last executing test programs:

44.0759492s ago: executing program 4 (id=591):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
io_uring_setup(0x7c25, &(0x7f0000000040)={0x0, 0xaba, 0x10, 0x0, 0x348, 0x0, r0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01}}, './file0\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0xa0110, r1, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)

41.56387461s ago: executing program 4 (id=607):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x9, 0x4})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40))
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0xfbff}}], 0x1, 0x0)

41.315055607s ago: executing program 4 (id=609):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40488c4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c001, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000520009011965657a515f74b852686afeb9ccbd00000000000600000000000000e6050295ffe031a8ef6fba60491eb1a88f32249ccd58090343ab62b7a760adc510c00f86e3cea3e22d7035aa3d21131e26b559c44455137a38"], 0x14}}, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x60}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r6=>r3, {0x6}}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000240)={0xc})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

40.294208895s ago: executing program 4 (id=614):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="5a91bd3a72b4ba6c77830bd3", 0xc}], 0x1, 0x0, 0x0, 0x4008004}, 0x80)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
fanotify_init(0x40, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

39.544647414s ago: executing program 4 (id=617):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000005c0)={{0x6}, {0xe}, 0xe, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x519440, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x18)
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e2, 0x4})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @private}, &(0x7f0000000100)=0xc)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1})

38.748641449s ago: executing program 4 (id=620):
syz_init_net_socket$ax25(0x3, 0x5, 0x6)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6(0xa, 0x80002, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})

38.585683333s ago: executing program 32 (id=620):
syz_init_net_socket$ax25(0x3, 0x5, 0x6)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6(0xa, 0x80002, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})

11.954514782s ago: executing program 5 (id=708):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x10001, 0x121783)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x41045508, &(0x7f0000000000)={0x1, 0x10000})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = inotify_init()
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r5=>0x0})
setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r5}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000000)=0x1000, 0x4)
memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xad\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9p\x02\xc6&\xad\xa3\xa2\xeen\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd,\x9fF\xee\x05\x11r\vj\xf1.#\xb9\x03\x88K\xc8\xed\xa1\x84b6\n\xf8\xad\x03\xff\xaf\x7fh\xd1\xe3\xce\x9d^E\xf1q\xdd\xd9\xe1i\xb9E\xc4z#V\xdc\xd2\\\xb8\x82\xc3*S\x11\x9d\xcb\x12\xef\xf2\x99;/\xbc\xff\xd3,\xef\x16p\xd34\x18\x00'/391, 0x2)
syz_open_procfs(0x0, 0x0)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x40000000})
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080))
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x814)

9.753286418s ago: executing program 5 (id=711):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, 0x0, &(0x7f0000000840))
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5ed22a", 0x3}, {&(0x7f0000000040)="ec99545aba3dd50202829b47a101618c56ccb97307bdbe820f70bb32fd0fa58282860eff52f0d57f7dd5cb8d010b88fc25dd99b843ef25128ca24723ad56012b83c5b4f473b7046b52b4e45aec7ae69436c1b442a4efc2f5ef8e72f28073546268038c017d9dd9495622978e3b95639d9babb7966409577e54ca10918b5e3068e925c32feeb8e6363e8dc00664d1da5a6a3639d9c57eb834bc786c2d8b44754e392edc66ac7dc8d08eca502c71d215e07e75ffbebef1a5586295a5785b14055a0a2478553439e6b48cf9c8e8ffa9896d742882c08022164964c1c55b0e7be1291c65136ef16ae90252302e16ad30", 0xee}], 0x2, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x18, 0x117, 0x2, 0x1, "88"}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xfffffff7}, @iv={0xf8, 0x117, 0x2, 0xe1, "26e2a9e9addd54af67845bd0d937d659936d1812e0ca50ad971f767a13f5254deb13d02d0a285cd2f8dedc1e55ebac5cd2122ae80238f824f625edafb33e55a9929461b2636a3ed2f8951af2f2a597e2162224fb999bc619d738bcb69c9aa582a169e49cb034a22368a9b8dd2118d06a069d8cb70cd4bd1ed227245c2b5c54bfc43e367599ec673417e3c57cc90f2a21b009f46888f09c0c14da78b33d9a62bfd63195a787f49bca04f3a6e37d06860e3711d47036f0268667de5d9fcf0216e181cfefe19df4aa30aff13c70311bc58ba5396c75fb9d187f090480f3268fce5d28"}, @op={0x18}], 0x170, 0x800}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="bd61002abebf45ec13560ab63abf804011185276cd053bceb94b0bbf190ed3ddce64baa37dcc9c928b2bf1c123280b080efe7a9916063abb2c01ecd8381bd0001f1d377ca0568f27db799f773300417d88cb70dab5e03ecc780af38a53018dadf0678bf805592b6b4defd530c7a89964b169c6fdfa281de690abc3745a1cb5f35d9be2ac56b724a976a90bcef7974e40d22b8dc395d0e2fb6be0684c506fe0610c62e4cc9a18eafaccd73833cd7a7dd69563e1e26e85d3cdc91c1da20090524d4924151bdb5704ce91f424", 0xcb}], 0x1, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x1060, 0x10}], 0x2, 0x20008044)

9.720393061s ago: executing program 2 (id=712):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @remote}, 0x6)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

9.61412847s ago: executing program 2 (id=713):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'sh\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4e23, 0x2, 0xcf, 0x7, 0x12d5a}}, 0x44)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x2000042, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setuid(0xee01)
setgid(0xee00)
read$msr(r6, &(0x7f0000034700)=""/102400, 0x19000)
socket$inet6(0xa, 0x3, 0xff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x53, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x1348, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x12a0, 0xffffffff, 0xffffffff, 0x12a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0xfd, 0x0, 0x13}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x7, 0x1, 0x5, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @local, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 0x700, 0x2440}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x10d8, 0x1118, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x54, 0xffff42f2, 0x5, 0x5ee, 0x8, 0x1c, 0x8001, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x13a8)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff2, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x0, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x3, 0x40000000000002}], 0x9})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0xeb, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0})
syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10)
close(r2)

9.432361465s ago: executing program 5 (id=716):
socket$igmp(0x2, 0x3, 0x2)
open(0x0, 0x127000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18)
socket$netlink(0x10, 0x3, 0xa)
timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c6, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10)
ioctl$I2C_RDWR(r5, 0x707, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406000005640004000d240f010900000000000000000424020a090581032000037fff0905820200000001", @ANYRESOCT], 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)={0x2cc, 0x0, 0x502, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "328b61755b96b284a2719ff5c44427c0b2b934e68032b73320d8c16d4b19db4a74e80b0b043af4d245302c44c99071f29b63a1b5f4f2e335a52c3e923833be30e1ff5d6f1d5ed35f28e1e1842842c892761318a9573c9af24495dce0e97140b14a3e03b1bf7a5fadf29ba4527908a7a48102cbbd743e4872a9fcf39f50520e30e33c7ad8e11aac44fe4fc72f1528ac1a9f1580072edd9f7148b3ad49ad6c0d0d9be39e8dc8c6f28c"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#{-^,!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#)}*\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/adsp1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ';{:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "0cbb6114381504c22f547bf67e9577bfe79f8f30bb71c05189dd12d9ad66a441691ae885dd2c627f447e474a7f1f4f02634e4bb2f12a05aa2ad771947922014449c965aa85331d338e1d5075186479d756252b14dcdd311e0f7bf2c1d0a40e2dd7b1187b824b9448c01bcf3bc231eb1f2524356ac59101743f5ec4b799c87a2fed5b9cec8b31b40cb23c69e19998fd5e42da5cc86f23ba5a0e6d11e5fb693243c5246eb870378a"}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

8.1705889s ago: executing program 2 (id=718):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x8008af26, &(0x7f0000000000)=0x200000000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'wg2\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x80}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@ipv6header={{0x28}, {0x10, 0x26}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0)
syz_usb_connect(0x3, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0xd0, 0x3b, 0xa4, 0x40, 0x421, 0x3cd, 0x51ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x8, 0xc0, 0x20, 0x1, [{{0x9, 0x4, 0x4e, 0xfb, 0x0, 0x2, 0x2, 0xff, 0xce, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x401, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x1}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2000, 0x7, 0x8, 0x4}}]}}]}}]}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b00010062726964676500004000028008000500000000000500290001"], 0x70}}, 0x0)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000040)=0x2, 0x4)

7.904557729s ago: executing program 1 (id=721):
openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xb7d, 0x400)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x2, 0x2020})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x58c4, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, 0x0, &(0x7f00000000c0))
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000002280)={'hsr0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000})
epoll_create(0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x75, 0x40082)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020)
pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.197717935s ago: executing program 3 (id=722):
prlimit64(0x0, 0x3, &(0x7f0000000180)={0x1, 0x8}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x400882, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000500)={{0x2, 0x0, 0x6, 0x1, 0xfcc0}, 0x493, 0x13e, 'id1\x00', 'timer0\x00', 0x0, 0x1000, 0x7fffffffffffffff, 0x0, 0x4})
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a40)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20)

7.085700016s ago: executing program 3 (id=723):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}})
r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000000)="1c0000001e005f800040000000000000020000000100000000000800", 0x1c)
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
rt_sigqueueinfo(r1, 0x5, &(0x7f0000000840)={0x1a, 0xd1f, 0xfffffff9})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000800)={0x80000000, &(0x7f0000000740), &(0x7f0000000780)})

6.32842907s ago: executing program 0 (id=724):
r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0xa, 0x5, 0xd0, 0x4, 0x9}, 0x14) (rerun: 32)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r2 = syz_open_pts(r1, 0x80000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x40c083, 0x0) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000001c0)={<r5=>0x0, 0x3, 0x1, [0x0, 0x2, 0x7, 0x7, 0x3], [0x9, 0x3, 0x4, 0xc5, 0xfffffffffffffff7, 0x7fffffffffffffff, 0x100000001, 0x200, 0x174, 0x7, 0xffffffffffff6aa5, 0x6de, 0x0, 0x58f6, 0x81, 0x5, 0x2, 0x55, 0x649d, 0x3, 0x6, 0x2, 0x4, 0x0, 0x3, 0x4, 0x8, 0x7fff, 0x10000, 0x10, 0x5, 0xa73, 0x12000000000000, 0x4, 0x8ca, 0x7, 0x1, 0x7fffffffffffffff, 0x7, 0x4, 0xaf, 0x7e44, 0xc, 0x4, 0x9, 0xfffffffffffffff7, 0x59, 0x7, 0x0, 0x8, 0xf, 0x4, 0x81, 0x7fff, 0x80000000, 0x7, 0x10000, 0x9, 0x0, 0x1, 0x1ff, 0x100000000, 0x8, 0x4, 0xf4, 0x8, 0x40, 0x2, 0x4000, 0x9, 0x636b, 0x7, 0x2, 0x0, 0xffff, 0x3, 0x3, 0x0, 0x8000000000000000, 0x0, 0xffffffff, 0x3, 0xa6f1, 0xd1, 0x1, 0x1800000000000000, 0x8, 0x6e7, 0x7, 0x8, 0x6, 0x3, 0x4, 0x6, 0xd000000000000000, 0x6, 0xef48, 0x2, 0x5, 0x9, 0xa8, 0x0, 0x0, 0x3, 0x7fff, 0x9, 0x3c00, 0x7fffffffffffffff, 0x4, 0x6643, 0xb5, 0x8, 0x63f, 0x3, 0x6, 0x7, 0xa, 0xb, 0x5, 0x54aaac01]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000600)={{r3}, 0x0, 0x12, @inherit={0x70, &(0x7f0000000140)={0x0, 0x5, 0x8, 0x7fffffffffffffff, {0x33, 0xffffffffffff8cef, 0x8000000000000000, 0x2, 0x3de}, [0x8, 0xe723, 0x3, 0x24, 0x1]}}, @devid=r5}) (async)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000001600))
fcntl$getown(r4, 0x9) (async)
socket$kcm(0x29, 0x0, 0x0) (async)
io_uring_enter(r4, 0x6b02, 0xd2d9, 0x11, &(0x7f0000001640)={[0x200]}, 0x8) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001680), 0x101, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000017c0)={r4, &(0x7f00000016c0)="ea75d6c48d0b29c1689c66e3be3364c48f891d8e3b0b23009782451f283375326b60d946e79c4267c6a106cc4a1dc2f426c8fae51b0545da2395d92b7aadffc50348ddb4684db45fff15e4547b770069877a690c8b7222f69f0d1a31202e4e2ec8443025ea825c7120a858eb78717cc5e09959727bf1f93a1c9a9d685ae6a2384efa4432d40b283280004cce56debd1e9698f75fc8fb953f9c724cc9bfdcea4dd01d4692de88821e3fa424662f6323d255bf207cd0b30379fae74677095ecb36e65afb036ca8d746e5a66f6fc9782373eb35376bfe15e2fced9721efdf914fadb5b37677a90a99f6129c"}, 0x20) (async)
read$usbmon(r4, &(0x7f0000001800)=""/229, 0xe5)
write$binfmt_aout(r4, &(0x7f0000001900)={{0x107, 0x2, 0x3, 0x16f, 0x318, 0x4, 0x254, 0xa3e4}, "ef0224bf03b390d06449128640568d9ecb8d073526b2c1ea4ab82402a94f1ff679f89b668b810b472a33fcafcc3d5942323328d13e0db6e6d7ec4dddd19b859044c6c445e0aeb1367618fc07fa563590ac002edf840d7065af5814c32cdfa4d3323541b6cbc43413fabb1fb41338400f5e74984b185b0c193b666c55ca80a244820a7f0943fc7942b8cfdd7f", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5ac) (async)
r6 = syz_open_dev$I2C(&(0x7f0000001ec0), 0x3ea942d4, 0x40002)
ioctl$I2C_TIMEOUT(r6, 0x702, 0x1c00000000) (async, rerun: 64)
sendmsg$tipc(r4, &(0x7f00000023c0)={&(0x7f0000001f00)=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x3}}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001f40)="24459b08c002d5221bdd705f782e3052465062453cafc45fa03e91b2c8d4468a29809fc81403b21858dfc9eecb99601dcb915cc80cbb43822b69c42c3aadc4d5352dfac6375b49b8e195024a4ab5700bbabc1a3d07487d42cab56df167402b18434c2624b837c7f80b67cb122bcc732a9ce1f6ec155c7b6bd095", 0x7a}, {&(0x7f0000001fc0)="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", 0xfe}, {&(0x7f00000020c0)="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", 0xfb}, {&(0x7f00000021c0)="a821616a9324798e85db5d80a9e6b935180319fc4e99ea2d08bc3753713732f66790be3a56497b829de14488e7d1e3205c", 0x31}, {&(0x7f0000002200)="23946e090f9725a84c9bc127015e38a494bc063570c73d522c45fabe53191c80f0", 0x21}, {&(0x7f0000002240)="eaa34c0591ea7c9cc82a02bdd98deaa848bbcb4dd9752e3c3c07614d954c098a44ba9d1b30cd71c33c9481f93861685defd2d064da5e337574e5e274f8046df9f8c33616f207940b3bbc9f476d524fd5ba8b6e9df51998ccdc983a2e7e6d30a1fee8ca8c57339d3195c49f6a1f6ed8c7bd94dd7290abf73d45", 0x79}, {&(0x7f00000022c0)}], 0x7, &(0x7f0000002380)="593b9b51bf77c389117651afa6343184c0", 0x11, 0x104}, 0x51) (async, rerun: 64)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) (async, rerun: 32)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002440)={&(0x7f0000002400)='spi_message_done\x00', r4, 0x0, 0x4}, 0x18) (async, rerun: 32)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002480)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) (async)
r9 = accept4$phonet_pipe(r4, 0x0, &(0x7f00000024c0), 0xc00)
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000002500)=[r0, r2, r9, r0, 0xffffffffffffffff, r1, r2, r1, r3, r7], 0xa) (async)
r10 = syz_open_dev$I2C(&(0x7f0000002540), 0x8, 0x80d00)
ioctl$I2C_TIMEOUT(r10, 0x702, 0x3)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002580), &(0x7f00000025c0)=0x4) (async, rerun: 32)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000002600), 0x2) (rerun: 32)

6.289055805s ago: executing program 0 (id=725):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x4042, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040))
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000740))

6.19249229s ago: executing program 0 (id=726):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x801, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x5}, &(0x7f0000000200)=0xc)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = creat(0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {0x0}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
r6 = inotify_init()
readv(r6, 0x0, 0xfffffffffffffd3f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @local, 0x5}, 0x1c)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000300)="c82e0f4e42fd6de08255c97c97b53e844b926a94474f98f013bd517a57cd325c0e8ffc2e9410e8c509e624b7abdb50c3141e839f1b91741253078fe337b4d66b6cb5cf8ed18e63234aa096f545e2d8ab51a322d57a69db5356628fa405d24a067343b0d0225f3beec608a004ba8b0f4a08c7c5bd33daf67f75fe38b6badfa5f56d53dc89e7a2d34aefc4a699d10d28f168cc061aeccd6853427de4d10d4b1f550f7fd3ea70db6b1fd733b119aad916f150fd1810d2864b9da424d81ff9e325ce7f28cd4162f441f2e5f43c8d0c60e440af0168cd9d94a1c82fb7593030dd2a6d069b7289c570c2989f50ca8a03", 0xed}, {&(0x7f0000000080)}, {&(0x7f0000000400)="208d0e5ee1072a996fbda36bf4800c3f98600ad4a52f3c1bc9a4e11c439e21aa21535e3246679d68dae7c3c5f961f37e89cd4bb8e35e322d0bc2bffe86a4e3582a9a42ff", 0x44}, {&(0x7f00000000c0)="6a1f18065ddd5a8fee9187d3d495063b5157632de0fc38aa4a98637a79eec4b1f9e51fc7e31d9fd222a8545423ebd2e5d953d6000368654fea8df8c411c4b3e1efe7a803a6936b7b32383f967d55bda0c044b1440e1ddb31e51f0e681bb38e5ae6e49b7c01b8622d456e6e63e715a96a1ec6bdc0febe37fe15622390cb14", 0x7e}, {&(0x7f00000004c0)="b8963f39fff038d443a9de7db2e79b724230a69915824d2f801a9dbfb233a5b526a6a6c18e8c990502e466d4172c42aedeffcee5263f4cf065f2c2c4526b5ca2f2ae72a62f3fd06213a9d561c69924dc6d50693b0206405436b5da972a5fad2d50c9fc0f7b04de5468843d542f42c156f9552d784ef4bb8092fe16ca0a8993d06a43fbf5915187d321491019f498a0cf2d343789fdf8eb0301e58f63b7cdbb11bcc318fc6ecec70e6de203116e33a68aa437c3eab89809ad76feb7e3c7f1a530e0c61ab1d38bc48ad8530164167e3ef13aef70c864c74571b2ad3dce330f9c45b5b1052198047e", 0xe7}, {&(0x7f0000000240)="d30eb4859b83d84c68831ba52f95", 0xe}, {&(0x7f00000005c0)="47b923f48a73d53c93e82f136a343a5741e5bff76ed90894574ad1778471e7cdb79daccbc040c15974da77768e21650eda4cbe938af5d6a80e8f2c213acd319cc00448096d1ce59b416eebb00e8905428c4e55a535a35a84f9c6bd4e2f431ad46ed0843d8fd0ed5da8d3631014f966f2f661ce40ca70eeeba731ce62109bd022a62e1706864f5b48ab021c3f7363f03143d6cd4892560f27531f2c938735f73aa1326d4c391217b2125d69213cdeef2eee505f30bcdfbcf0dadd5556c9f6f895ae1d86a8b024b1f17056a13af407ef8de9a965feda9cd929d728bee704b4cc91ee2a94e95e09404d4d23f3", 0xeb}], 0x7)
setresgid(0x0, 0xee00, 0x0)
semop(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x203}, {0x0, 0x0, 0x800}], 0x2)
semctl$GETVAL(0x0, 0x1, 0xc, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)

