last executing test programs:

2m44.688143236s ago: executing program 2 (id=757):
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
r0 = socket(0x2, 0x80805, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r8}, 0x38)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x83, &(0x7f00000000c0), 0x8)

2m43.725185916s ago: executing program 2 (id=761):
r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x11, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000015})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc40c1, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x6, 0xfffa})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m43.446111831s ago: executing program 2 (id=762):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
tkill(r2, 0xb)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2m43.146356926s ago: executing program 2 (id=765):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x1, 0xb}, 0x20)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRESOCT=r0], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r3, 0xc018480b, &(0x7f0000000080)={0x2, 0x100})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='cq_drain_complete\x00', r6}, 0x18)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8840)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"})
syz_open_pts(0xffffffffffffffff, 0x121500)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'lo\x00'})

2m40.022823757s ago: executing program 2 (id=774):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='rxrpc_call\x00', r3, 0x0, 0x1}, 0x18)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = dup(r5)
openat$cgroup_int(r4, &(0x7f0000000280)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
connect$bt_rfcomm(r6, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa)

2m38.032676648s ago: executing program 2 (id=777):
socket$nl_route(0x10, 0x3, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0xfffffff2, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x8360}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x7a, @local, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @loopback}], 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0})
socket$nl_audit(0x10, 0x3, 0x9)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7})
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x191683, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @default, @netrom={'nr', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38)

2m22.570347382s ago: executing program 32 (id=777):
socket$nl_route(0x10, 0x3, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0xfffffff2, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x8360}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x7a, @local, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @loopback}], 0x94)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0})
socket$nl_audit(0x10, 0x3, 0x9)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7})
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x191683, 0x0)
ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @default, @netrom={'nr', 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r9}, 0x38)

1m20.372355194s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

1m7.287064179s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

54.447843732s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

42.302033113s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

23.442420074s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

11.376796222s ago: executing program 3 (id=1240):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x104)

10.982881512s ago: executing program 3 (id=1241):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a0002000000000002000000050003"], 0x28}}, 0x0)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)

10.971463058s ago: executing program 5 (id=1242):
r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r4 = socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x11, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000015})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x1000000000000f, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc40c1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x6, 0xfffa})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

10.787072905s ago: executing program 3 (id=1245):
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x1)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000004000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
userfaultfd(0x801)
syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0xf2, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x0, 0xb, 0xf}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x7, 0x2, "07facdfa8c80a505"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x7, 0x9, {0x7, 0x25, 0x1, 0x3, 0x5, 0x13}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7078, 0x7fff, 0x3, "22c1840c1510707c39"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x89, 0x5, 0xd5, {0x7, 0x25, 0x1, 0x80, 0xfd, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="84039b8f01effc9693d94eda7c2c574c61cc7c8b85e69e36e5c9000000000000ae5b98729dd6faec8e17b73b39322acd2a0460becca8f35ecde9882d5319bd9d4f7b4cb6e8e31f04b3a28eb572e79bdcac9b888b78f1173fd000810f83b05f093e0e47cae57b481a2e4f745c644dbb6834608e93b9d681751fddbf032c041a0b8daefc00"]}, {0x9, &(0x7f0000000040)=@string={0x9, 0x3, "4595bffbcb2667"}}, {0xb1, &(0x7f0000000500)=@string={0xb1, 0x3, "ac31f7c076fa9181e96ef632c31e16224b002a6adb2e3f840e6d339a65ce372654d7a4aefe9705440169ab93a59b6f76db969215edd9eebae6df5b4cdcd555e2e16fdaa7f9a5689509a648e06c38ade88483a610e3181c79b27e19f3650eeb1233f333975924dcb721721c75631326efcfd984ff3e028988edbace8722512f82f15a47d9cb53bfeec781225df95ad3c83fbf3fb9c6a6fcc8e0f96c70e94220c88d2846db4d03be79f09bc5a441537f"}}, {0x4e, &(0x7f0000000740)=@string={0x4e, 0x3, "cd7c471ded5c8a2e92c1eabd5e667c4fecc4530d39f179ea26b60979181dc680cc173722723d4a76f85f382c9b24f550d05c77ba432fe85144ccc1b1315a28a09dc252b2cc04c912518a62f4"}}, {0xcb, &(0x7f00000005c0)=ANY=[@ANYBLOB="cb03338ea800fabce01aa9ede3de3b7e811a7aa061d6a48f5c38052127ca1f174b15f875c654a2ef3a28f2c1dce49356feec33c1b370a28399924ea36ed0dc92320dfc6d8d4604313f181f237ce74104c116b62a408bd8fb12b96272e704daeb696f07d10b3f8cbb949932f09c2fe97b497df351b6777ad10903dfb5f910e5e456dfe9c0fb1ecb564efdf3c83df3a79e8a3557cc5f57093f004113af4acb0ed03aefb33da73fd7ff1a882de7199013ce7b0769d5268b4cbe5b9e660ca4c26466df16c1a96b50017b48db30"]}, {0x0, 0x0}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3801}}]})

