
[ 1078.167847][T13069] Call Trace:
[ 1078.167852][T13069]  <TASK>
[ 1078.167857][T13069]  dump_stack_lvl+0x116/0x1f0
[ 1078.167877][T13069]  check_irq_usage+0x7dc/0x920
[ 1078.167907][T13069]  ? check_path.constprop.0+0x24/0x50
[ 1078.167929][T13069]  ? __lock_acquire+0x1285/0x1c90
[ 1078.167940][T13069]  __lock_acquire+0x1285/0x1c90
[ 1078.167954][T13069]  ? lock_acquire+0x179/0x350
[ 1078.167968][T13069]  lock_acquire+0x179/0x350
[ 1078.167980][T13069]  ? sp_get+0x18/0xf0
[ 1078.167998][T13069]  ? ldsem_down_read_trylock+0x11a/0x180
[ 1078.168012][T13069]  ? ldsem_down_read_trylock+0x120/0x180
[ 1078.168025][T13069]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[ 1078.168045][T13069]  _raw_read_lock+0x5f/0x70
[ 1078.168062][T13069]  ? sp_get+0x18/0xf0
[ 1078.168079][T13069]  sp_get+0x18/0xf0
[ 1078.168097][T13069]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[ 1078.168116][T13069]  sixpack_write_wakeup+0x20/0x390
[ 1078.168135][T13069]  ? __pfx_sixpack_write_wakeup+0x10/0x10
[ 1078.168155][T13069]  tty_wakeup+0xe8/0x120
[ 1078.168171][T13069]  tty_port_default_wakeup+0x2a/0x40
[ 1078.168192][T13069]  serial8250_tx_chars+0x68e/0x860
[ 1078.168215][T13069]  __start_tx+0x3e9/0x4a0
[ 1078.168236][T13069]  serial8250_start_tx+0x368/0x530
[ 1078.168257][T13069]  __uart_start+0x295/0x4c0
[ 1078.168273][T13069]  uart_write+0x218/0xb30
[ 1078.168293][T13069]  sixpack_receive_buf+0x3d0/0x1c90
[ 1078.168314][T13069]  ? ldsem_down_read_trylock+0x120/0x180
[ 1078.168328][T13069]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[ 1078.168342][T13069]  ? __pfx_sixpack_receive_buf+0x10/0x10
[ 1078.168362][T13069]  tty_ldisc_receive_buf+0x15a/0x1a0
[ 1078.168382][T13069]  tty_port_default_receive_buf+0x70/0xb0
[ 1078.168403][T13069]  flush_to_ldisc+0x268/0x780
[ 1078.168422][T13069]  ? rcu_is_watching+0x12/0xc0
[ 1078.168441][T13069]  process_one_work+0x9cf/0x1b70
[ 1078.168459][T13069]  ? __pfx_process_one_work+0x10/0x10
[ 1078.168477][T13069]  ? assign_work+0x1a0/0x250
[ 1078.168490][T13069]  worker_thread+0x6c8/0xf10
[ 1078.168508][T13069]  ? __pfx_worker_thread+0x10/0x10
[ 1078.168523][T13069]  kthread+0x3c5/0x780
[ 1078.168537][T13069]  ? __pfx_kthread+0x10/0x10
[ 1078.168552][T13069]  ? rcu_is_watching+0x12/0xc0
[ 1078.168568][T13069]  ? __pfx_kthread+0x10/0x10
[ 1078.168581][T13069]  ret_from_fork+0x5d7/0x6f0
[ 1078.168601][T13069]  ? __pfx_kthread+0x10/0x10
[ 1078.168614][T13069]  ret_from_fork_asm+0x1a/0x30
[ 1078.168633][T13069]  </TASK>
[ 1078.168666][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1078.426824][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1078.462249][T18913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3360'.
[ 1078.492865][T18921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1078.536830][   T30] audit: type=1400 audit(2000000099.174:7151): avc:  denied  { write } for  pid=18922 comm="syz.6.3363" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1078.625092][   T30] audit: type=1400 audit(2000000099.264:7152): avc:  denied  { ioctl } for  pid=18922 comm="syz.6.3363" path="socket:[73367]" dev="sockfs" ino=73367 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1