6.092716971s ago: executing program 3 (id=727):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1e", 0x65}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced2", 0x52}, {&(0x7f0000001400)="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", 0x975}], 0x3}}], 0x1, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000980)="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", 0xffffffaa)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x40000183)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.840652323s ago: executing program 3 (id=728):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="fd", 0x1}], 0x1, 0x0, 0x0, 0x8008044}, 0x881)
r4 = dup(r3)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2)
r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x70}}, 0x0)
fsopen(0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/softnet_stat\x00')
r9 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0x3)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r9}], 0xd6, 0x0, &(0x7f0000000200)="cdd87262dcdcea83e628b32f30fa5d15c90e28521c79f30b31e0fddf795654a6997ccf69297f3c8d951f3bbcd55144e2eab60481158d498e32233b846c2c380796b122fd58d5305f8d646516ff182017943451361283cedb4d2bdd7b45742c69921ba95c87c5379d8a0afe86ffb8515e3c17c41bc82c9c2e276c975dfe9178f44dcc9d5a43b76fae55f2f67bbd754764403881bd30c1fd70f124eb7bd67287d266663ffa76d005e51172b97a585031e77d7856fd6f7019ca3f5ecefda84ee36c9d4dedb1e0e1083794e9003f6998563b614548b8ae1b"})
add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x0}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={'rmd160-generic\x00'}})
keyctl$invalidate(0x15, r1)

5.839882756s ago: executing program 2 (id=729):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x6, 0x8, 0xb31a, 0xfffffffe}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000400)=""/99, 0x63}], 0x1, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x12002)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e25, 0x2, @mcast2, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462429add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x20000045, 0x0, 0x0)
shutdown(r3, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6, @random="8e39743fe8b2"}, 0x10)
close_range(r4, r4, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{}, "37e4dbd1f3e0b625", "8ca86fbfce4964d81fdc0d2e1f340fb3", "acd1d89a", "cead9142a1857404"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x0, &(0x7f0000000180)=0xfffffffffffffffe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

5.674731044s ago: executing program 1 (id=730):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ppoll(&(0x7f0000000240)=[{r1, 0x8509}], 0x1, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x15000000, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

5.644191168s ago: executing program 0 (id=731):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x1000000, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

5.288113757s ago: executing program 5 (id=732):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x0, 0x1000, 0x15, &(0x7f0000000200)="828a60ae1abbf38c61f0651c3e76d535901cf03adf", 0x75, 0x0, &(0x7f00000002c0)="8f5106943dffaf5380ad5db70fccc5b84d0ce7ef9d7714b8fdf7fd33a07898b4c0c46588c2793e11e2f5cc7ea5a027584d91841d422dfc7a9f56452d5d078975b81eb1204582bd7fcc4c00c8e582d149dbc8dc99c0ecb125bde3581489db03dc54947ad8b7b5f3b299f1ff0753def20911d0080bc4"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800450000280000000020069078ac141400ac1c000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880))
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = dup(r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x40045431, 0xffffffffffffffff)

4.960968831s ago: executing program 3 (id=733):
prlimit64(0x0, 0x3, &(0x7f0000000180)={0x1, 0x8}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x400882, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000500)={{0x2, 0x0, 0x6, 0x1, 0xfcc0}, 0x493, 0x13e, 'id1\x00', 'timer0\x00', 0x0, 0x1000, 0x7fffffffffffffff, 0x0, 0x4})
syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a40)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20)

4.872623623s ago: executing program 1 (id=734):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x6c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4.850012749s ago: executing program 1 (id=735):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000f6000000000000000000778caf3e74d7357b3ffce5a97c00c4e033802ac46ae1a343139e162d5ad33ec160800d757508afcf0c6be9cf4409720351fbca37f28f1f739033bd9a861327f1eca21507a0cc131b62d7d0907c8340d1cadab53e0386b6"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_nfs_commit_metadata\x00', 0xffffffffffffffff, 0x0, 0x400000000000012}, 0x24)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0})
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000000000)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe})
write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)

4.695632036s ago: executing program 3 (id=736):
socket$inet6(0xa, 0x3, 0x8000000003c)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f00000034c0)=[{0x0}, {&(0x7f0000003140)=""/188, 0xbc}], 0x2}, 0x8}], 0x1, 0x19bde61a8ea10eff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d440000904650001be866d01090501025000010309"], 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff88, 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0}}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$usbfs(0x0, 0x85c, 0x1f5100)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840)
ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080))

4.177991066s ago: executing program 2 (id=737):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280)
r2 = socket$kcm(0x29, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd825}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r6 = memfd_create(&(0x7f0000000280)='system_u:object_r:devicekit_disk_exec_t:s0', 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r7 = getpid()
sched_setaffinity(r7, 0x0, 0x0)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r11 = io_uring_setup(0x7625, &(0x7f0000000380)={0x0, 0x653f, 0x0, 0x1, 0xd6})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000400)="5e786e9bda56683d73ddec86473748b210e7e2463a3c411c099a1d22f984fd1664e021c568947dcd01d77a9f118cc76e20469e3efb7224319c67b90c819a27b92022a542436cc644781add86649e2d4cc17cba7199769fa06a0489700f35e9a3f080ae787f217187fea5b5", 0x6b}], 0x2, &(0x7f0000000580)=[@rights={{0x30, 0x1, 0x1, [r5, r6, r3, r1, r9, r11, r1, r10]}}, @rights={{0x2c, 0x1, 0x1, [r2, r8, r5, 0xffffffffffffffff, r9, r4, r11]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r10, r1, r6, r1]}}, @rights={{0x30, 0x1, 0x1, [r6, r11, r8, r1, r3, r5, r4, r9]}}], 0xb8, 0x24000}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000640)="c2c85bd2cc8ea795aeef3821a5a85b947e29a27726d9a701372959b8729c1169ab2e92ed4e7482c3a0d2b3584d01bc63eeb566add83d01b186fb40c6e3b84d74faabb591dd14d0c036faebd81f20d36f7076dbc1b68e830abeab1ad8f3d98898acd3f6edcc80ce1eb458bb520726ddae0a2766620c92007c1dbc59a6eecde81623e68ba0c098740aa58b0b8dd71f14377f6c3d3c2dec444ba83495d2fb09fd51b8ae68caac0ba556e401ee04f4416f17e6dbb80ad1b699bd", 0xb8}, {&(0x7f0000000700)="1527a3a6b1412b86ade9c12cae43793842322cf2169acadf758354a9ba1e", 0x1e}, {&(0x7f0000000740)="90fa24585d142752ebaaa56b668d5fe1a3a9bfde16fced", 0x17}, {&(0x7f0000000780)="6edc6894a3bd4019f3b3f44e1f53cbfb3414db83529da5b1ccc91cafadf8a695102fd788028ab69c23787add5ef3b4b7", 0x30}, {&(0x7f0000001900)="5f4887b247406672ae6ce8fff352f63d163f45429214fb2edaef3fbd32449aaca519f6e89fc9a29820a49d050276968aed2df1434adf4e978fa207fd28bf3e2a148218dcde5f1b9126995f", 0x4b}, {&(0x7f0000001980)="e5ea2d9b0c8916aa5de9e1e5598b90475760f66b36b0e143836accece4e961bcb22341c8c9e7dd376511b2aa792350236ebb6fe8e80cd1807526845c0970a287212748847bb3e7f164a08d3f356814344ff1d2e2d55b7b744f46560222d5756f455b4452a2bbdfa0f4c47cdc0ba85bfc849cb6e4861207abad355cca95423f19e3defe4421f2fa8d4e7fdb023d60917ed7e2787a6d1cb70634785bd178e417d5028f558931bb89c36911b4d9a6b7ee2e34", 0xb1}, {&(0x7f0000001a40)="62c53a7f005b3794350cc106759b3a976a2c5ba2d4e59b50e40fd99a542d6670f7b7dfa37ea75d6cdd8e31b4083b7e587144ea5b2c914e8751764304281d852df3d5fb985348424433e512f87f7424ff5a37fcb1ce8c07015a155ca1bba396487400629e4209bcd8d2260c5f660cb9b2be3ed7bff28e91324ef17b6239d0df9b6fb8b4c54d88f83e4a39bcc52d14477a75bf2be6b7f493c199365de6d3ca5cde5777bce5421c4ef509e174ba8a33f3c0e6c99dea8b", 0xb5}, {&(0x7f0000000800)="0cf48c0e2c5ddb6268c95e865135ef", 0xf}], 0x8, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r4]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r5, r6]}}], 0xe8, 0x2004004}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f00000083c0)="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", 0x1000}, {&(0x7f00000093c0)="f4bee044f413f0f4f62ef57c45656efe45e3d490689f31db35df87088f9d286389cce918520d33b5981972a12d56c6c76e577311ec4c2b774f35a52f0272546742eebdcdc294de17e876d34059b08fa04722c098773870c8389aa57fe6f8ab132abdb25b4e07f4bbb2d9a8871cf5b609d11962ca225e16336b6c48428f58e3fe1767407c0115dff345151e21e5f12eb6b5f13fafdd5022c208189dbf1f617f5c28a748d8ad86edac404df514eec6f428a615e154cce95e7112f9475d418f503952ddf073bcd2faf30f1131581d96c73a60391a4ace4ebec18c50", 0xda}], 0x2, 0x0, 0x0, 0x80}}], 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c000004004680681101"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
io_uring_register$IORING_REGISTER_FILES(r11, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r0)
r13 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r13, &(0x7f0000000200)=@access={'system_u:object_r:chkpwd_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x100}, 0x48)

3.50089094s ago: executing program 5 (id=738):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000000000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x21c, 0x30, 0x20, 0x0, 0x0, {}, [{0x208, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x124, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xf9, 0x6, "6280e4a555683cd81aa9681a4e5163724a6d5b7926eb61524e9bb8392bac0280882f50a56f943606d76dce717e6fa5172efa75a1d16633c2ae3c51d9346bec474268d67df6becb52abf6cc3c4157858b3c646e33fef45c5308e1311aee09d29f2f0c78441950cc46945c50dee699840255416126e6f90f7040720b84ac1673a2e51153feac3bc55b0445ebc9beb8dd91cc6b93496ca8c967a5aa36843350a3b1d9d6c18145e239be379eaa8fd6addc1a0475f056c9624571574998f56378cc301221a45a522f0800eca7d1ddbb16917d639668b6fae21ff439b82048ed66283104c0c0dcdbe2e6844d3ba99530cdcc704e2093e3ed"}, {0xc}, {0xc}}}, @m_skbmod={0x54, 0x16, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x8, 0x20000000, 0xad6, 0x9a80}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x48, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x1e, 0x6, "8a787b5e2dec954a39888487f543d4ae155b888a47404c721177"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, 0x0, 0x20004000)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
bind$netlink(r8, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
syz_open_procfs(r4, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="153d6b57407ba47967aeb31f1500433176c0584320c584cae5a6f7c1283fc5dcfb2d4ff4d17abd39efd4768ecac65d3f75489c77ca7d32e2188adb8d4cfcfd87d98160f82c70921bf0c7f444c8e2eadf12146a05d0b07ff79b32ba03359d34fa786d0ee0c8be23c954fdcb5e7c1c5631e9b79b8bb8ff17b3eea25bd460ade5f2de1d052ed41a71cf272194c119a3dcbfa1e9837691e190cd136d5f9b168f442e6b81d75a6b8930577948b3a8eafde25e6580ea787d2c27304d3f6ac9358721a23b1be8523496c9c1bd70466b09987035bee423d0d068512a8c7aa35d", @ANYRES64, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x11)
r9 = dup(r3)
setsockopt$TIPC_MCAST_BROADCAST(r9, 0x12, 0x85)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x6}]}, 0x10)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x3})

3.328381679s ago: executing program 0 (id=739):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}, 0x1, 0x0, 0x0, 0x8}, 0x40800)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
modify_ldt$write(0x1, &(0x7f0000000340)={0x6, 0xffffffffffffffff}, 0x10)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4611dad15a7344e1c2b9c17d9a009ba493ed6ffde2a413e079d15dac3edece214942868edb4d6d87d2c535dfe4714dc073b40e5ee3966bd0b0", @ANYRES16=r9, @ANYRESHEX], 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r9, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r10 = syz_io_uring_setup(0x33a2, &(0x7f00000005c0)={0x0, 0xaee2, 0x4, 0x2, 0xbfdffffc}, &(0x7f0000000400)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r10, 0x47f4, 0x2000000, 0x48, 0x0, 0x0)
sendmsg(r7, &(0x7f0000000440)={0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x5e}, 0x800)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xae, 0x5, 0x3, 0xfffffffa}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

3.203063682s ago: executing program 2 (id=740):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000005c0)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000003c0)="8d3647a443e48dbe26cda7d5a38d11131a7fc41c6c0cf0269d32449eb653b13197d3b929307f07a1098c3ed29a0bcfd0fb631311de31daeb7a7f0830d77627d3e140ceeb0ad79dd39fdcd9e02fb84b3f6799892e40302df448d4f0ba4aeee5b5feac7638c48bd311e3a0d05869cd73471da79b7b6b20c1535f2a400b49a27891a890b391892187bb77ad686cd158c1ae36d4119d297a2d9fc0c90034c2d3baaf118a93bb97166ad7dad272cebbbbff935a339616484c71f637d741a2f91a024f864455e3f8e5cb075b2effa70ed11854bc3441d01d7ed7550ee75ec17b195dda18f84412674809bc3e740db0d0962c05a44cdccc", 0xf4}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="00000068d2678f3dbacfd03ecb69957a292893482df882350a58301a9a64e3288d917e4a6a501234c27edb001f4bfcd5e01194beb206051b3526542c99ca1e95"], 0x48, 0x20000840}}], 0x1, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r10, &(0x7f00000002c0)=""/75, 0x4b, 0x0)
ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f00000000c0)={0xb, 0x1, 0x4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r9, 0x0, 0x0, 0x0, &(0x7f0000000240)})
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

3.15816658s ago: executing program 1 (id=741):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, 0x0)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338)
mount(0x0, 0x0, &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5f1066a12c7178fa584d649ddaa66ae53a674573ab989aeef27f3fddee68471c12d6a17777700000000000000032cac1c7ead2eab5be7a3926bcebc266cc41fca7fd2c8181b1824f80f37925439935e0bcea6fd1d11c018ed4ad78eb5f35f366f2f41340d2eb9c42"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208130505"], &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0})
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42001, 0x0)
read$FUSE(r7, &(0x7f0000002600)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
setreuid(r8, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x7fffffff, 0x9, 0x7, 0xa1, 0x3, 0xff, 0x2, 0xffff}, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)

932.467757ms ago: executing program 0 (id=742):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="6ff2874d0209116410ce4a9a747ea2dff68a1693cb0b43ca36023f5a0ec7edd24102bd021b7be156b4372f328a3222c50abb668acc181b1d8817d4826755ed9af379e8d3881684644567d8cb6a4c4bed9b4f25fdc748d6eb502bcd2859ce7fa65556a6ed165d147a4886bfa915d7b609213d4b72aff38128663c54a45f195ffbcdc742852a232fb789cec45176c8f383304e48eb6d8a568bceaea66906146115daa69d4471edbf72201bcf84d5a25f40de"], 0x30}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
gettid()
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000000)={0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

192.978026ms ago: executing program 5 (id=743):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{}]})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
add_key(0x0, 0x0, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (fail_nth: 10)