10.740005541s ago: executing program 1 (id=327):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xe7ff, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"})

8.02598317s ago: executing program 5 (id=1247):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
timerfd_create(0x0, 0x800)
syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x300, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@loopback, <r5=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x3}, {0x10, 0x6}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c884)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)

7.640976695s ago: executing program 3 (id=1249):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045730, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$vim2m(0x0, 0x8, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x4)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
r4 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x1, 0x141000)
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000300)=0xfffff9a0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)

6.611981392s ago: executing program 5 (id=1251):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)

6.194215498s ago: executing program 3 (id=1252):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x9c, 0x0, 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000a00)={'erspan0\x00', r0, 0x8, 0x40, 0x0, 0x3, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @multicast1, {[@noop, @lsrr={0x83, 0x17, 0xb8, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @remote]}, @end]}}}}})
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, {0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0xb087, 0x9, 0x0, 0x5435, "d20bddd27d1db93aec5fb1000000fe97351f13a23a08acb0565c1c2251560ed1"}})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r4 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000940)="c33aa9dce7eeaf9ef1dd78b65d2040431119cead1816e1567607000000000000003555f9ed951ca5d299947ad68487886451d7d41bde97c3e80afb335ba3053cca6ad77ec163cba62375076b39607c3ae6312a8de8293f1118c77ef6d201e4fcd6a51125cb8644b03996d0c2df9b828589f5953374cf30d5192c949ebb5ecb6b43", 0x81, 0xffffffffffffffff)
r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5}, 0x0, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r4, r5}, &(0x7f0000000340)=""/47, 0x2f, &(0x7f0000000440)={&(0x7f0000000280)={'blake2b-256-generic\x00'}, &(0x7f0000000700)="afc6bb5e132503a3b0b6b9cc3aa14e88f37327829035b96cff7c4367b4d728d38d3e66a28051fad7909de69f9100ce5be831a5451f27d84434681c7dcee41f96320ed52d098bbdcac28da6b22238ceaee9970010f98254d9c9f7f330c6adccf52deadf61", 0x64})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0})
sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.57896784s ago: executing program 5 (id=1258):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x2004001) (async)
io_setup(0xff, &(0x7f0000000380)=<r3=>0x0)
io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x31}]) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0) (async)
ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f00000195c0)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x22, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5fa, 0x0, 0x0, 0x8000000000000, 0x0, 0x9, 0xc379, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000000004, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001, 0x81]})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) (async)
readv(r6, &(0x7f0000019580)=[{0x0}], 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
chdir(&(0x7f00000000c0)='./bus\x00')
creat(&(0x7f0000000440)='./file0\x00', 0x0)

2.882300866s ago: executing program 0 (id=1263):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
shmctl$IPC_SET(0x0, 0x1, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) (async)
r2 = getpid()
r3 = socket(0x2c, 0x3, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0) (async, rerun: 64)
gettid() (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000040)="559407cd874f8f4ecbea8031f6b10e30b25d3460df53054b0a023c9c8a91d29616469e42f0842d14759bf82a4ba1c40e92b07f92d51e4cd1801b1cbce71dcf69783abd87c6f9bee955ca764bd46e4876ff1f40b918b0a46d1b18a31c6b9d1aa7674fd6", &(0x7f0000000380)="b5fa061f1664a05d3ebd8d5ed56fffaf4f39c174be309310c9cee544d6544c1b89fc0f1ea930612ed94c5611d80bbdc14983b9c04e7b83a078bb1b79e2f2ecaf611c898a77b1555a7f1d7cdfea8081587f0bc3245dc1c77093072f4c0752b9d890a464793ab62f1bdc2173c488e48ad1a421fa5db595a5ecfee6ecf7dea4635d5447589e9f64d3b98b6a43d79556e092b0fffe37eb5ae4d3ccb18c0ad4632357099ebec3cf1687c43b634084ece613a4b877cf20201fde42c954e281be8c"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32)
write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0xffffff6a) (async, rerun: 32)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0) (async)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
tee(r4, r6, 0xfffffffffffffc01, 0x0)
tee(r4, r6, 0x60000000000, 0x1000000000000000) (async)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100)={0x20179e1b}) (async)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f0000000000)={0xc8000005}) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) (async, rerun: 32)
io_setup(0x5, &(0x7f0000002340)=<r11=>0x0) (rerun: 32)
io_submit(r11, 0x2, &(0x7f0000001280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x7fff}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f0000001180)="124d41fe4cbe6662bb4c4fbbd12873901cf3faedde3cc6f039d7277ea8c005013120acab09a1bb4cfefe6db7a32f1f2bd2f0798d7af8bdf61d3e37a742f950e4321f4db924e7719d546aa95c32e47dfea7e18457bda808542d4072f6c57892b5845f1a1f83dc2f57de451d68e78055359fad4c1745b2ce60582b17547f87c0d184ff7055b84257b81588a32b1d5ff7dbb73cd953e54c27390767831f9d396614056072b5ccd1e1c9ea5a5fabfc118eaf37acb2c978f439d5eb6c59b4fd24aa880c25a2c3c6d7f2d2781b0869b2a086b1706e21312357cb14e4f1e13ec00220ddfd0432a6422675baef26ecb5fd332a1c0c2ac4a6", 0xf4, 0x2, 0x0, 0x0, r10}])

2.73089035s ago: executing program 0 (id=1264):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r1, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000010000000000000020000950000fff2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
userfaultfd(0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r2}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, 0x0, &(0x7f00000002c0)=""/27}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
memfd_create(0x0, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
io_uring_setup(0x3f8f, &(0x7f0000000140)={0x0, 0x30c2, 0x2, 0x2, 0x34f})
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x27, 0x3, 0x4})
ioctl$EVIOCGREP(r1, 0x80084522, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000)
memfd_create(0x0, 0x0)
pipe(&(0x7f0000005880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf2509000000050007000100000005000800010000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40044)

2.72819073s ago: executing program 5 (id=1265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x1, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
fsopen(&(0x7f0000000280)='configfs\x00', 0x1)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x43e01, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.092896963s ago: executing program 3 (id=1266):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x85}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000000904"], 0x0)
syz_open_dev$evdev(0x0, 0x3, 0xd8200)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xffffffff, 0x2, 0x800, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x121500)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f07ebbeeb, 0x100010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
poll(0x0, 0x0, 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x3)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0)