0s ago: executing program 1 (id=744):
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x32}, 0x9c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x1, 0x1})
io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000c4c0000000c0a010300000000000000000100000008000440000000000900010073797a300000000024000380200000800800018018000b8014000180100001"], 0xd0}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e55d8eec9 code=0x7ffc0000
[  178.123936][ T7327] =======================================================
[  178.123936][ T7327] WARNING: The mand mount option has been deprecated and
[  178.123936][ T7327]          and is ignored by this kernel. Remove the mand
[  178.123936][ T7327]          option from the mount to silence this warning.
[  178.123936][ T7327] =======================================================
[  178.747859][ T7335] : Can't lookup blockdev
[  182.802838][ T7350] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  182.809553][ T7350] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  182.857084][ T7350] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  182.864840][ T7350] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  182.871769][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  182.871782][   T30] audit: type=1400 audit(1760501771.772:463): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  182.901678][ T7350] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  183.066465][   T30] audit: type=1400 audit(1760501771.972:464): avc:  denied  { map } for  pid=7365 comm="syz.2.374" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  183.252007][ T7368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.373'.
[  183.295420][   T30] audit: type=1400 audit(1760501772.202:465): avc:  denied  { ioctl } for  pid=7370 comm="syz.3.376" path="socket:[14314]" dev="sockfs" ino=14314 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  183.643066][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.743018][   T30] audit: type=1326 audit(1760501772.642:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  183.853083][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.860485][   T30] audit: type=1326 audit(1760501772.642:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  183.891948][ T7374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.909130][ T7374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.148620][   T30] audit: type=1326 audit(1760501772.642:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  184.394814][   T30] audit: type=1326 audit(1760501772.642:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  184.427676][   T30] audit: type=1326 audit(1760501772.642:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  184.454713][   T30] audit: type=1326 audit(1760501772.642:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  184.478112][   T30] audit: type=1326 audit(1760501772.642:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff07b18eec9 code=0x7ffc0000
[  184.565115][   T49] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  184.728350][   T49] usb 4-1: config 0 has no interfaces?
[  184.755028][   T49] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  184.764091][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.847774][ T6432] Bluetooth: Error in BCSP hdr checksum
[  184.854726][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  184.854962][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout
[  184.924691][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout
[  184.931788][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout
[  184.938252][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout
[  185.026070][   T49] usb 4-1: Product: syz
[  185.731563][ T3024] Bluetooth: Error in BCSP hdr checksum
[  185.746263][   T49] usb 4-1: Manufacturer: syz
[  185.804888][   T49] usb 4-1: SerialNumber: syz
[  185.815909][   T49] usb 4-1: config 0 descriptor??
[  185.905933][ T7401] : Can't lookup blockdev
[  186.382341][ T7379] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.604717][   T52] Bluetooth: hci5: command 0x1003 tx timeout
[  186.611727][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  186.725500][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'.
[  187.340217][ T7379] netdevsim netdevsim3 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  187.362168][ T7415] netlink: 'syz.0.388': attribute type 2 has an invalid length.
[  187.370330][ T7415] netlink: 192 bytes leftover after parsing attributes in process `syz.0.388'.
[  187.379978][   T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  187.569908][   T49] usb 2-1: Using ep0 maxpacket: 32
[  187.626373][   T49] usb 2-1: config 0 has an invalid interface number: 202 but max is 0
[  187.712989][   T49] usb 2-1: config 0 has no interface number 0
[  187.786654][   T49] usb 2-1: config 0 interface 202 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  187.927672][   T49] usb 2-1: config 0 interface 202 has no altsetting 0
[  188.021829][   T49] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=29.3e
[  188.079992][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.143052][   T49] usb 2-1: Product: syz
[  188.163211][   T49] usb 2-1: Manufacturer: syz
[  188.185624][ T7414] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  188.196401][   T49] usb 2-1: SerialNumber: syz
[  188.236832][   T49] usb 2-1: config 0 descriptor??
[  188.341572][ T7414] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  188.350801][ T7414] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  189.183667][ T7414] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  189.259739][ T7433] fuse: Bad value for 'fd'
[  189.277540][ T7414] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  189.432503][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[  189.531743][   T10] usb 4-1: USB disconnect, device number 19
[  190.365480][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  190.367553][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  190.685965][   T49] redrat3 2-1:0.202: Couldn't find all endpoints
[  190.706080][   T49] usb 2-1: USB disconnect, device number 11
[  190.806125][ T5815] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  190.923393][ T7461] : Can't lookup blockdev
[  191.064718][ T5815] usb 5-1: Using ep0 maxpacket: 8
[  191.130654][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.151331][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.270865][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  191.315834][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.448121][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  191.464393][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.682479][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  191.815075][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.837211][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  191.837225][   T30] audit: type=1326 audit(1760501780.742:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4c718eec9 code=0x0
[  192.277780][ T5815] usb 5-1: GET_CAPABILITIES returned 0
[  192.299394][ T5815] usbtmc 5-1:16.0: can't read capabilities
[  193.553826][ T7498] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  193.754798][ T7498] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  193.802125][   T30] audit: type=1400 audit(1760501782.702:482): avc:  denied  { create } for  pid=7493 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  193.843431][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  193.851837][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  193.859440][ T7498] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  193.884425][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.406'.
[  193.894956][ T7498] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  193.906896][ T7498] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  194.151420][ T5478] netdevsim netdevsim3 dev67: default qdisc (pfifo_fast) fail, fallback to noqueue
[  194.774740][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout
[  196.134707][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout
[  196.140823][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout
[  196.146914][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout
[  196.152951][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  196.503624][ T5815] usb 5-1: USB disconnect, device number 9
[  196.619686][ T7546] syzkaller1: entered promiscuous mode
[  196.625325][ T7546] syzkaller1: entered allmulticast mode
[  197.047288][ T7555] overlayfs: failed to resolve './file1': -2
[  198.397216][ T7575] bridge0: port 4(syz_tun) entered blocking state
[  198.418693][ T7575] bridge0: port 4(syz_tun) entered disabled state
[  198.440569][ T7575] syz_tun: entered allmulticast mode
[  199.136053][   T30] audit: type=1400 audit(1760501788.022:483): avc:  denied  { mount } for  pid=7577 comm="syz.2.421" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  199.182558][   T30] audit: type=1400 audit(1760501788.022:484): avc:  denied  { remount } for  pid=7577 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  199.203605][   T30] audit: type=1400 audit(1760501788.032:485): avc:  denied  { write } for  pid=7577 comm="syz.2.421" lport=38587 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  199.221935][ T7575] syz_tun: entered promiscuous mode
[  199.228132][   T30] audit: type=1400 audit(1760501788.032:486): avc:  denied  { setopt } for  pid=7577 comm="syz.2.421" lport=38587 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  199.281568][ T7575] bridge0: port 4(syz_tun) entered blocking state
[  199.288269][ T7575] bridge0: port 4(syz_tun) entered forwarding state
[  200.066418][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'.
[  200.671273][ T7598] block device autoloading is deprecated and will be removed.
[  200.775816][ T7607] FAULT_INJECTION: forcing a failure.
[  200.775816][ T7607] name failslab, interval 1, probability 0, space 0, times 0
[  200.791386][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.0.428 Not tainted syzkaller #0 PREEMPT(full) 
[  200.791402][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.791408][ T7607] Call Trace:
[  200.791412][ T7607]  <TASK>
[  200.791416][ T7607]  dump_stack_lvl+0x16c/0x1f0
[  200.791434][ T7607]  should_fail_ex+0x512/0x640
[  200.791448][ T7607]  ? __kmalloc_noprof+0xca/0x880
[  200.791461][ T7607]  should_failslab+0xc2/0x120
[  200.791477][ T7607]  __kmalloc_noprof+0xdd/0x880
[  200.791488][ T7607]  ? kernfs_fop_write_iter+0x237/0x570
[  200.791505][ T7607]  ? kernfs_fop_write_iter+0x237/0x570
[  200.791518][ T7607]  kernfs_fop_write_iter+0x237/0x570
[  200.791534][ T7607]  vfs_write+0x7d3/0x11d0
[  200.791549][ T7607]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  200.791563][ T7607]  ? __pfx___mutex_lock+0x10/0x10
[  200.791583][ T7607]  ? __pfx_vfs_write+0x10/0x10
[  200.791605][ T7607]  ksys_write+0x12a/0x250
[  200.791618][ T7607]  ? __pfx_ksys_write+0x10/0x10
[  200.791636][ T7607]  do_syscall_64+0xcd/0xfa0
[  200.791650][ T7607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.791661][ T7607] RIP: 0033:0x7f6d8478eec9
[  200.791670][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.791680][ T7607] RSP: 002b:00007f6d855a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  200.791691][ T7607] RAX: ffffffffffffffda RBX: 00007f6d849e5fa0 RCX: 00007f6d8478eec9
[  200.791698][ T7607] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003
[  200.791704][ T7607] RBP: 00007f6d855a6090 R08: 0000000000000000 R09: 0000000000000000
[  200.791710][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.791717][ T7607] R13: 00007f6d849e6038 R14: 00007f6d849e5fa0 R15: 00007ffe1a39f2e8
[  200.791731][ T7607]  </TASK>
[  201.346107][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'.
[  201.389533][   T30] audit: type=1400 audit(1760501790.292:487): avc:  denied  { unmount } for  pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  201.669978][   T30] audit: type=1400 audit(1760501790.572:488): avc:  denied  { mount } for  pid=7614 comm="syz.0.432" name="/" dev="hugetlbfs" ino=15788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  201.755253][   T30] audit: type=1400 audit(1760501790.602:489): avc:  denied  { remount } for  pid=7614 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  201.777707][ T7619] Invalid logical block size (16404)
[  201.940474][   T30] audit: type=1400 audit(1760501790.622:490): avc:  denied  { unmount } for  pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  202.710028][ T5877] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  202.783661][   T30] audit: type=1326 audit(1760501791.682:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  202.886450][   T30] audit: type=1326 audit(1760501791.682:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7620 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  202.905285][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'.
[  202.919522][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  202.926700][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.949242][ T5877] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  202.974689][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.015755][ T5877] usb 4-1: config 0 descriptor??
[  203.061667][ T7632] netlink: 112 bytes leftover after parsing attributes in process `syz.2.436'.
[  203.405168][ T5815] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  203.452309][ T7649] loop6: detected capacity change from 0 to 2560
[  203.465075][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.473334][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.481702][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.489894][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.498075][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.506250][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.515113][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.523321][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.531437][ T7649] ldm_validate_partition_table(): Disk read failed.
[  203.538956][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.547187][ T7649] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.555953][ T7649] Dev loop6: unable to read RDB block 0
[  203.562762][ T7649]  loop6: unable to read partition table
[  203.588683][ T7649] loop_reread_partitions: partition scan of loop6 (3Ÿ‚¾‚³˜) failed (rc=-5)
[  203.672885][ T5877] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  203.690350][ T5877] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  203.704234][ T7645] Bluetooth: MGMT ver 1.23
[  203.712397][ T7645] Bluetooth: hci1: expected 2178 bytes, got 2 bytes
[  203.743630][ T5877] wacom 0003:056A:0084.0003: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.3-1/input0
[  203.865995][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  203.876500][ T5815] usb 3-1: config 0 has no interface number 0
[  203.899645][ T5815] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=85.a7
[  203.914101][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.926509][ T5815] usb 3-1: Product: syz
[  203.933695][ T5815] usb 3-1: Manufacturer: syz
[  203.940443][ T5815] usb 3-1: SerialNumber: syz
[  203.940742][ T5877] usb 4-1: USB disconnect, device number 20
[  203.947364][ T5815] usb 3-1: config 0 descriptor??
[  204.029290][ T5815] usb 3-1: selecting invalid altsetting 2
[  204.035621][ T5815] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  204.305881][ T7662] netlink: 72 bytes leftover after parsing attributes in process `syz.4.445'.
[  204.384856][ T5815] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  205.146906][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  205.146944][   T30] audit: type=1400 audit(1760501793.572:521): avc:  denied  { write } for  pid=7665 comm="syz.4.446" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  205.173568][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.173660][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.173848][ T5815] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  205.173910][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.209296][ T7675] : Can't lookup blockdev
[  205.211074][ T5815] usb 2-1: config 0 descriptor??
[  205.810771][ T5921] usb 3-1: USB disconnect, device number 11
[  206.676835][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[  206.686070][ T7692] netlink: 'syz.1.443': attribute type 11 has an invalid length.
[  206.758916][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'.
[  206.767871][ T7692] netlink: 'syz.1.443': attribute type 11 has an invalid length.
[  206.769586][ T7429] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.793603][ T7429] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.908092][ T7429] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.929774][ T7429] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.090335][ T7694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'.
[  207.899076][   T30] audit: type=1400 audit(1760501796.802:522): avc:  denied  { write } for  pid=7702 comm="syz.3.454" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  208.327059][ T7706] FAULT_INJECTION: forcing a failure.
[  208.327059][ T7706] name failslab, interval 1, probability 0, space 0, times 0
[  208.327151][ T7706] CPU: 0 UID: 0 PID: 7706 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT(full) 
[  208.327172][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  208.327182][ T7706] Call Trace:
[  208.327187][ T7706]  <TASK>
[  208.327195][ T7706]  dump_stack_lvl+0x16c/0x1f0
[  208.327220][ T7706]  should_fail_ex+0x512/0x640
[  208.327241][ T7706]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  208.327264][ T7706]  should_failslab+0xc2/0x120
[  208.327289][ T7706]  kmem_cache_alloc_noprof+0x75/0x6e0
[  208.327309][ T7706]  ? __get_fs_type+0x12c/0x170
[  208.327333][ T7706]  ? getname_kernel+0x52/0x370
[  208.327364][ T7706]  ? getname_kernel+0x52/0x370
[  208.327389][ T7706]  getname_kernel+0x52/0x370
[  208.327417][ T7706]  kern_path+0x1d/0x50
[  208.327439][ T7706]  tomoyo_mount_acl+0x624/0x850
[  208.327469][ T7706]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[  208.327493][ T7706]  ? __pfx___schedule+0x10/0x10
[  208.327544][ T7706]  ? tomoyo_mount_permission+0x2db/0x420
[  208.327572][ T7706]  tomoyo_mount_permission+0x16d/0x420
[  208.327592][ T7706]  ? tomoyo_mount_permission+0x14f/0x420
[  208.327616][ T7706]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  208.327660][ T7706]  security_sb_mount+0x9b/0x260
[  208.327684][ T7706]  path_mount+0x158/0x23a0
[  208.327714][ T7706]  ? __pfx_path_mount+0x10/0x10
[  208.327739][ T7706]  ? kmem_cache_free+0x2d4/0x6c0
[  208.327759][ T7706]  ? putname+0x154/0x1a0
[  208.327788][ T7706]  ? putname+0x154/0x1a0
[  208.327811][ T7706]  ? putname+0x154/0x1a0
[  208.327839][ T7706]  ? __x64_sys_mount+0x293/0x310
[  208.327861][ T7706]  __x64_sys_mount+0x293/0x310
[  208.327887][ T7706]  ? __pfx___x64_sys_mount+0x10/0x10
[  208.327921][ T7706]  do_syscall_64+0xcd/0xfa0
[  208.327944][ T7706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.327961][ T7706] RIP: 0033:0x7f57a718eec9
[  208.327976][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.327993][ T7706] RSP: 002b:00007f57a7f44038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  208.328009][ T7706] RAX: ffffffffffffffda RBX: 00007f57a73e6090 RCX: 00007f57a718eec9
[  208.328020][ T7706] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  208.328031][ T7706] RBP: 00007f57a7f44090 R08: 0000000000000000 R09: 0000000000000000
[  208.328041][ T7706] R10: 0000000001000080 R11: 0000000000000246 R12: 0000000000000002
[  208.328052][ T7706] R13: 00007f57a73e6128 R14: 00007f57a73e6090 R15: 00007ffe71ecacf8
[  208.328078][ T7706]  </TASK>
[  208.389756][   T30] audit: type=1400 audit(1760501797.192:523): avc:  denied  { getopt } for  pid=7702 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  208.628749][   T30] audit: type=1326 audit(1760501797.472:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628782][   T30] audit: type=1326 audit(1760501797.472:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628813][   T30] audit: type=1326 audit(1760501797.472:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628850][   T30] audit: type=1326 audit(1760501797.472:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628883][   T30] audit: type=1326 audit(1760501797.472:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628905][   T30] audit: type=1326 audit(1760501797.472:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  208.628928][   T30] audit: type=1326 audit(1760501797.472:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7704 comm="syz.2.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4c718eec9 code=0x7ffc0000
[  209.438394][ T7718] bridge_slave_0: left allmulticast mode
[  209.438412][ T7718] bridge_slave_0: left promiscuous mode
[  209.439399][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.448254][ T7718] bridge_slave_1: left allmulticast mode
[  209.448270][ T7718] bridge_slave_1: left promiscuous mode
[  209.448372][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.451581][ T7718] bond0: (slave bond_slave_0): Releasing backup interface
[  209.453957][ T7718] bond0: (slave bond_slave_1): Releasing backup interface
[  209.479820][ T7719] netlink: 'syz.2.458': attribute type 10 has an invalid length.
[  209.480064][ T7718] team0: Port device team_slave_0 removed
[  209.482957][ T7718] team0: Port device team_slave_1 removed
[  209.483360][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.483371][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.498272][ T7718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.498287][ T7718] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.506866][ T7718] net_ratelimit: 58 callbacks suppressed
[  209.506876][ T7718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  209.527052][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.527871][ T7719] team0: Port device bond0 added
[  209.536506][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'.