1.973538099s ago: executing program 0 (id=1268):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20c00, 0x0)
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xf6}, @void, @x25={0x3, 0x3, 0x1f, "ea17de4a7a08057f88e18d1f207e37161788b2a73bd6efb40560af447b1eb873ec9dc4242cb8f7849a7c3413b24f42a5866d490d27d69b20bb00d40628b856e2c7ca1ebac0ad4218aef5aef558eeb03b814e1a9824a309d75ee121d1540079ff246dd26f04a933918524e9641180eb9ae83b81acaed867249e14a84fd750272985f3c0addb0ba777ab2fee8cf165c47c4a5ffd5f64214a947e74eedca96ca9b9de26e6032a90f207c7f24256b316e26b4465e476ad87f023638670b7dfbda4730fdea857b68885228639b08848540f080504dbd3b353deedd2d1cdd6ffd2f9ff2f53e838174e23db30bd30b2d721a96747cacc7a65f3c81f9b0eb8a0dfcf08f9ded14ce562d9e5f2c26a38b7b0fe2b295557dd3990cc7aed59f86567498ff844d369b4d49ee48b69bb88f899750e1c21a7940530e9bbeca4907eaa12a13e8ff35770f6749b560a6fc7164fe91fc60de7b43d677bd765ddb85140dfdf1230f9c389c88d8e8a671c5a4bffc4052835cf7d2a88b1f5aa8690d4659e0a8fd0a43bbc1750a62787c9f89b9317c62be3cc38a23faafc591a23bb262775d0a7af52521e4a2b1a59a415f32636141db407b3ab326b78006353721237f3235000b870378521d09b995625038914eba67b6d5a709b02d7f592aa55c25bcb7bfc605235fbf4eefe5c5b1177624a3592af4ec9b1c6c58922234cba924f39403456d8680db740f0d1ce3787ff1a5ad72175be7d588265763a8d78780849f3da1cfe0077b092f8af20ef973df4b683a284a0c0de116f0630cc070a832d511a75b41a6b579fcc891034be65797c590e2d403446593ec79a828ab30abffd41d17806df2abdb3c7f8ff9387e283dde5669ade60ff5e4946104b3b6fc864791b22bafa443f23e1a9bc1beeaddeada20b2a5099b1bddf1249c22a615ecdfe22eab39c671deee33aaf006c5d65bd065c3c691bd56b29965f8dd36c64c33ffcaeed510758e571b481b3d09f3ee7040d8604975bdc886180a30b1fc0a37d4971be49a19dbc3a7dcb9483f58fc285d19e51cc6e8ab908eec617b24554ec5ec07d5c0be1be236e58bb736ba4ec70264eddad99172c838a09ef4a79fca5d4477bbf78227de048d8547c21cc91441f924400fd2bd02d8ba4475487b898fd8af3a3eb1ce188556f5a9f92d7109e5918051f59a70881d7a666f18c01071353ddaf2358419cf51ce6e113166237a56ccf6f16e4a5ef043bb1be8f28e9dc1d50ddcc18aefecb3e5e0046a98f568e1a7a00100eadf0e2d6aab393b94d40035150201e96999a469ba9fbac52fb6e06a13321d5f9240892b1caeb503db5f121643dd3d93c23e4158daafbb57e598f23179cf9f34da719093851cc5d0ea783ffdd595133928b9d5a6935666c5806bc5f236f67ca04126a5adcb964e71e4a0437c2a08c1c9ff55978f4e45b61b7401835fc716f4502d6708242f5dcd8760c66a5d71decd379c0efe58c3a7c83427a26cf9acd416d9da1c201376986c345aeedbdce6839b23c99c359f64c29ebf77d507ba79659e6051b4d66161a04bd2451589c9ac17c65c0b1a9e049b62e7fcefe4442f8e422143623739c731692a55f6c98c8aee0fa47e81f2e98ca2139b13640bbe18c3d3f740a0c64816dc3fec024bbfe5cbfe6810b943cfe0a588ac41eeb591ac913850f859813f3a873dcde410691c309882ce72b94f765d90ab8a9150ef07cea21f7c4b55c1a084ab06c0afb13c89f9f6f530bc258c7c23bc432950b81ef50401acc062fe03496c8ab03e7234b6b4f7f8a84ce34c827fc1df643d753cb58fa04a320054a23fc31c393c94f84f717ceeca16134af42b1c4c28a9ada4e8cf7bf37451504f1e100c4874069c3dd03e68645903e4a8adf5cea649ff4a4048fda32e34d91ed0b508e6531e4b05517b10e2f96d093f41a6361272e253a895d7897bcfd880ae7ca436d4bc00ccc40386e187841e8cc2c9dd3ae45f17cbbefe6228138290ccd723e47e64affc655c58006bdf954de1631e35f26ededd7dc1e9e53fccc9db6d8eba1643b447fe2fef0b5abed602d1df13433dedaafe9c55abdf25868c86875579cfe0f3ae66a14bc77393ef7cd9a3afec4dc645be647a9b0b2b38a6a57ba1970631a6f48aa99e577c64f59c1f2a1903bea9dc97b7a3171a6af391eb971f1b2ab59c858d1b9aee8e1941408bd7a5e4177f9426d0712bf6d8e7fcedd873be5889b5482565bbafc1356f8e9f510f69d909648977c7e5a2ebca7d51ce3c046a9b5f8084f9d49b6c71d03dcc24f9312f483d9ad8d01aa065a153f110c58ca432c0740d9f7f1d3e469240112ff69df3d931a75de608b3352d8fb894f83b295e8130e293aca3f96b07d5a037f34950f3e07924680aed70a40404bf041bdfe5639a0eb38fd36fead8c0408dc9a43efab98665e323dab530e1c8d35107ebfb4ef2f58123f056b565176220058ff1c5ff03176496f9e851d3ed3b18b4e6dae79fad959d77a72cee8c8dc530ba871d76f88c716a19b7bf7566e530324aa95b1a8738b0627a0c083b0bd24ee0d50e8b6cae1c3f91e99d6eebfbeaac46791f7a20585a79b55062c555c7651c22c778992967d26ab39945eac4a19967f2fa96279d94650116997c629cc12460632a4ca2087333fd02e832cd1779a67ac0bf457a81a4998b5148823d089336d9a2365c4092426b7e58d3cef1ba9b5966e04ff4f9ff7291682a91f67bf6050ba9341be67536939da795159b41a262afa5071fe070f0fc8f28b988052d03d3d3c24f1a007f3cb2dec0a33df53609825dcb23f913912daaca9217045fd80199ece29597648ecd82d3018253fddd91a9c43f2deef3e219d971a3d44bbade66b683d990750cf746b724eb770085dd2f4d6b5b4302946c4d33b257dee8c3ce0329bed35021560419e08a1a8f75cd39f5d5fa6e949cb43401f934a3850ba97e629a628bf80decb359ad21fe29919e390b042bdfb73df2b14fcee38401b9cafcef4f5b27cf6f5f8bb3acbe8e14c543490a44644b8ade2dee9daf925f17b884c85a23048508ea0085f6594a7da2c0eca90d89bf2da29a333a290600c4080e2bf467664b1a9c5fce845b0eec6a719f1b6e33dbb7e773a16db4a13b0e390715aa95164ddf118544dc156a321bd7565450e537a4397516302ad60bd0e59f44a0cd744347c8f00b45291a3f21740c3974fa688b46c76c9b2a9fafb82c1403f4160091c70ca199df65e24d431dc9ead84c46a85f0aba98889480dcdcaa51239f06d3e5c8081dbbe90ca6c36706ca184af2c388fee4f29234680d41531ce61b4e8fdc729f0d382a74148e7a231500a94a8ee3fb525fc57b30eee8c4430732cf75c0ce7cc598d96c9a3e4b69a9cc304d9dc9694053c47f8d7268ca7a02fc5d20f820dd7e44dc83552099698a9cb9df2438b52770b444df5afe185430ee50d30fce059632707295e1e52b335ca1fb70b45d4df8e095f0de3e0522775c18c01ff2f3edf1a83f684c2b01b0537627e538011149e2c20ebcb8afd0cabf5db9f3bd7d1fe88169786e8debbb7270cd28774f3e7303a2880f9caeb930004f189cc089ae9e3fe0f07d86effb88819fc64355c3a9298f57a30466b1a8b9cfd6d339d2368372ed695a7c22dcf9a29913bd9fbb7af461943ced7815d331b4fcadd47e2198d12c9acad512ebd78839a8f6dac4262e686f4c5d7e1c533c66096806a853a4c8e4f4f56d4ab1d62955e04dd62f8b77e2b9dffbadfdba30f42c7f2eaa889d5c241f2651977c7a12a7dfaec87cd46a8d16ec96b55ac3444f4b27e1d4cd7b73c16d643fd2339a0b16c0c768dadbadde004efca15c4ea146ac425d1fd7dc732b857f826e284ad83ff128ad9d64ae3b08d74e34b83726fbfca3a3c6f92f9ee115ca444fc9a6024cf51341c189e150a5b70471604e0c919ee3379c2075eeac99d3293b474c9ef809fe5aa73b08fe849a27792b0b3da9ae24dc256e53acf