[  210.383229][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  210.383242][   T30] audit: type=1400 audit(1760501798.872:551): avc:  denied  { ioctl } for  pid=7720 comm="syz.0.459" path="socket:[15135]" dev="sockfs" ino=15135 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  210.744905][ T7707] tty tty27: ldisc open failed (-12), clearing slot 26
[  210.775329][ T5815] usbhid 2-1:0.0: can't add hid device: -32
[  210.781323][ T5815] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  210.837474][ T5815] usb 2-1: USB disconnect, device number 12
[  210.876696][ T7718] team0 (unregistering): Port device bond0 removed
[  211.049522][ T7728] futex_wake_op: syz.3.460 tries to shift op by 32; fix this program
[  211.057885][   T30] audit: type=1326 audit(1760501799.952:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.094705][   T30] audit: type=1326 audit(1760501799.952:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.118101][   T30] audit: type=1326 audit(1760501799.992:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.143122][   T30] audit: type=1326 audit(1760501799.992:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.195525][ T7727] warning: `syz.3.460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  211.300777][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.461'.
[  211.304872][   T30] audit: type=1326 audit(1760501799.992:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.498629][   T30] audit: type=1326 audit(1760501799.992:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.525649][   T30] audit: type=1326 audit(1760501799.992:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  211.603786][ T7738] netlink: 168 bytes leftover after parsing attributes in process `syz.1.462'.
[  212.032220][   T30] audit: type=1326 audit(1760501799.992:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  212.073681][   T30] audit: type=1326 audit(1760501799.992:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  212.666276][ T7751] netlink: 'syz.0.468': attribute type 13 has an invalid length.
[  212.757835][ T7747] fuse: Bad value for 'group_id'
[  212.806457][ T7747] fuse: Bad value for 'group_id'
[  213.884951][ T7772] FAULT_INJECTION: forcing a failure.
[  213.884951][ T7772] name failslab, interval 1, probability 0, space 0, times 0
[  213.898725][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.3.476 Not tainted syzkaller #0 PREEMPT(full) 
[  213.898749][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  213.898758][ T7772] Call Trace:
[  213.898764][ T7772]  <TASK>
[  213.898770][ T7772]  dump_stack_lvl+0x16c/0x1f0
[  213.898795][ T7772]  should_fail_ex+0x512/0x640
[  213.898815][ T7772]  ? fs_reclaim_acquire+0xae/0x150
[  213.898841][ T7772]  should_failslab+0xc2/0x120
[  213.898865][ T7772]  kmem_cache_alloc_noprof+0x75/0x6e0
[  213.898883][ T7772]  ? ima_inode_get+0x120/0x580
[  213.898903][ T7772]  ? ima_inode_get+0x120/0x580
[  213.898921][ T7772]  ima_inode_get+0x120/0x580
[  213.898946][ T7772]  process_measurement+0x585/0x23e0
[  213.898975][ T7772]  ? avc_has_perm_noaudit+0x149/0x3b0
[  213.898991][ T7772]  ? __pfx_process_measurement+0x10/0x10
[  213.899014][ T7772]  ? avc_has_perm+0x144/0x1f0
[  213.899026][ T7772]  ? __pfx_avc_has_perm+0x10/0x10
[  213.899036][ T7772]  ? find_held_lock+0x2b/0x80
[  213.899048][ T7772]  ? avc_has_perm_noaudit+0x117/0x3b0
[  213.899071][ T7772]  ? file_map_prot_check+0x1eb/0x360
[  213.899086][ T7772]  ima_file_mmap+0x1a8/0x1d0
[  213.899100][ T7772]  ? __pfx_ima_file_mmap+0x10/0x10
[  213.899113][ T7772]  ? __lock_acquire+0x622/0x1c90
[  213.899130][ T7772]  security_mmap_file+0x88c/0x990
[  213.899146][ T7772]  vm_mmap_pgoff+0xec/0x470
[  213.899162][ T7772]  ? find_held_lock+0x2b/0x80
[  213.899173][ T7772]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  213.899191][ T7772]  ? __fget_files+0x20e/0x3c0
[  213.899208][ T7772]  ksys_mmap_pgoff+0x32c/0x5c0
[  213.899223][ T7772]  ? __pfx_ksys_write+0x10/0x10
[  213.899239][ T7772]  __x64_sys_mmap+0x125/0x190
[  213.899254][ T7772]  do_syscall_64+0xcd/0xfa0
[  213.899268][ T7772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.899279][ T7772] RIP: 0033:0x7f57a718eec9
[  213.899289][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.899299][ T7772] RSP: 002b:00007f57a7f44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  213.899310][ T7772] RAX: ffffffffffffffda RBX: 00007f57a73e6090 RCX: 00007f57a718eec9
[  213.899317][ T7772] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000
[  213.899324][ T7772] RBP: 00007f57a7f44090 R08: 0000000000000006 R09: 0000000000000000
[  213.899330][ T7772] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[  213.899336][ T7772] R13: 00007f57a73e6128 R14: 00007f57a73e6090 R15: 00007ffe71ecacf8
[  213.899350][ T7772]  </TASK>
[  214.484706][ T5877] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  214.634662][ T5877] usb 5-1: Using ep0 maxpacket: 32
[  214.663893][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0
[  214.715599][ T5877] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  214.736438][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.865396][ T5877] usb 5-1: Product: syz
[  214.870077][ T5877] usb 5-1: Manufacturer: syz
[  215.321061][ T5877] usb 5-1: SerialNumber: syz
[  215.335099][ T5877] usb 5-1: config 0 descriptor??
[  215.345626][ T7781] netlink: 'syz.2.479': attribute type 13 has an invalid length.
[  215.599246][ T7783] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[  215.650573][ T7789] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[  215.873005][ T7796] FAULT_INJECTION: forcing a failure.
[  215.873005][ T7796] name failslab, interval 1, probability 0, space 0, times 0
[  215.886533][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.0.481 Not tainted syzkaller #0 PREEMPT(full) 
[  215.886558][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  215.886570][ T7796] Call Trace:
[  215.886576][ T7796]  <TASK>
[  215.886583][ T7796]  dump_stack_lvl+0x16c/0x1f0
[  215.886610][ T7796]  should_fail_ex+0x512/0x640
[  215.886645][ T7796]  should_failslab+0xc2/0x120
[  215.886673][ T7796]  kmem_cache_alloc_noprof+0x75/0x6e0
[  215.886694][ T7796]  ? dst_alloc+0x99/0x1a0
[  215.886718][ T7796]  ? __pfx_ip6_dst_gc+0x10/0x10
[  215.886736][ T7796]  ? dst_alloc+0x99/0x1a0
[  215.886752][ T7796]  dst_alloc+0x99/0x1a0
[  215.886772][ T7796]  ip6_rt_cache_alloc+0x1f6/0x8c0
[  215.886800][ T7796]  ? __pfx_ip6_rt_cache_alloc+0x10/0x10
[  215.886834][ T7796]  ip6_pol_route+0xd7b/0x1230
[  215.886863][ T7796]  ? __pfx_ip6_pol_route+0x10/0x10
[  215.886890][ T7796]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  215.886913][ T7796]  ? kernel_text_address+0x8d/0x100
[  215.886941][ T7796]  ? unwind_get_return_address+0x59/0xa0
[  215.886969][ T7796]  ? arch_stack_walk+0xa6/0x100
[  215.886998][ T7796]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  215.887025][ T7796]  fib6_rule_lookup+0x24c/0x720
[  215.887053][ T7796]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  215.887076][ T7796]  ? stack_trace_save+0x8e/0xc0
[  215.887106][ T7796]  ? dev_get_by_index_rcu+0x102/0x140
[  215.887128][ T7796]  ip6_route_output_flags+0x1d0/0x640
[  215.887162][ T7796]  ip6_dst_lookup_tail.constprop.0+0x115a/0x2140
[  215.887199][ T7796]  ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10
[  215.887231][ T7796]  ? __lock_acquire+0x622/0x1c90
[  215.887264][ T7796]  ip6_dst_lookup_flow+0x99/0x1d0
[  215.887291][ T7796]  ? __pfx_ip6_dst_lookup_flow+0x10/0x10
[  215.887316][ T7796]  ? find_held_lock+0x2b/0x80
[  215.887333][ T7796]  ? rawv6_sendmsg+0xb68/0x4860
[  215.887361][ T7796]  rawv6_sendmsg+0xe86/0x4860
[  215.887396][ T7796]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  215.887419][ T7796]  ? avc_has_perm_noaudit+0x149/0x3b0
[  215.887441][ T7796]  ? avc_has_perm+0x144/0x1f0
[  215.887459][ T7796]  ? __pfx_avc_has_perm+0x10/0x10
[  215.887502][ T7796]  ? __import_iovec+0x1dd/0x650
[  215.887524][ T7796]  ? __might_fault+0xe3/0x190
[  215.887543][ T7796]  ? __might_fault+0x13b/0x190
[  215.887561][ T7796]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  215.887587][ T7796]  ? inet_sendmsg+0x11c/0x140
[  215.887604][ T7796]  inet_sendmsg+0x11c/0x140
[  215.887623][ T7796]  ____sys_sendmsg+0x973/0xc70
[  215.887653][ T7796]  ? copy_msghdr_from_user+0x10a/0x160
[  215.887675][ T7796]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.887704][ T7796]  ? kfree+0x252/0x6d0
[  215.887719][ T7796]  ? __pfx__kstrtoull+0x10/0x10
[  215.887751][ T7796]  ___sys_sendmsg+0x134/0x1d0
[  215.887774][ T7796]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.887822][ T7796]  ? __pfx___might_resched+0x10/0x10
[  215.887845][ T7796]  __sys_sendmmsg+0x200/0x420
[  215.887870][ T7796]  ? __pfx___sys_sendmmsg+0x10/0x10
[  215.887901][ T7796]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  215.887936][ T7796]  ? fput+0x9b/0xd0
[  215.887952][ T7796]  ? ksys_write+0x1ac/0x250
[  215.887974][ T7796]  ? __pfx_ksys_write+0x10/0x10
[  215.888001][ T7796]  __x64_sys_sendmmsg+0x9c/0x100
[  215.888021][ T7796]  ? lockdep_hardirqs_on+0x7c/0x110
[  215.888042][ T7796]  do_syscall_64+0xcd/0xfa0
[  215.888066][ T7796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.888083][ T7796] RIP: 0033:0x7f6d8478eec9
[  215.888099][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.888116][ T7796] RSP: 002b:00007f6d85564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  215.888133][ T7796] RAX: ffffffffffffffda RBX: 00007f6d849e6180 RCX: 00007f6d8478eec9
[  215.888150][ T7796] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 0000000000000008
[  215.888162][ T7796] RBP: 00007f6d85564090 R08: 0000000000000000 R09: 0000000000000000
[  215.888173][ T7796] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000002
[  215.888183][ T7796] R13: 00007f6d849e6218 R14: 00007f6d849e6180 R15: 00007ffe1a39f2e8
[  215.888210][ T7796]  </TASK>
[  216.673486][ T5877] gs_usb 5-1:0.0: Couldn't get device config: (err=-110)
[  216.680620][ T5877] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110
[  217.366076][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.515262][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.604685][ T5877] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  218.327915][ T5877] usb 4-1: Using ep0 maxpacket: 32
[  218.366919][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short
[  218.376409][ T5815] usb 5-1: USB disconnect, device number 10
[  218.477190][ T5877] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[  218.490057][ T5877] usb 4-1: config 7 has no interface number 0
[  218.504675][ T5877] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  218.514530][ T5877] usb 4-1: config 7 interface 187 has no altsetting 0
[  218.539813][ T5877] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  218.663911][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.109330][ T5877] usb 4-1: Product: syz
[  219.113809][ T5877] usb 4-1: Manufacturer: syz
[  219.118600][ T5877] usb 4-1: SerialNumber: syz
[  219.131805][ T5877] usb 4-1: can't set config #7, error -71
[  219.138905][ T5877] usb 4-1: USB disconnect, device number 21
[  220.132135][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  220.132145][   T30] audit: type=1400 audit(1760501809.032:565): avc:  denied  { create } for  pid=7829 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  220.424245][ T5815] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  220.939979][ T7838] fuse: Unknown parameter 'fd0x000000000000000b00000000000000000000'
[  220.949378][ T7838] binder: 7834:7838 ioctl c0306201 0 returned -14
[  220.994653][ T5815] usb 2-1: Using ep0 maxpacket: 16
[  221.001008][ T5815] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  221.026379][ T5815] usb 2-1: config 0 has no interface number 0
[  221.063055][ T5815] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  221.185851][ T5815] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  221.214355][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.370749][ T5815] usb 2-1: Product: syz
[  221.413903][ T5815] usb 2-1: Manufacturer: syz
[  221.419241][ T5815] usb 2-1: SerialNumber: syz
[  221.426021][ T5815] usb 2-1: config 0 descriptor??
[  221.467194][   T30] audit: type=1400 audit(1760501810.372:566): avc:  denied  { setattr } for  pid=7839 comm="syz.3.493" path="socket:[15354]" dev="sockfs" ino=15354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  221.495336][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[  221.508334][ T7844] 9pnet_fd: Insufficient options for proto=fd
[  222.324710][   T30] audit: type=1400 audit(1760501810.472:567): avc:  denied  { setattr } for  pid=7839 comm="syz.3.493" name="midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  222.348245][    C0] vkms_vblank_simulate: vblank timer overrun
[  222.359715][   T30] audit: type=1400 audit(1760501810.492:568): avc:  denied  { accept } for  pid=7839 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  222.751626][ T5815] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input17
[  223.833328][   T30] audit: type=1400 audit(1760501812.732:569): avc:  denied  { ioctl } for  pid=7829 comm="syz.1.489" path="socket:[16126]" dev="sockfs" ino=16126 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  223.867122][ T7856] netlink: 'syz.2.498': attribute type 13 has an invalid length.
[  224.314674][ T5921] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  224.514739][ T5921] usb 4-1: Using ep0 maxpacket: 8
[  224.526284][ T5921] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  224.545744][ T5921] usb 4-1: config 0 has no interface number 0
[  224.562977][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  224.596843][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  224.619692][ T5921] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  224.633728][ T5921] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  224.647331][ T5921] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  224.656853][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.175123][ T5921] usb 4-1: config 0 descriptor??
[  225.198263][ T5921] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  225.238680][   T10] usb 2-1: USB disconnect, device number 13
[  225.275753][ T7884] virtiofs: Unknown parameter 'always 1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 21	vxcan0    :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 22	vxcan1    :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 23	veth0     :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 24	veth1     :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 25	wg0       :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 26	wg1       :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 27	wg2       :     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 28	veth0_to_bridge:     1      V3
[  225.275753][ T7884] 				010000E0     1 0:00000000		0
[  225.275753][ T7884] 29	bridge_slave_0:   '
[  225.605680][ T7895] netlink: 'syz.2.510': attribute type 15 has an invalid length.
[  225.613721][ T7895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'.
[  225.725346][ T5877] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  225.761333][ T7899] input: syz0 as /devices/virtual/input/input18
[  225.777907][   T30] audit: type=1400 audit(1760501814.682:570): avc:  denied  { relabelfrom } for  pid=7898 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  225.797649][    C0] vkms_vblank_simulate: vblank timer overrun
[  225.808968][   T30] audit: type=1400 audit(1760501814.692:571): avc:  denied  { relabelto } for  pid=7898 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  225.886612][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.898944][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.908756][ T5877] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  225.917883][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.927765][ T5877] usb 1-1: config 0 descriptor??
[  225.954806][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  226.119639][   T10] usb 2-1: config 0 has no interfaces?
[  226.128011][   T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  226.138237][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.146524][   T10] usb 2-1: Product: syz
[  226.150814][   T10] usb 2-1: Manufacturer: syz
[  226.155472][   T10] usb 2-1: SerialNumber: syz
[  226.162203][   T10] usb 2-1: config 0 descriptor??
[  226.350688][ T5877] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  226.361709][ T5857] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  226.373880][ T5877] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  226.430327][ T5877] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  226.433487][ T5921] usb 2-1: USB disconnect, device number 14
[  226.441933][ T7906] tipc: Started in network mode
[  226.457124][ T7906] tipc: Node identity c6d447d04271, cluster identity 4711
[  226.464386][ T7906] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.483549][ T7906] syzkaller0: entered promiscuous mode
[  226.494727][ T7906] syzkaller0: entered allmulticast mode
[  226.550649][ T5877] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE
[  226.566532][ T5857] usb 5-1: Using ep0 maxpacket: 32
[  226.596331][ T5857] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  226.614867][ T5857] usb 5-1: config 0 has no interface number 0
[  226.621011][ T5857] usb 5-1: config 0 interface 12 has no altsetting 0
[  226.646766][ T5857] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  226.656277][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.664274][ T5857] usb 5-1: Product: syz
[  226.668484][ T5857] usb 5-1: Manufacturer: syz
[  226.673083][ T5857] usb 5-1: SerialNumber: syz
[  226.679938][ T5857] usb 5-1: config 0 descriptor??
[  226.699402][ T7905] tipc: Resetting bearer <eth:syzkaller0>
[  226.714654][ T7905] tipc: Disabling bearer <eth:syzkaller0>
[  226.826119][ T7910] (syz.2.514,7910,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  226.835720][ T7910] (syz.2.514,7910,0):ocfs2_fill_super:1177 ERROR: status = -22
[  226.899122][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.910700][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.999644][ T7914] FAULT_INJECTION: forcing a failure.
[  226.999644][ T7914] name failslab, interval 1, probability 0, space 0, times 0
[  227.012991][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.1.516 Not tainted syzkaller #0 PREEMPT(full) 
[  227.013015][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.013026][ T7914] Call Trace:
[  227.013032][ T7914]  <TASK>
[  227.013038][ T7914]  dump_stack_lvl+0x16c/0x1f0
[  227.013066][ T7914]  should_fail_ex+0x512/0x640
[  227.013086][ T7914]  ? __kmalloc_noprof+0xca/0x880
[  227.013107][ T7914]  should_failslab+0xc2/0x120
[  227.013131][ T7914]  __kmalloc_noprof+0xdd/0x880
[  227.013150][ T7914]  ? iovec_from_user+0x108/0x140
[  227.013178][ T7914]  ? iovec_from_user+0x108/0x140
[  227.013199][ T7914]  iovec_from_user+0x108/0x140
[  227.013224][ T7914]  __import_iovec+0x88/0x650
[  227.013252][ T7914]  import_iovec+0x109/0x140
[  227.013282][ T7914]  vfs_writev+0x19b/0xde0
[  227.013302][ T7914]  ? get_pid_task+0x106/0x250
[  227.013331][ T7914]  ? __pfx_vfs_writev+0x10/0x10
[  227.013353][ T7914]  ? find_held_lock+0x2b/0x80
[  227.013385][ T7914]  ? __fget_files+0x20e/0x3c0
[  227.013414][ T7914]  ? do_pwritev+0x1a6/0x270
[  227.013433][ T7914]  do_pwritev+0x1a6/0x270
[  227.013454][ T7914]  ? __pfx_do_pwritev+0x10/0x10
[  227.013482][ T7914]  do_syscall_64+0xcd/0xfa0
[  227.013505][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.013522][ T7914] RIP: 0033:0x7f0e55d8eec9
[  227.013536][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.013553][ T7914] RSP: 002b:00007f0e56cac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[  227.013571][ T7914] RAX: ffffffffffffffda RBX: 00007f0e55fe5fa0 RCX: 00007f0e55d8eec9
[  227.013582][ T7914] RDX: 10000000000000bb RSI: 0000200000000040 RDI: 0000000000000003
[  227.013593][ T7914] RBP: 00007f0e56cac090 R08: 0000000000000001 R09: 0000000000000000
[  227.013603][ T7914] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  227.013613][ T7914] R13: 00007f0e55fe6038 R14: 00007f0e55fe5fa0 R15: 00007ffdbdc4bcc8
[  227.013638][ T7914]  </TASK>
[  227.301096][ T5857] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  227.330895][ T5921] usb 4-1: USB disconnect, device number 22
[  227.339304][ T5921] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  227.367990][ T5857] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  227.393988][ T5857] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  227.413382][ T5857] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  227.455234][ T5857] usb 5-1: USB disconnect, device number 11
[  227.774826][ T5921] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  227.926162][ T5921] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  227.934443][ T5921] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  227.945572][ T5921] usb 4-1: config 8 has no interface number 0
[  227.952366][ T5921] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  227.963528][ T5921] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.978618][ T5921] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  227.987874][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.995976][ T5921] usb 4-1: Product: syz
[  228.000178][ T5921] usb 4-1: Manufacturer: syz
[  228.004861][ T5921] usb 4-1: SerialNumber: syz
[  228.104712][ T5857] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  228.274760][ T5921] usb 4-1: USB disconnect, device number 23
[  228.276105][ T5857] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  229.034619][ T7931] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  229.094778][ T5877] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  229.111784][ T7931] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  229.117734][ T5857] usb 5-1: config 1 has no interface number 0
[  229.117774][ T5857] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  229.117798][ T5857] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  229.154359][ T5877] usb 1-1: USB disconnect, device number 10
[  229.174449][ T7931] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  229.191020][ T7931] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  229.200131][ T5857] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.216110][ T5857] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  229.225432][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.233431][ T5857] usb 5-1: Product: syz
[  229.236314][ T7931] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  229.237911][ T5857] usb 5-1: Manufacturer: syz
[  229.249033][ T5857] usb 5-1: SerialNumber: syz
[  229.273777][ T7929] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  229.421440][ T7941] bond0: Removing last ns target with arp_interval on
[  229.424840][ T7018] bond0: (slave bond_slave_0): interface is now down
[  229.431723][ T7941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7941 comm=syz.1.523
[  229.436800][ T7018] bond0: (slave bond_slave_1): interface is now down
[  229.463616][ T7018] bond0: now running without any active interface!
[  229.558261][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  229.596753][ T7929] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  229.776168][ T5877] usb 1-1: config 0 has an invalid interface number: 229 but max is 0
[  229.785266][ T5877] usb 1-1: config 0 has no interface number 0
[  229.791364][ T5877] usb 1-1: config 0 interface 229 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  229.803064][ T5877] usb 1-1: config 0 interface 229 has no altsetting 0
[  229.810177][ T5877] usb 1-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=8b.16
[  229.819317][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.827480][ T5857] usb 5-1: Incompatible driver and firmware versions
[  229.838590][ T5877] usb 1-1: config 0 descriptor??
[  229.849167][ T5877] usb 1-1: bad CDC descriptors
[  229.854803][ T5877] cdc_acm 1-1:0.229: Zero length descriptor references
[  229.861923][ T5877] cdc_acm 1-1:0.229: probe with driver cdc_acm failed with error -22
[  230.004287][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.526'.
[  230.025256][ T5877] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  230.098810][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.135113][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  230.149988][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.202063][ T5857] usb 1-1: USB disconnect, device number 11
[  230.213322][ T5877] usb 2-1: unable to read config index 0 descriptor/start: -71
[  230.251323][ T5877] usb 2-1: can't read configurations, error -71
[  230.534686][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  230.685955][    T9] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  230.694249][    T9] usb 3-1: config 0 has no interface number 0
[  230.702420][    T9] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[  230.712441][    T9] usb 3-1: config 0 interface 235 has no altsetting 0
[  230.721058][    T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  230.744289][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.752422][    T9] usb 3-1: Product: syz
[  230.764129][    T9] usb 3-1: Manufacturer: syz
[  230.774687][    T9] usb 3-1: SerialNumber: syz
[  230.795983][    T9] usb 3-1: config 0 descriptor??
[  230.823682][    T9] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected
[  230.845113][    T9] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87
[  230.863380][    T9] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7
[  230.883090][    T9] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81
[  230.892025][    T9] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1
[  230.905222][    T9] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85
[  230.923286][ T5857] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  230.972760][   T30] audit: type=1400 audit(1760501819.862:572): avc:  denied  { bind } for  pid=7928 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  230.994961][    T9] keyspan 3-1:0.235: unsupported endpoint type 0
[  231.001262][   T30] audit: type=1400 audit(1760501819.872:573): avc:  denied  { name_bind } for  pid=7928 comm="syz.4.520" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  231.009706][    T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  231.022950][ T7962] random: crng reseeded on system resumption
[  231.044477][   T30] audit: type=1400 audit(1760501819.872:574): avc:  denied  { node_bind } for  pid=7928 comm="syz.4.520" saddr=fe88::5 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  231.060367][    T9] usb 3-1: USB disconnect, device number 12
[  231.084163][ T7965] vlan2: entered promiscuous mode
[  231.089592][ T7965] vlan2: entered allmulticast mode
[  231.094944][ T7965] hsr_slave_1: entered allmulticast mode
[  231.100661][   T30] audit: type=1400 audit(1760501819.932:575): avc:  denied  { append } for  pid=7957 comm="syz.0.529" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  231.103555][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  231.127233][   T30] audit: type=1400 audit(1760501819.932:576): avc:  denied  { ioctl } for  pid=7957 comm="syz.0.529" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  231.137189][ T5857] usb 4-1: config 0 has no interfaces?
[  231.170467][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  231.178637][    T9] keyspan 3-1:0.235: device disconnected
[  231.193961][ T5857] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  231.208436][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.218928][ T5857] usb 4-1: Product: syz
[  231.223189][ T5857] usb 4-1: Manufacturer: syz
[  231.228083][ T5857] usb 4-1: SerialNumber: syz
[  231.235199][ T5857] usb 4-1: config 0 descriptor??
[  231.246233][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  231.252331][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  231.254640][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout
[  231.506605][ T5921] usb 4-1: USB disconnect, device number 24
[  232.030601][ T7964] 9pnet_fd: p9_fd_create_tcp (7964): problem connecting socket to 127.0.0.1
[  232.080766][    T9] usb 5-1: USB disconnect, device number 12
[  232.148981][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'.
[  232.167075][ T7983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.185485][ T5921] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  232.190183][ T7985] netlink: 248 bytes leftover after parsing attributes in process `syz.1.536'.
[  232.256440][ T7983] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.362305][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.404683][ T5921] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  232.424192][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.444699][ T5815] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  232.471633][ T5921] usb 1-1: config 0 descriptor??
[  232.496864][ T5921] pwc: Askey VC010 type 2 USB webcam detected.
[  232.575077][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  232.609187][ T7997] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  232.615729][ T7997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  232.624307][ T7997] vhci_hcd vhci_hcd.0: Device attached
[  232.631700][ T5815] usb 3-1: Using ep0 maxpacket: 32
[  232.638886][ T7999] vhci_hcd: connection closed
[  232.645324][ T7429] vhci_hcd: stop threads
[  232.659895][ T7429] vhci_hcd: release socket
[  232.665665][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  232.666940][ T7429] vhci_hcd: disconnect device
[  232.673670][ T5815] usb 3-1: config 0 has no interface number 0
[  232.701016][ T5815] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  232.710408][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.718792][ T5815] usb 3-1: Product: syz
[  232.723078][ T5815] usb 3-1: Manufacturer: syz
[  232.727982][ T5815] usb 3-1: SerialNumber: syz
[  232.736135][ T5815] usb 3-1: config 0 descriptor??
[  232.745908][ T5815] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  232.756708][ T5815] usb 3-1: selecting invalid altsetting 1
[  232.762467][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  232.764908][    T9] usb 4-1: Using ep0 maxpacket: 32
[  232.777801][    T9] usb 4-1: config 0 has an invalid interface number: 209 but max is 0
[  232.780847][ T5815] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  232.787347][    T9] usb 4-1: config 0 has no interface number 0
[  232.813008][    T9] usb 4-1: config 0 interface 209 has no altsetting 0
[  232.815090][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  232.838408][    T9] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23
[  232.854097][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.854861][ T5815] usb 3-1: media controller created
[  232.869761][    T9] usb 4-1: Product: syz
[  232.875626][    T9] usb 4-1: Manufacturer: syz
[  232.880224][    T9] usb 4-1: SerialNumber: syz
[  232.892407][    T9] usb 4-1: config 0 descriptor??
[  232.901860][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00
[  232.918760][ T5857] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  232.926413][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  232.935385][ T5921] pwc: recv_control_msg error -32 req 02 val 2700
[  232.944239][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00
[  232.952173][ T5921] pwc: recv_control_msg error -32 req 04 val 1000
[  232.969039][ T5921] pwc: recv_control_msg error -32 req 04 val 1300
[  232.978600][ T5921] pwc: recv_control_msg error -32 req 04 val 1400
[  232.996882][ T5921] pwc: recv_control_msg error -32 req 02 val 2000
[  233.014664][ T5921] pwc: recv_control_msg error -32 req 02 val 2100
[  233.023312][ T5921] pwc: recv_control_msg error -32 req 04 val 1500
[  233.031396][ T5921] pwc: recv_control_msg error -32 req 02 val 2500
[  233.039237][ T5815] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  233.047460][ T5815] zl10353_read_register: readreg error (reg=127, ret==-71)
[  233.059249][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  233.072666][ T5921] pwc: recv_control_msg error -32 req 02 val 2400
[  233.405228][ T5921] pwc: recv_control_msg error -71 req 02 val 2900
[  233.412287][ T5921] pwc: recv_control_msg error -71 req 02 val 2800
[  233.416764][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.428538][ T5921] pwc: recv_control_msg error -71 req 04 val 1100
[  233.450419][ T5921] pwc: recv_control_msg error -71 req 04 val 1200
[  233.451974][    T9] usb 4-1: USB disconnect, device number 25
[  233.476199][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.495073][ T5815] usb 3-1: USB disconnect, device number 13
[  233.506588][ T5857] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  233.516882][ T5921] pwc: Registered as video103.
[  233.523340][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[  233.563842][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.624821][ T5921] usb 1-1: USB disconnect, device number 12
[  233.637768][ T5857] usb 5-1: config 0 descriptor??
[  233.823679][   T30] audit: type=1804 audit(1760501822.722:577): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.544" name="/newroot/112/file1" dev="fuse" ino=1 res=1 errno=0
[  233.854957][   T30] audit: type=1800 audit(1760501822.722:578): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.544" name="/" dev="fuse" ino=1 res=0 errno=0
[  233.881791][   T30] audit: type=1800 audit(1760501822.732:579): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.544" name="/" dev="fuse" ino=1 res=0 errno=0
[  234.004869][ T8022] syzkaller0: entered promiscuous mode
[  234.010417][ T8022] syzkaller0: entered allmulticast mode
[  234.117422][ T5857] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  234.193518][ T5857] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  234.217790][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.259775][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.286490][ T8030] netlink: 56 bytes leftover after parsing attributes in process `syz.3.548'.
[  234.316116][ T5857] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE
[  234.499117][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  234.767584][   T30] audit: type=1400 audit(1760501823.662:580): avc:  denied  { map } for  pid=8038 comm="syz.1.552" path="socket:[17519]" dev="sockfs" ino=17519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  234.831322][   T30] audit: type=1400 audit(1760501823.672:581): avc:  denied  { read } for  pid=8038 comm="syz.1.552" path="socket:[17519]" dev="sockfs" ino=17519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  235.257278][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.270772][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.524734][ T5857] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71
[  235.569992][ T5857] usb 5-1: USB disconnect, device number 13
[  235.926159][ T8065] nbd: must specify an index to disconnect
[  236.952142][ T8087] netlink: 'syz.3.563': attribute type 1 has an invalid length.
[  236.960162][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'.
[  236.969110][ T8087] nbd: must specify a size in bytes for the device
[  237.040180][ T8089] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  237.052930][    T9] IPVS: starting estimator thread 0...
[  237.082913][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  237.082928][   T30] audit: type=1400 audit(1760501825.982:583): avc:  denied  { mount } for  pid=8092 comm="syz.4.568" name="/" dev="ramfs" ino=17625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  237.111082][    C1] vkms_vblank_simulate: vblank timer overrun
[  237.214480][ T8099] : Can't lookup blockdev
[  237.322999][ T8091] IPVS: using max 44 ests per chain, 105600 per kthread
[  237.701787][   T30] audit: type=1400 audit(1760501826.012:584): avc:  denied  { setopt } for  pid=8063 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  239.638503][   T30] audit: type=1400 audit(1760501828.542:585): avc:  denied  { map } for  pid=8127 comm="syz.1.578" path="socket:[17029]" dev="sockfs" ino=17029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  239.796841][   T30] audit: type=1400 audit(1760501828.622:586): avc:  denied  { accept } for  pid=8127 comm="syz.1.578" path="socket:[17029]" dev="sockfs" ino=17029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  239.854694][   T30] audit: type=1400 audit(1760501828.632:587): avc:  denied  { setopt } for  pid=8127 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  240.074712][   T30] audit: type=1400 audit(1760501828.642:588): avc:  denied  { module_request } for  pid=8127 comm="syz.1.578" kmod="netdev-syztnl2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  240.255852][   T30] audit: type=1400 audit(1760501828.692:589): avc:  denied  { getopt } for  pid=8127 comm="syz.1.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  240.365882][   T30] audit: type=1400 audit(1760501828.832:590): avc:  denied  { setopt } for  pid=8137 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  240.982511][ T8144] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  241.107402][ T8156] : Can't lookup blockdev
[  241.354976][ T8144] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  241.374197][ T8144] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  241.400597][ T8144] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  241.417131][ T8144] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  241.512751][ T8160] team_slave_1: Caught tx_queue_len zero misconfig
[  241.645599][ T8160] netlink: 80 bytes leftover after parsing attributes in process `syz.4.584'.
[  241.688130][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  241.700079][ T8164] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[8164]
[  241.721374][ T8164] bond0: Caught tx_queue_len zero misconfig
[  241.824791][   T30] audit: type=1400 audit(1760501830.677:591): avc:  denied  { connect } for  pid=8161 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  241.865689][    T9] usb 1-1: Using ep0 maxpacket: 32
[  241.886651][    T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  242.010252][    T9] usb 1-1: config 0 has no interface number 0
[  242.021120][    T9] usb 1-1: config 0 interface 12 has no altsetting 0
[  242.032666][   T30] audit: type=1400 audit(1760501830.687:592): avc:  denied  { shutdown } for  pid=8161 comm="syz.2.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  242.503957][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout
[  242.613546][    T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  242.622917][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.631033][    T9] usb 1-1: Product: syz
[  242.635365][    T9] usb 1-1: Manufacturer: syz
[  242.639994][    T9] usb 1-1: SerialNumber: syz
[  242.647048][    T9] usb 1-1: config 0 descriptor??
[  242.878401][    T9] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  242.892830][    T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  242.902162][    T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  242.931261][    T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  242.969896][    T9] usb 1-1: USB disconnect, device number 13
[  243.334881][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  243.350463][ T5857] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  243.405588][ T5811] Bluetooth: hci3: command 0x0c1a tx timeout
[  243.412039][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout
[  243.424988][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout
[  243.446780][   T30] audit: type=1400 audit(1760501832.357:593): avc:  denied  { ioctl } for  pid=8187 comm="syz.3.594" path="socket:[17776]" dev="sockfs" ino=17776 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  243.484699][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout
[  243.553680][ T5857] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  243.564361][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.576670][ T5857] usb 2-1: config 0 descriptor??
[  243.588958][ T5857] gspca_main: sunplus-2.14.0 probing 055f:c420
[  243.595251][   T10] usb 5-1: Using ep0 maxpacket: 16
[  243.606336][   T10] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.623048][   T10] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.658840][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  243.675225][   T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  243.698965][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.735414][   T30] audit: type=1400 audit(1760501832.627:594): avc:  denied  { name_connect } for  pid=8189 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  243.763876][   T10] usb 5-1: config 0 descriptor??
[  244.046429][ T5857] gspca_sunplus: reg_w_riv err -71
[  244.109456][ T5857] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  244.143760][ T5857] usb 2-1: USB disconnect, device number 17
[  244.155653][ T8207] netlink: 129704 bytes leftover after parsing attributes in process `syz.0.598'.
[  244.282588][ T8215] lo: Caught tx_queue_len zero misconfig
[  244.390408][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  244.397338][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  244.435952][   T10] usb 5-1: USB disconnect, device number 14
[  244.598062][   T30] audit: type=1400 audit(1760501833.507:595): avc:  denied  { accept } for  pid=8227 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  244.601136][ T8228] SELinux:  Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped).
[  245.648399][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.657672][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.659167][ T8243] netlink: 'syz.0.606': attribute type 13 has an invalid length.
[  245.673796][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.682620][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.869816][ T8247] random: crng reseeded on system resumption
[  245.924704][   T30] audit: type=1400 audit(1760501834.777:596): avc:  denied  { write } for  pid=8245 comm="syz.4.609" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  246.231886][   T30] audit: type=1400 audit(1760501835.137:597): avc:  denied  { bind } for  pid=8251 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  246.342302][ T8254] netlink: zone id is out of range
[  246.347537][ T8254] netlink: zone id is out of range
[  246.352856][ T8254] netlink: zone id is out of range
[  246.358235][ T8254] netlink: zone id is out of range
[  246.363361][ T8254] netlink: zone id is out of range
[  246.369180][ T8254] netlink: zone id is out of range
[  246.824446][   T30] audit: type=1400 audit(1760501835.727:598): avc:  denied  { audit_write } for  pid=8256 comm="syz.4.614" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  247.422544][   T30] audit: type=1400 audit(1760501836.327:599): avc:  denied  { ioctl } for  pid=8259 comm="syz.0.613" path="socket:[17318]" dev="sockfs" ino=17318 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  247.601974][   T30] audit: type=1400 audit(1760501836.427:600): avc:  denied  { write } for  pid=8265 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  247.623149][ T5857] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  247.670507][   T30] audit: type=1400 audit(1760501836.447:601): avc:  denied  { write } for  pid=8265 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  247.827327][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.841846][ T5857] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  247.851396][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.237386][ T5857] usb 3-1: config 0 descriptor??
[  248.245671][ T5857] pwc: Askey VC010 type 2 USB webcam detected.
[  248.329515][ T1336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.513348][ T1336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.011269][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[  249.037547][ T8286] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  249.037547][ T8286]    program syz.1.622 not setting count and/or reply_len properly