6364101418edacec4147de0e38836ed85d5410555a99cd7c3c2910eb5a7e339cd7f1f8e755abfa53f1880253105ee76de16dcf5f22dd25616f3561bda5872a2c948bef6d83a128e6fde247acdfd1bcbeba559b61d9f91214badbc556c6eb1ea612ab2d9dcab81b0a3e16605c7fcdd2915f2018f57646f01f9ea86516ca4dc47ac09cff14098656c7337e9d08c69bf4c705ee080847aa7e313dd85e9c08201a641af1ea500dfb4cd7fd9043a2018dc9b5b41764f5bd30d4bd768ae9cbf7e9b1667eea12755f8465585b57bd87ff8d45052aa2baaf4ee7d04e116b691c46e3fd9de123f068a043f75d43f12018919814ba94b5e9553dd9895458f9e0adc88bc6d704aad6a376c1ee93f51dd8d18507014006c6e363942a014b196232aa98368f1ace39f44c2d2c985693d3b0f8c915355ba9a9786ddb3cdb347b7281cd3fa35eec5f6a39d8f90bc02471760dcfbd5e0f4329f9c14ca8153a1e612e29b2c76a6eba2ceef2bfc91028e8a9619ef2266014b0e2eba7e44d11d15fd91597bd909a1d9d6fa703328389109dccf0d7228e4de854e86cde61fb907a1c9e1544d1ce273175328a28559696fad406e8f6c1316725f8c712a9697caafb06b6d93353e4c880b35d3ded2736af96ed343d2b1348f1d63834c493e4e429f0ba058f9bb13a7eaa92dde2dfd08591e5f388b11cd629bd71aa58bf04f5586b59bb48585be53d62969282c66d414d63bc0d01dbf9f337a26211bab4374a87c2456003b4e7130ef59afa2f182287a891c56170e8b366c6b1d4a52529aa3b62310c617082072abbd174202546db0c225006cbb51b572c41ef33463602e1cc88ade55b06be3964b5f82d73a83a0dd93955027c65403c61353642cc0f3c444d59968d6412ba4df8715afdeba1dbd3fc8f4764c2e7dc69a81b7807fe0a3e062510a8eb80d32dad7da9b87a7ddfd7da6103237677ffe6c123a28be6eccbcdeb014fa8aab4b0cc3fbdac500e37a4f4af732197b5391c1735b220b759e0d47632646e27cf35969a54f6610d6c96d433d99d6a3bf12339a297624c2e45af80e5ea267b03c322cce74e25f644228b9c431012f0a442574b8cfa5c7307174aaae6bc2a7222213398eaa6f0dde808e0fccd2a97ceec1ba0b8c03ce7a054fbc59ce9c7716e79e0d6ccd904fa4ac44eb6c915924b7f598f4f53909a98c3cf8c08d50e9c18e6aba45ec595c81fb807c737f10ca6578e7740db78df8fbf6cb638343a8b9ea2043aa01bde98ebd597c550110503887179f1ec2038c3b2170da7b5a7941a48af396b7ce03469a9a94c7964676844170031d0cc5cf7e0fd6bdbb9fca476a02382773d41d8a62899888d114512dbbe8db411779154154ebf651ec000f0234bd9fd84f3f78f4fb4d4c54c3d54c888d8a9b5ed7ec59b256ebde24349615403b295d42ee45890387e7366897ea4773aa93a80bd75d8ca0ac3a8808c1b3de99e46ad8cbcecabf9307fdfde24f4ba7587970ef3da09105571c3feefe2b3203da590b10fc1bfa72030537276654be6d8a77cb94c03546d6888e9af2eb7bb6fa776cd0aeab6d814d7a8ae76d8fb59620ece4350e97ca2b9a639bf88ffc11a1982ec28562d1ad3d8438f5ff29db406b0674c5d124633c99b110392feb2866c6b753ab03feba385535da23fed6de881c8daee70276a003f3731fc8b96eb997fc09a6949109fad172bd31a3045b263092da4de837a5cd779baa718e389cfbfd0dd544e1f0be64b9fdba30e634631c01baca2cbf7486944e9b6df6bb95df03d543b5f078ffdb95dd8fe98c8d2eb679bbec7412cdd1498f7a55c57"}}, 0x1007)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
iopl(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0)
chdir(&(0x7f0000000280)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x84, 0x7f, 0x2000200000a95e, 0x0, 0x9, 0x400, 0x48cd, 0x0, 0x800000df})
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x6)