[  249.145314][   T30] audit: type=1400 audit(1760501837.937:602): avc:  denied  { getopt } for  pid=8279 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  249.210627][ T1336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.460633][ T8282] overlay: Unknown parameter 'dont_hash'
[  249.687639][ T1336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.737583][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.741788][   T30] audit: type=1400 audit(1760501838.637:603): avc:  denied  { setopt } for  pid=8289 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  249.746271][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.776186][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.785417][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.793719][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.800954][  T934] IPVS: starting estimator thread 0...
[  249.857352][   T30] audit: type=1400 audit(1760501838.677:604): avc:  denied  { read } for  pid=8289 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  249.890241][   T30] audit: type=1400 audit(1760501838.717:605): avc:  denied  { mounton } for  pid=8292 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  249.915686][ T8297] IPVS: using max 43 ests per chain, 103200 per kthread
[  249.924684][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  250.217942][ T5857] pwc: recv_control_msg error -71 req 02 val 2b00
[  250.225203][    T9] usb 2-1: device descriptor read/64, error -71
[  250.261192][ T5857] pwc: recv_control_msg error -71 req 02 val 2700
[  250.269665][ T1336] bridge_slave_1: left allmulticast mode
[  250.291135][   T30] audit: type=1326 audit(1760501838.957:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.350003][ T1336] bridge_slave_1: left promiscuous mode
[  250.357706][ T5857] pwc: recv_control_msg error -71 req 02 val 2c00
[  250.362244][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.370215][ T5857] pwc: recv_control_msg error -71 req 04 val 1000
[  250.383052][   T30] audit: type=1326 audit(1760501838.957:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.406760][ T5857] pwc: recv_control_msg error -71 req 04 val 1300
[  250.419444][ T5857] pwc: recv_control_msg error -71 req 04 val 1400
[  250.431831][   T30] audit: type=1326 audit(1760501838.957:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.459638][ T5857] pwc: recv_control_msg error -71 req 02 val 2000
[  250.468113][   T30] audit: type=1326 audit(1760501838.957:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.475312][ T1336] bridge_slave_0: left allmulticast mode
[  250.491563][ T5857] pwc: recv_control_msg error -71 req 02 val 2100
[  250.504145][   T30] audit: type=1326 audit(1760501838.957:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.527845][ T1336] bridge_slave_0: left promiscuous mode
[  250.527853][ T5857] pwc: recv_control_msg error -71 req 04 val 1500
[  250.528256][ T5857] pwc: recv_control_msg error -71 req 02 val 2500
[  250.533554][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.544694][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  250.562707][ T5857] pwc: recv_control_msg error -71 req 02 val 2400
[  250.571558][ T5857] pwc: recv_control_msg error -71 req 02 val 2600
[  250.614030][ T5857] pwc: recv_control_msg error -71 req 02 val 2900
[  250.628507][   T30] audit: type=1326 audit(1760501838.957:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8300 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a718eec9 code=0x7ffc0000
[  250.652519][ T5857] pwc: recv_control_msg error -71 req 02 val 2800
[  250.662288][ T5857] pwc: recv_control_msg error -71 req 04 val 1100
[  250.670419][ T5857] pwc: recv_control_msg error -71 req 04 val 1200
[  250.678884][ T5857] pwc: Registered as video103.
[  250.685419][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  250.713116][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  250.753205][    T9] usb 2-1: device descriptor read/64, error -71
[  250.774112][ T7018] net_ratelimit: 227 callbacks suppressed
[  250.774129][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.793380][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.802099][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.802244][ T5857] usb 3-1: USB disconnect, device number 14
[  250.855746][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  250.870017][ T6247] udevd[6247]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  250.887843][    T9] usb usb2-port1: attempt power cycle
[  250.908517][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  250.929065][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.949566][   T10] usb 1-1: Product: syz
[  250.966419][   T10] usb 1-1: Manufacturer: syz
[  250.981222][   T10] usb 1-1: SerialNumber: syz
[  251.002251][   T10] cdc_ncm 1-1:1.0: skipping garbage
[  251.204656][ T5857] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  251.245189][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  251.265345][    T9] usb 2-1: device descriptor read/8, error -71
[  251.323274][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.333620][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.343370][ T1336] bond0 (unregistering): Released all slaves
[  251.383692][ T5857] usb 3-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config
[  251.405302][ T5857] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  251.416857][ T5857] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  251.425974][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.433983][ T5857] usb 3-1: Product: syz
[  251.438436][ T5857] usb 3-1: Manufacturer: syz
[  251.443061][ T5857] usb 3-1: SerialNumber: syz
[  251.449458][ T1336] bond1 (unregistering): Released all slaves
[  251.459343][ T5857] usb 3-1: config 0 descriptor??
[  251.524835][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  251.547843][    T9] usb 2-1: device descriptor read/8, error -71
[  251.675402][    T9] usb usb2-port1: unable to enumerate USB device
[  251.715004][ T5857] usb 3-1: USB disconnect, device number 15
[  251.719849][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'.
[  251.810462][   T10] cdc_ncm 1-1:1.0: bind() failure
[  251.829726][   T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  251.836731][   T10] cdc_ncm 1-1:1.1: bind() failure
[  251.838857][ T8292] chnl_net:caif_netlink_parms(): no params data found
[  251.852167][   T10] usb 1-1: USB disconnect, device number 14
[  251.884799][ T5823] Bluetooth: hci2: command tx timeout
[  251.926877][ T1336] hsr_slave_0: left promiscuous mode
[  251.933229][ T1336] hsr_slave_1: left promiscuous mode
[  251.942461][ T1336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.950188][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.968186][ T1336] veth1_macvtap: left promiscuous mode
[  251.974639][ T1336] veth0_macvtap: left promiscuous mode
[  251.980435][ T1336] veth1_vlan: left promiscuous mode
[  251.987280][ T1336] veth0_vlan: left promiscuous mode
[  252.280839][ T1336] team0 (unregistering): Port device team_slave_1 removed
[  252.418386][ T1336] team0 (unregistering): Port device team_slave_0 removed
[  252.512848][ T8351] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  253.147386][ T8353] ubi31: attaching mtd0
[  253.153509][ T8353] ubi31: scanning is finished
[  253.158234][ T8353] ubi31: empty MTD device detected
[  253.364633][ T5857] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  253.437852][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[  253.492905][ T8353] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  253.562183][ T8359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.634'.
[  253.585930][ T5857] usb 3-1: not running at top speed; connect to a high speed hub
[  253.602112][ T5857] usb 3-1: config 1 has an invalid descriptor of length 73, skipping remainder of the config
[  253.615496][ T5857] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  253.633690][ T5857] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57
[  253.643819][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.652228][ T5857] usb 3-1: Product: syz
[  253.656653][ T5857] usb 3-1: Manufacturer: syz
[  253.661451][ T5857] usb 3-1: SerialNumber: syz
[  253.854777][  T934] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  253.989781][ T5823] Bluetooth: hci2: command tx timeout
[  254.016661][  T934] usb 2-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config
[  254.040166][  T934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.065158][  T934] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  254.087160][  T934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  254.176772][  T934] usb 2-1: SerialNumber: syz
[  254.291518][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.304253][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.324538][ T8292] bridge_slave_0: entered allmulticast mode
[  254.339910][ T8292] bridge_slave_0: entered promiscuous mode
[  254.489077][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.496881][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.505035][ T8292] bridge_slave_1: entered allmulticast mode
[  254.512401][ T8292] bridge_slave_1: entered promiscuous mode
[  255.259041][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.265596][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  255.369045][ T5857] usb 3-1: USB disconnect, device number 16
[  255.808422][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.863379][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.872278][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.968551][  T934] usb 2-1: 0:2 : does not exist
[  255.973452][  T934] usb 2-1: unit 5: unexpected type 0x0a
[  256.001556][  T934] usb 2-1: USB disconnect, device number 22
[  256.054857][ T5823] Bluetooth: hci2: command tx timeout
[  256.122253][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  256.153318][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.187435][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  256.187449][   T30] audit: type=1400 audit(1760501845.097:624): avc:  denied  { read write } for  pid=8380 comm="syz.2.638" dev="sockfs" ino=18244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  256.215285][    C0] vkms_vblank_simulate: vblank timer overrun
[  256.274817][ T8385] syzkaller0: entered promiscuous mode
[  256.280367][ T8385] syzkaller0: entered allmulticast mode
[  256.644867][   T30] audit: type=1326 audit(1760501845.517:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  256.749661][   T30] audit: type=1326 audit(1760501845.517:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  256.963469][   T30] audit: type=1326 audit(1760501845.517:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.026354][ T8406] : Can't lookup blockdev
[  257.258020][   T30] audit: type=1326 audit(1760501845.517:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.351111][   T30] audit: type=1326 audit(1760501845.517:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.374683][   T30] audit: type=1326 audit(1760501845.517:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.405988][   T30] audit: type=1326 audit(1760501845.517:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.448113][   T30] audit: type=1326 audit(1760501845.517:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  257.558229][   T30] audit: type=1326 audit(1760501845.517:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.0.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d8478eec9 code=0x7ffc0000
[  258.124747][ T5823] Bluetooth: hci2: command tx timeout
[  258.524253][ T8292] team0: Port device team_slave_0 added
[  258.539137][ T8410] IPv6: sit1: Disabled Multicast RS
[  258.545197][ T8410] sit1: entered allmulticast mode
[  258.618438][ T8292] team0: Port device team_slave_1 added
[  258.801042][ T8420] IPVS: set_ctl: invalid protocol: 41 172.30.1.3:20003
[  258.937088][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.976180][    T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  259.003971][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.177177][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.199797][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  259.238973][ T8417] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  259.244775][ T8416] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  259.272792][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.273378][ T8436] geneve2: entered promiscuous mode
[  259.286673][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.331381][    T9] usb 4-1: Product: syz
[  259.340499][    T9] usb 4-1: Manufacturer: syz
[  259.352156][    T9] usb 4-1: SerialNumber: syz
[  259.364820][ T8436] geneve2: entered allmulticast mode
[  259.395510][    T9] cdc_ncm 4-1:1.0: skipping garbage
[  259.405554][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.446293][ T8436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.646'.
[  259.457987][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.493947][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'.
[  259.505586][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.533296][ T8445] 9pnet_fd: Insufficient options for proto=fd
[  259.612527][ T8292] hsr_slave_0: entered promiscuous mode
[  259.621133][ T8292] hsr_slave_1: entered promiscuous mode
[  259.794690][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  259.818766][ T8292] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.829930][ T8292] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.840587][ T8292] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.854365][ T8292] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.946348][   T10] usb 3-1: config 0 has no interfaces?
[  259.963280][   T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  259.977687][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.986697][   T10] usb 3-1: Product: syz
[  259.992856][    T9] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  260.002022][   T10] usb 3-1: Manufacturer: syz
[  260.007281][    T9] cdc_ncm 4-1:1.0: bind() failure
[  260.017326][   T10] usb 3-1: SerialNumber: syz
[  260.018799][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.032531][   T10] usb 3-1: config 0 descriptor??
[  260.039315][    T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  260.046196][ T8292] 8021q: adding VLAN 0 to HW filter on device team0
[  260.071560][    T9] cdc_ncm 4-1:1.1: bind() failure
[  260.088755][    T9] usb 4-1: USB disconnect, device number 27
[  260.115632][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.122774][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.148795][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.155906][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.357054][ T8443] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.464797][ T8443] netdevsim netdevsim2 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  260.577149][ T8478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  260.583677][ T8478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  260.634825][  T934] usb 3-1: USB disconnect, device number 17
[  260.634923][ T8478] vhci_hcd vhci_hcd.0: Device attached
[  260.670513][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  260.674339][ T8292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.813595][ T8488] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  260.894704][ T5815] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  260.963752][ T8292] veth0_vlan: entered promiscuous mode
[  260.983240][ T8292] veth1_vlan: entered promiscuous mode
[  261.019665][ T8292] veth0_macvtap: entered promiscuous mode
[  261.031620][ T8292] veth1_macvtap: entered promiscuous mode
[  261.057189][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.073418][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.094433][ T7429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.108760][ T7429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.119228][ T7429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.171759][ T8494] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  261.192705][    T9] IPVS: starting estimator thread 0...
[  261.239196][ T7429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.287796][ T8496] IPVS: using max 45 ests per chain, 108000 per kthread
[  262.305453][ T8479] vhci_hcd: connection reset by peer
[  262.483190][   T36] vhci_hcd: stop threads
[  262.559701][   T36] vhci_hcd: release socket
[  262.644847][   T36] vhci_hcd: disconnect device
[  263.470016][ T8508] netlink: zone id is out of range
[  263.475223][ T8508] netlink: zone id is out of range
[  263.480354][ T8508] netlink: zone id is out of range
[  263.485622][ T8508] netlink: zone id is out of range
[  263.490786][ T8508] netlink: zone id is out of range
[  263.496025][ T8508] netlink: zone id is out of range
[  263.501162][ T8508] netlink: zone id is out of range
[  263.511107][ T8508] netlink: zone id is out of range
[  263.517425][ T8508] netlink: zone id is out of range
[  263.522559][ T8508] netlink: zone id is out of range
[  263.787222][ T6506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.814529][ T6506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.823772][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  263.823787][   T30] audit: type=1400 audit(1760501852.727:640): avc:  denied  { ioctl } for  pid=8510 comm="syz.3.657" path="socket:[19770]" dev="sockfs" ino=19770 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  263.825383][ T8511] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  263.910836][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.929035][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.936598][   T30] audit: type=1400 audit(1760501852.837:641): avc:  denied  { read } for  pid=8503 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  264.012093][   T30] audit: type=1400 audit(1760501852.917:642): avc:  denied  { mounton } for  pid=8292 comm="syz-executor" path="/root/syzkaller.1fMkN2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  264.110980][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'.
[  264.882316][ T8535] input: syz1 as /devices/virtual/input/input22
[  265.415808][ T5478] netdevsim netdevsim2 dev0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  265.504763][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  265.757273][   T49] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  265.766563][ T5857] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.781629][ T5857] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.791140][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.800129][ T5857] usb 6-1: Product: syz
[  265.804386][ T5857] usb 6-1: Manufacturer: syz
[  265.820804][ T5857] usb 6-1: SerialNumber: syz
[  266.101410][ T5857] cdc_ncm 6-1:1.0: skipping garbage
[  266.105835][   T49] usb 2-1: Using ep0 maxpacket: 8
[  266.123343][   T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.134437][   T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  266.153143][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  266.164254][ T5815] vhci_hcd: vhci_device speed not set
[  266.170282][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  266.180375][   T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  266.195734][   T49] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  266.208389][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  266.220654][   T49] usb 2-1: Product: syz
[  266.224949][   T49] usb 2-1: Manufacturer: syz
[  266.229590][   T49] usb 2-1: SerialNumber: syz
[  266.240194][   T49] usb 2-1: config 0 descriptor??
[  266.280952][ T8574] FAULT_INJECTION: forcing a failure.
[  266.280952][ T8574] name failslab, interval 1, probability 0, space 0, times 0
[  266.294664][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.3.668 Not tainted syzkaller #0 PREEMPT(full) 
[  266.294690][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  266.294700][ T8574] Call Trace:
[  266.294706][ T8574]  <TASK>
[  266.294713][ T8574]  dump_stack_lvl+0x16c/0x1f0
[  266.294744][ T8574]  should_fail_ex+0x512/0x640
[  266.294764][ T8574]  ? __kmalloc_cache_node_noprof+0x62/0x7a0
[  266.294790][ T8574]  should_failslab+0xc2/0x120
[  266.294814][ T8574]  __kmalloc_cache_node_noprof+0x75/0x7a0
[  266.294832][ T8574]  ? page_pool_create_percpu+0x7a/0xc90
[  266.294854][ T8574]  ? trace_kmalloc+0x2b/0xd0
[  266.294881][ T8574]  ? __kvmalloc_node_noprof+0x3c0/0x9c0
[  266.294907][ T8574]  ? page_pool_create_percpu+0x7a/0xc90
[  266.294929][ T8574]  page_pool_create_percpu+0x7a/0xc90
[  266.294953][ T8574]  bpf_test_run_xdp_live+0x198/0x500
[  266.294974][ T8574]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  266.294994][ T8574]  ? find_held_lock+0x2b/0x80
[  266.295017][ T8574]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  266.295054][ T8574]  ? 0xffffffffa02057c0
[  266.295070][ T8574]  ? 0xffffffffa02057c0
[  266.295083][ T8574]  ? 0xffffffffa02057c0
[  266.295094][ T8574]  ? bpf_dispatcher_change_prog+0x54d/0xa80
[  266.295116][ T8574]  bpf_prog_test_run_xdp+0x87e/0x1670
[  266.295143][ T8574]  ? __fget_files+0x204/0x3c0
[  266.295167][ T8574]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  266.295190][ T8574]  ? __might_fault+0xa0/0x190
[  266.295212][ T8574]  ? fput+0x9b/0xd0
[  266.295226][ T8574]  ? __bpf_prog_get+0x97/0x2a0
[  266.295250][ T8574]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  266.295272][ T8574]  __sys_bpf+0x1035/0x4980
[  266.295297][ T8574]  ? __pfx___sys_bpf+0x10/0x10
[  266.295316][ T8574]  ? find_held_lock+0x2b/0x80
[  266.295338][ T8574]  ? find_held_lock+0x2b/0x80
[  266.295360][ T8574]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  266.295397][ T8574]  ? fput+0x9b/0xd0
[  266.295412][ T8574]  ? ksys_write+0x1ac/0x250
[  266.295434][ T8574]  ? __pfx_ksys_write+0x10/0x10
[  266.295461][ T8574]  __x64_sys_bpf+0x78/0xc0
[  266.295480][ T8574]  ? lockdep_hardirqs_on+0x7c/0x110
[  266.295500][ T8574]  do_syscall_64+0xcd/0xfa0
[  266.295523][ T8574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.295539][ T8574] RIP: 0033:0x7f57a718eec9
[  266.295552][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.295568][ T8574] RSP: 002b:00007f57a7f65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  266.295585][ T8574] RAX: ffffffffffffffda RBX: 00007f57a73e5fa0 RCX: 00007f57a718eec9
[  266.295596][ T8574] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  266.295605][ T8574] RBP: 00007f57a7f65090 R08: 0000000000000000 R09: 0000000000000000
[  266.295615][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  266.295624][ T8574] R13: 00007f57a73e6038 R14: 00007f57a73e5fa0 R15: 00007ffe71ecacf8
[  266.295648][ T8574]  </TASK>
[  266.614799][   T49] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  266.621876][ T5857] cdc_ncm 6-1:1.0: bind() failure
[  266.631971][ T5857] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  266.644764][ T5857] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  266.655863][ T5857] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  266.667260][ T5857] usb 6-1: USB disconnect, device number 2
[  266.752387][   T49] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  266.771877][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'.
[  266.816988][   T49] radio-si470x 2-1:0.0: software version 51, hardware version 113
[  266.825589][   T49] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  267.004888][  T934] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  267.143650][   T49] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  267.155542][   T49] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  267.163923][   T49] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  267.175333][  T934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  267.187046][   T49] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  267.204745][  T934] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  267.214320][  T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.226674][   T49] usb 2-1: USB disconnect, device number 23
[  267.237754][  T934] usb 3-1: Product: syz
[  267.242198][  T934] usb 3-1: Manufacturer: syz
[  267.249522][  T934] usb 3-1: SerialNumber: syz
[  267.273295][  T934] usb 3-1: config 0 descriptor??
[  267.523874][ T8602] FAULT_INJECTION: forcing a failure.
[  267.523874][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.363776][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.5.676 Not tainted syzkaller #0 PREEMPT(full) 
[  268.363807][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  268.363817][ T8602] Call Trace:
[  268.363823][ T8602]  <TASK>
[  268.363829][ T8602]  dump_stack_lvl+0x16c/0x1f0
[  268.363852][ T8602]  should_fail_ex+0x512/0x640
[  268.363876][ T8602]  _copy_to_user+0x32/0xd0
[  268.363898][ T8602]  simple_read_from_buffer+0xcb/0x170
[  268.363920][ T8602]  proc_fail_nth_read+0x197/0x240
[  268.363943][ T8602]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  268.363968][ T8602]  ? rw_verify_area+0xcf/0x6c0
[  268.363984][ T8602]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  268.364007][ T8602]  vfs_read+0x1e4/0xcf0
[  268.364031][ T8602]  ? __pfx___mutex_lock+0x10/0x10
[  268.364053][ T8602]  ? __pfx_vfs_read+0x10/0x10
[  268.364081][ T8602]  ? __fget_files+0x20e/0x3c0
[  268.364110][ T8602]  ksys_read+0x12a/0x250
[  268.364128][ T8602]  ? __pfx_ksys_read+0x10/0x10
[  268.364148][ T8602]  ? fput+0x9b/0xd0
[  268.364167][ T8602]  do_syscall_64+0xcd/0xfa0
[  268.364188][ T8602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.364205][ T8602] RIP: 0033:0x7f63cf78d8dc
[  268.364219][ T8602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  268.364234][ T8602] RSP: 002b:00007f63cd9b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  268.364249][ T8602] RAX: ffffffffffffffda RBX: 00007f63cf9e6180 RCX: 00007f63cf78d8dc
[  268.364261][ T8602] RDX: 000000000000000f RSI: 00007f63cd9b40a0 RDI: 000000000000000a
[  268.364270][ T8602] RBP: 00007f63cd9b4090 R08: 0000000000000000 R09: 0000000000000000
[  268.364279][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  268.364289][ T8602] R13: 00007f63cf9e6218 R14: 00007f63cf9e6180 R15: 00007ffd094b7b68
[  268.364314][ T8602]  </TASK>
[  268.907851][  T934] usb 3-1: USB disconnect, device number 18
[  269.201402][ T8622] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  269.253702][ T8625] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0
[  269.437533][ T8631] netlink: 'syz.3.684': attribute type 1 has an invalid length.
[  269.515461][ T8631] 8021q: adding VLAN 0 to HW filter on device bond2
[  270.260042][ T8630] bond2: (slave geneve2): making interface the new active one
[  270.348142][ T8630] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  270.486059][ T8634] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  270.502234][ T8634] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  270.512033][ T8634] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  270.530265][ T8634] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  270.595671][ T8634] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  270.632567][ T8634] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  270.671508][ T8634] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  270.864735][   T30] audit: type=1400 audit(1760501859.737:643): avc:  denied  { append } for  pid=8654 comm="syz.1.689" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  270.869687][ T8663] vlan2: entered allmulticast mode
[  270.889393][ T8665] netlink: 60 bytes leftover after parsing attributes in process `syz.5.690'.
[  270.934698][ T8663] macvtap0: entered allmulticast mode
[  270.975317][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'.
[  270.979021][ T8663] veth0_macvtap: entered allmulticast mode
[  271.036522][  T934] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  271.111926][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  271.356561][ T8680] net_ratelimit: 214 callbacks suppressed
[  271.356595][ T8680] netlink: zone id is out of range
[  271.367608][ T8680] netlink: zone id is out of range
[  271.372749][ T8680] netlink: zone id is out of range
[  271.377909][ T8680] netlink: zone id is out of range
[  271.383053][ T8680] netlink: zone id is out of range
[  271.388259][ T8680] netlink: zone id is out of range
[  271.393401][ T8680] netlink: zone id is out of range
[  271.404360][ T8680] netlink: zone id is out of range
[  271.410521][ T8680] netlink: zone id is out of range
[  271.415708][ T8680] netlink: zone id is out of range
[  271.642572][  T934] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  271.672498][  T934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.718449][  T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.859831][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.694'.
[  271.917454][  T934] usb 3-1: Product: syz
[  271.921714][  T934] usb 3-1: Manufacturer: syz
[  271.926589][  T934] usb 3-1: SerialNumber: syz
[  272.072721][  T934] cdc_ncm 3-1:1.0: skipping garbage
[  272.155776][ T8687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.163630][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.289083][  T934] cdc_ncm 3-1:1.0: bind() failure
[  272.296420][  T934] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  272.304234][  T934] cdc_ncm 3-1:1.1: bind() failure
[  272.315062][ T8687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.325489][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.333072][  T934] usb 3-1: USB disconnect, device number 19
[  272.526485][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  272.526523][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  272.539324][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout
[  272.604946][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout
[  272.610985][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  272.779601][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.789941][ T8713] batadv_slave_0: entered promiscuous mode
[  273.379055][ T8702] ceph: No mds server is up or the cluster is laggy
[  273.694224][ T8719] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  273.705915][ T8719] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  273.744496][ T8719] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  273.757746][ T8719] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  273.770908][ T8719] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  274.060488][   T30] audit: type=1804 audit(1760501862.787:644): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.702" name="bus" dev="ramfs" ino=20527 res=1 errno=0
[  274.414869][ T5857] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  274.544876][ T5857] usb 2-1: device descriptor read/64, error -71
[  274.846866][ T8746] netlink: 'syz.0.705': attribute type 1 has an invalid length.
[  274.925386][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  274.945451][ T5857] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  274.964067][   T30] audit: type=1400 audit(1760501863.867:645): avc:  denied  { create } for  pid=8745 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  274.967927][ T8746] bond2: entered promiscuous mode
[  275.034240][   T30] audit: type=1400 audit(1760501863.937:646): avc:  denied  { write } for  pid=8745 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  275.074780][ T8746] 8021q: adding VLAN 0 to HW filter on device bond2
[  275.167409][ T5857] usb 2-1: device descriptor read/64, error -71
[  275.220341][ T8764] netlink: 'syz.2.706': attribute type 1 has an invalid length.
[  275.234767][ T8764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.706'.
[  275.754647][   T52] Bluetooth: hci1: command 0x0c1a tx timeout
[  275.804771][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  275.810820][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  275.816908][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  275.851771][ T8749] 8021q: adding VLAN 0 to HW filter on device bond3
[  275.949596][ T5857] usb usb2-port1: attempt power cycle
[  276.023983][ T8768] xt_cgroup: invalid path, errno=-2
[  276.116891][ T8769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.707'.
[  276.453135][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'.
[  276.749516][ T8749] bond2: (slave bond3): making interface the new active one
[  276.781930][ T8749] bond3: entered promiscuous mode
[  276.805521][ T8749] bond2: (slave bond3): Enslaving as an active interface with an up link
[  277.000671][ T8772] veth0_macvtap: left allmulticast mode
[  277.016629][ T8772] veth0_macvtap: left promiscuous mode
[  277.212071][ T8746] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  277.224909][ T8746] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  277.894629][    T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  278.034667][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout
[  278.259122][    T9] usb 1-1: device descriptor read/64, error -71
[  278.853055][   T30] audit: type=1400 audit(1760501867.297:647): avc:  denied  { create } for  pid=8802 comm="syz.5.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  278.995983][    T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  279.124666][ T5815] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  279.154667][    T9] usb 1-1: device descriptor read/64, error -71
[  279.274524][    T9] usb usb1-port1: attempt power cycle
[  279.301700][  T934] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  279.324994][ T5815] usb 6-1: Using ep0 maxpacket: 16
[  279.339175][ T5815] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  279.684061][ T5815] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  279.719842][ T8821] binder: BINDER_SET_CONTEXT_MGR already set
[  279.726309][ T8821] binder: 8819:8821 ioctl 4018620d 200000004a80 returned -16
[  279.750838][  T934] usb 3-1: config 8 has an invalid interface number: 78 but max is 0
[  279.761795][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  279.771611][  T934] usb 3-1: config 8 has no interface number 0
[  279.778217][  T934] usb 3-1: config 8 interface 78 has no altsetting 0
[  279.785275][ T5815] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  279.795439][ T5815] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  279.817147][  T934] usb 3-1: New USB device found, idVendor=0421, idProduct=03cd, bcdDevice=51.ef
[  279.854478][    T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  279.875306][  T934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.895075][    T9] usb 1-1: device descriptor read/8, error -71
[  279.909280][ T5815] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  279.934276][  T934] usb 3-1: Product: syz
[  279.985803][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  279.998790][  T934] usb 3-1: Manufacturer: syz
[  280.003497][  T934] usb 3-1: SerialNumber: syz
[  280.035819][ T5815] usb 6-1: SerialNumber: syz
[  280.206116][ T5815] cdc_acm 6-1:1.0: skipping garbage
[  280.211447][ T5815] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  280.229796][ T5815] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  280.229803][    T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  280.236837][ T5815] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  280.264037][ T8815] netlink: 44 bytes leftover after parsing attributes in process `syz.2.718'.
[  280.559070][    T9] usb 1-1: device descriptor read/8, error -71
[  280.598131][  T934] rndis_host 3-1:8.78: More than one union descriptor, skipping ...
[  280.607936][  T934] usb 3-1: bad CDC descriptors
[  280.615727][  T934] cdc_acm 3-1:8.78: More than one union descriptor, skipping ...
[  280.628292][  T934] usb 3-1: USB disconnect, device number 20
[  280.675632][    T9] usb usb1-port1: unable to enumerate USB device
[  281.147567][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  281.296075][   T30] audit: type=1400 audit(1760501870.207:648): avc:  denied  { call } for  pid=8857 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  281.316909][   T30] audit: type=1400 audit(1760501870.227:649): avc:  denied  { transfer } for  pid=8857 comm="syz.1.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  281.392446][ T8863] misc userio: Invalid payload size
[  281.433597][ T8864] veth0: entered promiscuous mode
[  281.439897][ T8864] veth0: left promiscuous mode
[  281.611890][    T9] usb 6-1: USB disconnect, device number 3
[  282.402007][ T8879] ip6tnl0: Caught tx_queue_len zero misconfig
[  282.428276][   T30] audit: type=1400 audit(1760501871.337:650): avc:  denied  { connect } for  pid=8878 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  282.576789][   T30] audit: type=1400 audit(1760501871.467:651): avc:  denied  { write } for  pid=8878 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  282.815765][ T8870] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  282.829412][ T8870] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  282.857142][ T8870] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  282.884050][ T8870] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  282.908062][ T8870] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  283.137482][ T8888] net_ratelimit: 214 callbacks suppressed
[  283.137515][ T8888] netlink: zone id is out of range
[  283.148637][ T8888] netlink: zone id is out of range
[  283.153799][ T8888] netlink: zone id is out of range
[  283.158979][ T8888] netlink: zone id is out of range
[  283.164194][ T8888] netlink: zone id is out of range
[  283.169964][ T8888] netlink: zone id is out of range
[  283.175115][ T8888] netlink: zone id is out of range
[  283.181266][ T8888] netlink: zone id is out of range
[  283.187038][ T8888] netlink: zone id is out of range
[  283.192193][ T8888] netlink: zone id is out of range
[  283.344769][  T934] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  283.668106][  T934] usb 4-1: config 7 has an invalid interface number: 101 but max is 0
[  283.688995][  T934] usb 4-1: config 7 has no interface number 0
[  283.705293][ T8892] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.796439][  T934] usb 4-1: config 7 interface 101 altsetting 0 endpoint 0x1 has invalid maxpacket 80, setting to 64
[  283.860633][  T934] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  283.883712][  T934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.900907][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  283.917250][  T934] usb 4-1: Product: syz
[  283.931975][  T934] usb 4-1: Manufacturer: syz
[  283.938503][ T8892] netlink: 312 bytes leftover after parsing attributes in process `syz.0.739'.
[  283.947743][  T934] usb 4-1: SerialNumber: syz
[  283.989386][ T8884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  284.000127][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  284.128031][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout
[  284.234988][    T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  284.386081][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  284.415164][ T5815] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  285.909748][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  285.921566][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  285.934844][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  285.950323][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  285.950333][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout
[  285.950364][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  285.972497][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  285.979057][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  285.986195][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.049047][    T9] usb 3-1: config 0 descriptor??
[  286.224673][ T5815] usb 2-1: Using ep0 maxpacket: 32
[  286.238757][  T934] as10x_usb: device has been detected
[  286.255601][  T934] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  286.265137][ T5815] usb 2-1: unable to get BOS descriptor or descriptor too short
[  286.286854][ T5815] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  286.310641][ T5815] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  286.328124][ T5815] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  286.435754][  T934] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  286.462698][ T5815] usb 2-1: config 128 has no interface number 0
[  286.641934][ T5815] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.653278][ T5815] usb 2-1: config 128 interface 127 has no altsetting 0
[  286.684860][ T5815] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  286.697501][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.706037][ T5815] usb 2-1: Product: syz
[  286.712363][ T5815] usb 2-1: Manufacturer: syz
[  286.738353][   T30] audit: type=1400 audit(1760501875.647:652): avc:  denied  { firmware_load } for  pid=934 comm="kworker/1:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  286.769207][ T8909] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  286.797792][  T934] as10x_usb: error during firmware upload part1
[  286.820909][ T5815] usb 2-1: SerialNumber: syz
[  286.842560][  T934] Registered device Elgato EyeTV DTT Deluxe
[  286.846981][  T934] usb 4-1: USB disconnect, device number 28
[  287.069701][  T934] Unregistered device Elgato EyeTV DTT Deluxe
[  287.119946][  T934] as10x_usb: device has been disconnected
[  287.210333][ T8914] FAULT_INJECTION: forcing a failure.
[  287.210333][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.211368][ T8914] 
[  287.211374][ T8914] ======================================================
[  287.211377][ T8914] WARNING: possible circular locking dependency detected
[  287.211382][ T8914] syzkaller #0 Not tainted
[  287.211387][ T8914] ------------------------------------------------------
[  287.211391][ T8914] syz.5.743/8914 is trying to acquire lock:
[  287.211396][ T8914] ffffffff8e2d1680 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[  287.211430][ T8914] 
[  287.211430][ T8914] but task is already holding lock:
[  287.211433][ T8914] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  287.211460][ T8914] 
[  287.211460][ T8914] which lock already depends on the new lock.
[  287.211460][ T8914] 
[  287.211463][ T8914] 
[  287.211463][ T8914] the existing dependency chain (in reverse order) is:
[  287.211467][ T8914] 
[  287.211467][ T8914] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  287.211479][ T8914]        _raw_spin_lock_nested+0x31/0x40
[  287.211490][ T8914]        raw_spin_rq_lock_nested+0x29/0x130
[  287.211506][ T8914]        task_rq_lock+0xcf/0x490
[  287.211513][ T8914]        cgroup_move_task+0x81/0x2a0
[  287.211524][ T8914]        css_set_move_task+0x288/0x5f0
[  287.211537][ T8914]        cgroup_post_fork+0x201/0x9d0
[  287.211546][ T8914]        copy_process+0x602d/0x76a0
[  287.211556][ T8914]        kernel_clone+0xfc/0x930
[  287.211564][ T8914]        user_mode_thread+0xc8/0x110
[  287.211573][ T8914]        rest_init+0x23/0x2b0
[  287.211587][ T8914]        start_kernel+0x3f6/0x4e0
[  287.211598][ T8914]        x86_64_start_reservations+0x18/0x30
[  287.211609][ T8914]        x86_64_start_kernel+0x130/0x190
[  287.211619][ T8914]        common_startup_64+0x13e/0x148
[  287.211639][ T8914] 
[  287.211639][ T8914] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  287.211651][ T8914]        _raw_spin_lock_irqsave+0x3a/0x60
[  287.211661][ T8914]        try_to_wake_up+0xb7/0x1870
[  287.211676][ T8914]        __wake_up_common+0x135/0x1f0
[  287.211688][ T8914]        __wake_up+0x31/0x60
[  287.211697][ T8914]        tty_port_default_wakeup+0x47/0x60
[  287.211714][ T8914]        serial8250_tx_chars+0x68e/0x860
[  287.211723][ T8914]        serial8250_handle_irq+0x761/0xcb0
[  287.211733][ T8914]        serial8250_default_handle_irq+0x9e/0x270
[  287.211744][ T8914]        serial8250_interrupt+0xf8/0x1d0
[  287.211754][ T8914]        __handle_irq_event_percpu+0x236/0x920
[  287.211771][ T8914]        handle_irq_event+0xab/0x1e0
[  287.211779][ T8914]        handle_edge_irq+0x3ca/0x9e0
[  287.211794][ T8914]        __common_interrupt+0xd0/0x2f0
[  287.211803][ T8914]        common_interrupt+0xba/0xe0
[  287.211817][ T8914]        asm_common_interrupt+0x26/0x40
[  287.211827][ T8914]        pv_native_safe_halt+0xf/0x20
[  287.211838][ T8914]        default_idle+0x13/0x20