1.541985841s ago: executing program 4 (id=1270):
r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
io_setup(0x6, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
r4 = socket(0x2, 0x80805, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x11, 0x0, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000015})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x1000000000000f, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc40c1, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x6, 0xfffa})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.506256635s ago: executing program 0 (id=1271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7)

1.330584548s ago: executing program 4 (id=1272):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x300, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x1b, 0x0, 0x2, 0x7}, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@loopback, <r5=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x3}, {0x10, 0x6}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c884)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)

1.3301963s ago: executing program 0 (id=1273):
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="addaced30a01a7"], 0x20)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c", 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0xffffd000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x7, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x7, 0x5], 0xeeee0000, 0x8340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r5, 0x0, 0x0, 0x800)

989.496781ms ago: executing program 0 (id=1274):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
epoll_create1(0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0)
syz_io_uring_setup(0xc69, &(0x7f0000000640)={0x0, 0xa63f, 0x2, 0x0, 0x207}, &(0x7f0000000340), &(0x7f0000000280))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0xf00, 0x0, 0x671ec167a4b72164}, 0x0)

423.676019ms ago: executing program 4 (id=1275):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20c00, 0x0)
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0xf6}, @void, @x25={0x3, 0x3, 0x1f, "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"}}, 0x1007)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
iopl(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0)
chdir(&(0x7f0000000280)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x84, 0x7f, 0x2000200000a95e, 0x0, 0x9, 0x400, 0x48cd, 0x0, 0x800000df})
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000000)=0x6)