[  287.211851][ T8914]        default_idle_call+0x6c/0xb0
[  287.211864][ T8914]        do_idle+0x38d/0x500
[  287.211872][ T8914]        cpu_startup_entry+0x4f/0x60
[  287.211880][ T8914]        start_secondary+0x21d/0x2b0
[  287.211890][ T8914]        common_startup_64+0x13e/0x148
[  287.211904][ T8914] 
[  287.211904][ T8914] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  287.211916][ T8914]        _raw_spin_lock_irqsave+0x3a/0x60
[  287.211926][ T8914]        __wake_up+0x1c/0x60
[  287.211935][ T8914]        tty_port_default_wakeup+0x47/0x60
[  287.211950][ T8914]        serial8250_tx_chars+0x68e/0x860
[  287.211959][ T8914]        serial8250_handle_irq+0x761/0xcb0
[  287.211968][ T8914]        serial8250_default_handle_irq+0x9e/0x270
[  287.211978][ T8914]        serial8250_interrupt+0xf8/0x1d0
[  287.211989][ T8914]        __handle_irq_event_percpu+0x236/0x920
[  287.212004][ T8914]        handle_irq_event+0xab/0x1e0
[  287.212013][ T8914]        handle_edge_irq+0x3ca/0x9e0
[  287.212027][ T8914]        __common_interrupt+0xd0/0x2f0
[  287.212036][ T8914]        common_interrupt+0xba/0xe0
[  287.212050][ T8914]        asm_common_interrupt+0x26/0x40
[  287.212059][ T8914]        pv_native_safe_halt+0xf/0x20
[  287.212069][ T8914]        default_idle+0x13/0x20
[  287.212082][ T8914]        default_idle_call+0x6c/0xb0
[  287.212095][ T8914]        do_idle+0x38d/0x500
[  287.212103][ T8914]        cpu_startup_entry+0x4f/0x60
[  287.212111][ T8914]        start_secondary+0x21d/0x2b0
[  287.212121][ T8914]        common_startup_64+0x13e/0x148
[  287.212134][ T8914] 
[  287.212134][ T8914] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  287.212146][ T8914]        _raw_spin_lock_irqsave+0x3a/0x60
[  287.212156][ T8914]        serial8250_console_write+0x181/0x1890
[  287.212166][ T8914]        console_flush_all+0x801/0xc60
[  287.212181][ T8914]        console_unlock+0xd8/0x210
[  287.212196][ T8914]        vprintk_emit+0x3d7/0x680
[  287.212204][ T8914]        _printk+0xc7/0x100
[  287.212215][ T8914]        register_console+0xc2d/0x11b0
[  287.212224][ T8914]        univ8250_console_init+0x5f/0x90
[  287.212236][ T8914]        console_init+0x152/0x680
[  287.212247][ T8914]        start_kernel+0x29f/0x4e0
[  287.212256][ T8914]        x86_64_start_reservations+0x18/0x30
[  287.212267][ T8914]        x86_64_start_kernel+0x130/0x190
[  287.212277][ T8914]        common_startup_64+0x13e/0x148
[  287.212290][ T8914] 
[  287.212290][ T8914] -> #0 (console_owner){-.-.}-{0:0}:
[  287.212302][ T8914]        __lock_acquire+0x126f/0x1c90
[  287.212314][ T8914]        lock_acquire+0x179/0x350
[  287.212325][ T8914]        console_lock_spinning_enable+0x72/0x80
[  287.212340][ T8914]        console_flush_all+0x7aa/0xc60
[  287.212355][ T8914]        console_unlock+0xd8/0x210
[  287.212369][ T8914]        vprintk_emit+0x3d7/0x680
[  287.212378][ T8914]        _printk+0xc7/0x100
[  287.212389][ T8914]        should_fail_ex+0x4e7/0x640
[  287.212400][ T8914]        strncpy_from_user+0x3b/0x2e0
[  287.212410][ T8914]        strncpy_from_user_nofault+0x7f/0x180
[  287.212423][ T8914]        bpf_probe_read_compat_str+0xe8/0x180
[  287.212438][ T8914]        bpf_prog_6d6f3aa7ea586b30+0x46/0x4c
[  287.212446][ T8914]        bpf_trace_run4+0x252/0x5b0
[  287.212461][ T8914]        __bpf_trace_sched_switch+0x145/0x190
[  287.212476][ T8914]        __traceiter_sched_switch+0x6f/0xc0
[  287.212490][ T8914]        __schedule+0x183b/0x5de0
[  287.212500][ T8914]        preempt_schedule_irq+0x51/0x90
[  287.212510][ T8914]        irqentry_exit+0x36/0x90
[  287.212521][ T8914]        asm_sysvec_call_function_single+0x1a/0x20
[  287.212532][ T8914]        lock_acquire+0x62/0x350
[  287.212543][ T8914]        unwind_next_frame+0xd1/0x20a0
[  287.212557][ T8914]        arch_stack_walk+0x94/0x100
[  287.212571][ T8914]        stack_trace_save+0x8e/0xc0
[  287.212581][ T8914]        kasan_save_stack+0x33/0x60
[  287.212595][ T8914]        kasan_save_track+0x14/0x30
[  287.212607][ T8914]        __kasan_kmalloc+0xaa/0xb0
[  287.212619][ T8914]        __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  287.212637][ T8914]        kmalloc_reserve+0xef/0x2c0
[  287.212651][ T8914]        __alloc_skb+0x166/0x380
[  287.212659][ T8914]        audit_log_start+0x34e/0x950
[  287.212673][ T8914]        common_lsm_audit+0xb2/0x300
[  287.212686][ T8914]        slow_avc_audit+0x186/0x210
[  287.212695][ T8914]        audit_inode_permission+0x1ec/0x2b0
[  287.212704][ T8914]        selinux_inode_permission+0xcfa/0x10c0
[  287.212717][ T8914]        security_inode_permission+0xda/0x260
[  287.212730][ T8914]        inode_permission+0x14e/0x630
[  287.212740][ T8914]        may_open+0x111/0x470
[  287.212749][ T8914]        path_openat+0x1354/0x2cb0
[  287.212761][ T8914]        do_filp_open+0x20b/0x470
[  287.212774][ T8914]        do_sys_openat2+0x11b/0x1d0
[  287.212782][ T8914]        __x64_sys_openat+0x174/0x210
[  287.212791][ T8914]        do_syscall_64+0xcd/0xfa0
[  287.212802][ T8914]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.212811][ T8914] 
[  287.212811][ T8914] other info that might help us debug this:
[  287.212811][ T8914] 
[  287.212814][ T8914] Chain exists of:
[  287.212814][ T8914]   console_owner --> &p->pi_lock --> &rq->__lock
[  287.212814][ T8914] 
[  287.212828][ T8914]  Possible unsafe locking scenario:
[  287.212828][ T8914] 
[  287.212831][ T8914]        CPU0                    CPU1
[  287.212834][ T8914]        ----                    ----
[  287.212837][ T8914]   lock(&rq->__lock);
[  287.212842][ T8914]                                lock(&p->pi_lock);
[  287.212849][ T8914]                                lock(&rq->__lock);
[  287.212855][ T8914]   lock(console_owner);
[  287.212861][ T8914] 
[  287.212861][ T8914]  *** DEADLOCK ***
[  287.212861][ T8914] 
[  287.212863][ T8914] 5 locks held by syz.5.743/8914:
[  287.212869][ T8914]  #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0
[  287.212896][ T8914]  #1: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  287.212924][ T8914]  #2: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0
[  287.212952][ T8914]  #3: ffffffff8e3b1ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100
[  287.212976][ T8914]  #4: ffffffff8e3b1b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60
[  287.213004][ T8914] 
[  287.213004][ T8914] stack backtrace:
[  287.213009][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.5.743 Not tainted syzkaller #0 PREEMPT(full) 
[  287.213021][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  287.213027][ T8914] Call Trace:
[  287.213030][ T8914]  <TASK>
[  287.213034][ T8914]  dump_stack_lvl+0x116/0x1f0
[  287.213047][ T8914]  print_circular_bug+0x275/0x350
[  287.213059][ T8914]  check_noncircular+0x14c/0x170
[  287.213073][ T8914]  __lock_acquire+0x126f/0x1c90
[  287.213088][ T8914]  lock_acquire+0x179/0x350
[  287.213100][ T8914]  ? console_lock_spinning_enable+0x61/0x80
[  287.213116][ T8914]  ? console_lock_spinning_enable+0x4a/0x80
[  287.213133][ T8914]  console_lock_spinning_enable+0x72/0x80
[  287.213149][ T8914]  ? console_lock_spinning_enable+0x61/0x80
[  287.213164][ T8914]  console_flush_all+0x7aa/0xc60
[  287.213182][ T8914]  ? __pfx_console_flush_all+0x10/0x10
[  287.213199][ T8914]  ? is_printk_cpu_sync_owner+0x32/0x40
[  287.213211][ T8914]  console_unlock+0xd8/0x210
[  287.213227][ T8914]  ? __pfx_console_unlock+0x10/0x10
[  287.213242][ T8914]  ? do_raw_spin_unlock+0xe0/0x230
[  287.213258][ T8914]  ? _printk+0xc7/0x100
[  287.213270][ T8914]  ? __down_trylock_console_sem+0xb0/0x140
[  287.213285][ T8914]  vprintk_emit+0x3d7/0x680
[  287.213294][ T8914]  ? __pfx_vprintk_emit+0x10/0x10
[  287.213305][ T8914]  _printk+0xc7/0x100
[  287.213317][ T8914]  ? __pfx__printk+0x10/0x10
[  287.213331][ T8914]  ? __pfx____ratelimit+0x10/0x10
[  287.213343][ T8914]  should_fail_ex+0x4e7/0x640
[  287.213355][ T8914]  strncpy_from_user+0x3b/0x2e0
[  287.213367][ T8914]  strncpy_from_user_nofault+0x7f/0x180
[  287.213380][ T8914]  bpf_probe_read_compat_str+0xe8/0x180
[  287.213395][ T8914]  bpf_prog_6d6f3aa7ea586b30+0x46/0x4c
[  287.213404][ T8914]  bpf_trace_run4+0x252/0x5b0
[  287.213419][ T8914]  ? __pfx_bpf_trace_run4+0x10/0x10
[  287.213436][ T8914]  ? __lock_acquire+0xb8a/0x1c90
[  287.213450][ T8914]  __bpf_trace_sched_switch+0x145/0x190
[  287.213466][ T8914]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  287.213482][ T8914]  ? psi_group_change+0x511/0xbe0
[  287.213495][ T8914]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  287.213515][ T8914]  __traceiter_sched_switch+0x6f/0xc0
[  287.213530][ T8914]  __schedule+0x183b/0x5de0
[  287.213541][ T8914]  ? trace_sched_exit_tp+0xd1/0x120
[  287.213559][ T8914]  ? __pfx___schedule+0x10/0x10
[  287.213569][ T8914]  ? lockdep_hardirqs_on+0x7c/0x110
[  287.213584][ T8914]  preempt_schedule_irq+0x51/0x90
[  287.213595][ T8914]  irqentry_exit+0x36/0x90
[  287.213607][ T8914]  asm_sysvec_call_function_single+0x1a/0x20
[  287.213618][ T8914] RIP: 0010:lock_acquire+0x62/0x350
[  287.213635][ T8914] Code: 57 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 14 ea 0e 0f 82 74 02 00 00 8b 35 1a 45 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 56 0b 12 0f 85 c7 02 00 00 48 83 c4
[  287.213645][ T8914] RSP: 0018:ffffc9000bb3efb0 EFLAGS: 00000206
[  287.213653][ T8914] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000ef9d33e4
[  287.213659][ T8914] RDX: 0000000000000000 RSI: ffffffff8dadd953 RDI: ffffffff8bf1e2c0
[  287.213666][ T8914] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000
[  287.213672][ T8914] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  287.213678][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  287.213687][ T8914]  ? unwind_next_frame+0x3f4/0x20a0
[  287.213703][ T8914]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.213715][ T8914]  unwind_next_frame+0xd1/0x20a0
[  287.213729][ T8914]  ? unwind_next_frame+0xbd/0x20a0
[  287.213743][ T8914]  ? common_lsm_audit+0xb2/0x300
[  287.213757][ T8914]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  287.213769][ T8914]  arch_stack_walk+0x94/0x100
[  287.213784][ T8914]  ? common_lsm_audit+0xb2/0x300
[  287.213798][ T8914]  stack_trace_save+0x8e/0xc0
[  287.213808][ T8914]  ? __pfx_stack_trace_save+0x10/0x10
[  287.213819][ T8914]  ? __schedule+0x11a3/0x5de0
[  287.213829][ T8914]  ? rcu_is_watching+0x12/0xc0
[  287.213839][ T8914]  kasan_save_stack+0x33/0x60
[  287.213852][ T8914]  ? kasan_save_stack+0x33/0x60
[  287.213864][ T8914]  ? kasan_save_track+0x14/0x30
[  287.213877][ T8914]  ? __kasan_kmalloc+0xaa/0xb0
[  287.213889][ T8914]  ? __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  287.213903][ T8914]  ? kmalloc_reserve+0xef/0x2c0
[  287.213916][ T8914]  ? __alloc_skb+0x166/0x380
[  287.213926][ T8914]  ? audit_log_start+0x34e/0x950
[  287.213939][ T8914]  ? common_lsm_audit+0xb2/0x300
[  287.213960][ T8914]  kasan_save_track+0x14/0x30
[  287.213973][ T8914]  __kasan_kmalloc+0xaa/0xb0
[  287.213986][ T8914]  __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  287.214001][ T8914]  ? __alloc_skb+0x166/0x380
[  287.214010][ T8914]  ? rcu_watching_snap_stopped_since+0xe1/0x110
[  287.214022][ T8914]  ? kmalloc_reserve+0xef/0x2c0
[  287.214035][ T8914]  kmalloc_reserve+0xef/0x2c0
[  287.214049][ T8914]  __alloc_skb+0x166/0x380
[  287.214059][ T8914]  ? __pfx___alloc_skb+0x10/0x10
[  287.214069][ T8914]  ? trace_kmem_cache_alloc+0x28/0xc0
[  287.214085][ T8914]  ? kmem_cache_alloc_noprof+0x250/0x6e0
[  287.214096][ T8914]  ? auditd_test_task+0x131/0x2f0
[  287.214109][ T8914]  ? audit_log_start+0x29b/0x950
[  287.214122][ T8914]  ? lockdep_init_map_type+0x5c/0x280
[  287.214136][ T8914]  audit_log_start+0x34e/0x950
[  287.214150][ T8914]  ? __pfx_audit_log_start+0x10/0x10
[  287.214166][ T8914]  ? __pfx___schedule+0x10/0x10
[  287.214177][ T8914]  ? __pfx_avc_audit_pre_callback+0x10/0x10
[  287.214192][ T8914]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  287.214208][ T8914]  common_lsm_audit+0xb2/0x300
[  287.214222][ T8914]  ? __pfx_common_lsm_audit+0x10/0x10
[  287.214235][ T8914]  ? rcu_is_watching+0x12/0xc0
[  287.214244][ T8914]  ? irqentry_exit+0x3b/0x90
[  287.214256][ T8914]  ? lockdep_hardirqs_on+0x7c/0x110
[  287.214268][ T8914]  slow_avc_audit+0x186/0x210
[  287.214278][ T8914]  ? __pfx_slow_avc_audit+0x10/0x10
[  287.214288][ T8914]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  287.214301][ T8914]  audit_inode_permission+0x1ec/0x2b0
[  287.214312][ T8914]  ? __pfx_audit_inode_permission+0x10/0x10
[  287.214323][ T8914]  ? avc_has_perm_noaudit+0x306/0x3b0
[  287.214332][ T8914]  ? avc_has_perm_noaudit+0x149/0x3b0
[  287.214342][ T8914]  selinux_inode_permission+0xcfa/0x10c0
[  287.214356][ T8914]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  287.214368][ T8914]  ? __pfx_selinux_inode_permission+0x10/0x10
[  287.214383][ T8914]  ? __rcu_read_unlock+0x2bc/0x550
[  287.214398][ T8914]  security_inode_permission+0xda/0x260
[  287.214412][ T8914]  inode_permission+0x14e/0x630
[  287.214422][ T8914]  may_open+0x111/0x470
[  287.214433][ T8914]  path_openat+0x1354/0x2cb0
[  287.214448][ T8914]  ? __pfx_path_openat+0x10/0x10
[  287.214461][ T8914]  ? __lock_acquire+0xb8a/0x1c90
[  287.214474][ T8914]  do_filp_open+0x20b/0x470
[  287.214487][ T8914]  ? __pfx_do_filp_open+0x10/0x10
[  287.214508][ T8914]  ? alloc_fd+0x471/0x7d0
[  287.214528][ T8914]  do_sys_openat2+0x11b/0x1d0
[  287.214541][ T8914]  ? __pfx_do_sys_openat2+0x10/0x10
[  287.214555][ T8914]  ? __pfx___schedule+0x10/0x10
[  287.214568][ T8914]  __x64_sys_openat+0x174/0x210
[  287.214581][ T8914]  ? __pfx___x64_sys_openat+0x10/0x10
[  287.214596][ T8914]  do_syscall_64+0xcd/0xfa0
[  287.214611][ T8914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.214628][ T8914] RIP: 0033:0x7f63cf78eec9
[  287.214638][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.214650][ T8914] RSP: 002b:00007f63cd9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  287.214662][ T8914] RAX: ffffffffffffffda RBX: 00007f63cf9e6090 RCX: 00007f63cf78eec9
[  287.214670][ T8914] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  287.214678][ T8914] RBP: 00007f63cd9d5090 R08: 0000000000000000 R09: 0000000000000000
[  287.214686][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  287.214694][ T8914] R13: 00007f63cf9e6128 R14: 00007f63cf9e6090 R15: 00007ffd094b7b68
[  287.214707][ T8914]  </TASK>
[  288.825304][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.5.743 Not tainted syzkaller #0 PREEMPT(full) 
[  288.825319][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  288.825326][ T8914] Call Trace:
[  288.825332][ T8914]  <TASK>
[  288.825337][ T8914]  dump_stack_lvl+0x116/0x1f0
[  288.825354][ T8914]  should_fail_ex+0x512/0x640
[  288.825368][ T8914]  strncpy_from_user+0x3b/0x2e0
[  288.825381][ T8914]  strncpy_from_user_nofault+0x7f/0x180
[  288.825395][ T8914]  bpf_probe_read_compat_str+0xe8/0x180
[  288.825412][ T8914]  bpf_prog_6d6f3aa7ea586b30+0x46/0x4c
[  288.825421][ T8914]  bpf_trace_run4+0x252/0x5b0
[  288.825437][ T8914]  ? __pfx_bpf_trace_run4+0x10/0x10
[  288.825455][ T8914]  ? __lock_acquire+0xb8a/0x1c90
[  288.825469][ T8914]  __bpf_trace_sched_switch+0x145/0x190
[  288.825486][ T8914]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  288.825502][ T8914]  ? psi_group_change+0x511/0xbe0
[  288.825515][ T8914]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  288.825535][ T8914]  __traceiter_sched_switch+0x6f/0xc0
[  288.825551][ T8914]  __schedule+0x183b/0x5de0
[  288.825563][ T8914]  ? trace_sched_exit_tp+0xd1/0x120
[  288.825581][ T8914]  ? __pfx___schedule+0x10/0x10
[  288.825592][ T8914]  ? lockdep_hardirqs_on+0x7c/0x110
[  288.825607][ T8914]  preempt_schedule_irq+0x51/0x90
[  288.825619][ T8914]  irqentry_exit+0x36/0x90
[  288.825630][ T8914]  asm_sysvec_call_function_single+0x1a/0x20
[  288.825642][ T8914] RIP: 0010:lock_acquire+0x62/0x350
[  288.825655][ T8914] Code: 57 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 14 ea 0e 0f 82 74 02 00 00 8b 35 1a 45 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 56 0b 12 0f 85 c7 02 00 00 48 83 c4
[  288.825666][ T8914] RSP: 0018:ffffc9000bb3efb0 EFLAGS: 00000206
[  288.825676][ T8914] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000ef9d33e4
[  288.825682][ T8914] RDX: 0000000000000000 RSI: ffffffff8dadd953 RDI: ffffffff8bf1e2c0
[  288.825688][ T8914] RBP: 0000000000000002 R08: 0ac0d5affe09d4ff R09: 0000000000000000
[  288.825694][ T8914] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  288.825700][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  288.825710][ T8914]  ? unwind_next_frame+0x3f4/0x20a0
[  288.825726][ T8914]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  288.825738][ T8914]  unwind_next_frame+0xd1/0x20a0
[  288.825753][ T8914]  ? unwind_next_frame+0xbd/0x20a0
[  288.825767][ T8914]  ? common_lsm_audit+0xb2/0x300
[  288.825783][ T8914]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  288.825794][ T8914]  arch_stack_walk+0x94/0x100
[  288.825811][ T8914]  ? common_lsm_audit+0xb2/0x300
[  288.825825][ T8914]  stack_trace_save+0x8e/0xc0
[  288.825835][ T8914]  ? __pfx_stack_trace_save+0x10/0x10
[  288.825846][ T8914]  ? __schedule+0x11a3/0x5de0
[  288.825856][ T8914]  ? rcu_is_watching+0x12/0xc0
[  288.825867][ T8914]  kasan_save_stack+0x33/0x60
[  288.825881][ T8914]  ? kasan_save_stack+0x33/0x60
[  288.825893][ T8914]  ? kasan_save_track+0x14/0x30
[  288.825906][ T8914]  ? __kasan_kmalloc+0xaa/0xb0
[  288.825918][ T8914]  ? __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  288.825932][ T8914]  ? kmalloc_reserve+0xef/0x2c0
[  288.825946][ T8914]  ? __alloc_skb+0x166/0x380
[  288.825956][ T8914]  ? audit_log_start+0x34e/0x950
[  288.825970][ T8914]  ? common_lsm_audit+0xb2/0x300
[  288.825992][ T8914]  kasan_save_track+0x14/0x30
[  288.826005][ T8914]  __kasan_kmalloc+0xaa/0xb0
[  288.826018][ T8914]  __kmalloc_node_track_caller_noprof+0x345/0x8a0
[  288.826033][ T8914]  ? __alloc_skb+0x166/0x380
[  288.826042][ T8914]  ? rcu_watching_snap_stopped_since+0xe1/0x110
[  288.826054][ T8914]  ? kmalloc_reserve+0xef/0x2c0
[  288.826067][ T8914]  kmalloc_reserve+0xef/0x2c0
[  288.826082][ T8914]  __alloc_skb+0x166/0x380
[  288.826092][ T8914]  ? __pfx___alloc_skb+0x10/0x10
[  288.826102][ T8914]  ? trace_kmem_cache_alloc+0x28/0xc0
[  288.826118][ T8914]  ? kmem_cache_alloc_noprof+0x250/0x6e0
[  288.826129][ T8914]  ? auditd_test_task+0x131/0x2f0
[  288.826142][ T8914]  ? audit_log_start+0x29b/0x950
[  288.826155][ T8914]  ? lockdep_init_map_type+0x5c/0x280
[  288.826169][ T8914]  audit_log_start+0x34e/0x950
[  288.826184][ T8914]  ? __pfx_audit_log_start+0x10/0x10
[  288.826200][ T8914]  ? __pfx___schedule+0x10/0x10
[  288.826210][ T8914]  ? __pfx_avc_audit_pre_callback+0x10/0x10
[  288.826226][ T8914]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  288.826242][ T8914]  common_lsm_audit+0xb2/0x300
[  288.826256][ T8914]  ? __pfx_common_lsm_audit+0x10/0x10
[  288.826269][ T8914]  ? rcu_is_watching+0x12/0xc0
[  288.826278][ T8914]  ? irqentry_exit+0x3b/0x90
[  288.826290][ T8914]  ? lockdep_hardirqs_on+0x7c/0x110
[  288.826306][ T8914]  slow_avc_audit+0x186/0x210
[  288.826316][ T8914]  ? __pfx_slow_avc_audit+0x10/0x10
[  288.826326][ T8914]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  288.826340][ T8914]  audit_inode_permission+0x1ec/0x2b0
[  288.826351][ T8914]  ? __pfx_audit_inode_permission+0x10/0x10
[  288.826362][ T8914]  ? avc_has_perm_noaudit+0x306/0x3b0
[  288.826372][ T8914]  ? avc_has_perm_noaudit+0x149/0x3b0
[  288.826382][ T8914]  selinux_inode_permission+0xcfa/0x10c0
[  288.826396][ T8914]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  288.826408][ T8914]  ? __pfx_selinux_inode_permission+0x10/0x10
[  288.826423][ T8914]  ? __rcu_read_unlock+0x2bc/0x550
[  288.826438][ T8914]  security_inode_permission+0xda/0x260
[  288.826453][ T8914]  inode_permission+0x14e/0x630
[  288.826464][ T8914]  may_open+0x111/0x470
[  288.826475][ T8914]  path_openat+0x1354/0x2cb0
[  288.826490][ T8914]  ? __pfx_path_openat+0x10/0x10
[  288.826504][ T8914]  ? __lock_acquire+0xb8a/0x1c90
[  288.826517][ T8914]  do_filp_open+0x20b/0x470
[  288.826530][ T8914]  ? __pfx_do_filp_open+0x10/0x10
[  288.826548][ T8914]  ? alloc_fd+0x471/0x7d0
[  288.826563][ T8914]  do_sys_openat2+0x11b/0x1d0
[  288.826572][ T8914]  ? __pfx_do_sys_openat2+0x10/0x10
[  288.826583][ T8914]  ? __pfx___schedule+0x10/0x10
[  288.826594][ T8914]  __x64_sys_openat+0x174/0x210
[  288.826604][ T8914]  ? __pfx___x64_sys_openat+0x10/0x10
[  288.826616][ T8914]  do_syscall_64+0xcd/0xfa0
[  288.826628][ T8914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.826639][ T8914] RIP: 0033:0x7f63cf78eec9
[  288.826647][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.826657][ T8914] RSP: 002b:00007f63cd9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  288.826666][ T8914] RAX: ffffffffffffffda RBX: 00007f63cf9e6090 RCX: 00007f63cf78eec9
[  288.826672][ T8914] RDX: 0000000000000400 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  288.826679][ T8914] RBP: 00007f63cd9d5090 R08: 0000000000000000 R09: 0000000000000000
[  288.826684][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  288.826691][ T8914] R13: 00007f63cf9e6128 R14: 00007f63cf9e6090 R15: 00007ffd094b7b68
[  288.826700][ T8914]  </TASK>
[  288.826794][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.478563][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.484541][    C1] hrtimer: interrupt took 2270005501 ns
[  289.501235][   T30] audit: type=1400 audit(1760501877.747:653): avc:  denied  { append } for  pid=8912 comm="syz.5.743" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  289.524203][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.541608][ T5815] usb 2-1: USB disconnect, device number 27
[  289.603782][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  289.769399][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  289.808354][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.877784][    T9] usb 3-1: USB disconnect, device number 21