350.852779ms ago: executing program 4 (id=1276):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) (async)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18)
r3 = gettid()
statx(r2, &(0x7f0000000340)='./file0\x00', 0x1000, 0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000380)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000005c0)={0x4, 0x3, {r3}, {0xee00}, 0x9, 0x56b}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000005c0)={0x4, 0x3, {<r8=>r3}, {<r9=>0xee00}, 0x9, 0x56b})
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = gettid()
sendmmsg$unix(r1, &(0x7f0000001000)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000001100)="33943be960fb2758994ebc598b1ad2eb5be475214cb1c07ba0f68bf2fa0a0264b9684d5ec572030000000dbf4a8fb89e7215383b84029814c33d7b37fe005606f2816230044752177400778483cbeb02b5531bc5b53a9534db655efe455010b858688edb53e0f5c0c911c28d3c2d88cb8b688278657707d4d2fb7c329262867356e42bd1e248af16662fc36cf79b573dfd6a0490bb15e231301bbc4dd2568eee1ee2e780109621ce138963a318aafba7758ef700354a92cd327f86c7256adb13de35862543529711e827d5510c2537b91b9c8fdbc00ef1db1a0e6fb3ffcd6e786b76583fa1689716be78cb5a9109bb41c4359e66c8e41c214ff91ece", 0xfc}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r0, @ANYRES16=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000000100008023000002000000", @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRESHEX=r2, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES8=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0xa0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f00000008c0)="67aab5c6020f4060416b6064211d2a4e8a7fb54dceb9956b8a6ad4c7901f9bf5c2c23e2494ac70afccf26e8726b110dfbd13ce9496c020e6fda313c2c0f7341b27e0774f6a083ad37ad5cf4dcb484434da434d8c44fcd8dd4f135273d73030de39384e1a1fcf0b5e2e9b6b908561ec8d886e64cc3d179c7c6a42c8628eb0e02851f7d0fc62c3ad4e1ab1899191b7bb660dcd84086906c0", 0x97}, {&(0x7f0000000980)="489446c37386f93475f969ddb3afed1c20c0442c9160742804e0c6dc02fc4bf536b11f2e955b67ef9a705f944fedb52520445b539ff7f011de556460690c73fb91586c81c880cd0d80395452362e0af923327146b0e6ef7dec49f3aaead9a06fe18b97bf7da0965fb70eeab5773edbbba77426294afc48766c03e4", 0x7b}, {&(0x7f0000000ac0)="6dc4d1e6c544cc3af1109b189d62a56b95bf161fe786b4ad5a2be2d163dc4a02dd2429bd92b46dd92704986d6d43a716a840946c6d4a21a36abb323cfa68a5d1f2ad24cd28634eec134f227475768e1aee80e28d2b15ed064e89a65b6ece7d4da6dc1530da5f19b6e381c87fa26e552bbe6ff975751ec03f1ce6d21ee2348f92", 0x80}, {&(0x7f0000000b40)="c8c90f3ecdfea7eccabd80740d643b07cbd39fdcbdca956515c4eca7ec17c1fe", 0x20}, {&(0x7f0000000b80)="1d30fd6bbb6b5625e80315255fa32cfd26283563c1e189d740d68ba948a5f2e8951dfcb1eb56450885dc5527c67cd0f693e997d6440c00433ca71b2aae2958476eae342dac18aabf2d3e7e664d482b02d434d91f022a4fe8c55ffc0d430991d4d896c423ca59679306a69a59db9f2dcf0203b682b0415e2c6c14127bd1c6f9a9f6225e31ed1276852d29c9e4cb40c8177109602e99e95914daf2250c39b4fe4ce1894e1f81354b3ac9e73d521146ea53b2d86bc89cf12e0ae11984c34873acc70bafc98cad3b08df7d493f15643ce1ea3fd7c9b2155e3fc35453cfd131ba6ca93ae81f93353c261c0709680240ec110e4318104b3331", 0xf6}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="afdffc037d15f518af85e4d04bd687835183606684a59f6237f883f3a25346de88ee530d26771f056023a436265b87153bd95dae4ea3eb80b9555c054679579dbc0c3f447d8c1e0dcfadeab3f329c43bebf355e9a8e3d7380d72f5adbc7834b4176d77c15e3c23748f61bf9fd67a841d519f5c30ccc9a8a2792fb9d09f79a22bb24820f54fd01137bb0493955b770d36ad430caa90e59f4a7ae1bd605fcd98aa70620046b80768173d839ed152b5aecd8060de49492a00", 0xb7}, {&(0x7f0000000d80)="5558ba36ab0e39d78ab78da4e906e03953d47577d89ae22ff9617465daac5e101753e15b6d69d2f6f04fc467db621f83a2e7dafd93633e9f048e4da4a352d02fa5ccedfab78cd069505ffb576733c0a9a755af4c440244dbf4e90acc9e9b741e54611ef1b3", 0x65}, {&(0x7f0000000e00)="e3791c672767e2d966d91f60c24053fe0d144d435df124425834c9594ea8de05e89b7b4c4bd74a76d5d012", 0x2b}], 0x9, &(0x7f0000000f40)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000105000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0xd0}}], 0x2, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getegid() (async)
getegid()
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0xffffffffffffffff)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0)
r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r13, r12, 0x0, 0x4) (async)
sendfile(r13, r12, 0x0, 0x4)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00"], 0x0)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=ANY=[@ANYBLOB="28000000110077f405000000fddbdf250000000000000004d20200ff00"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown(0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)

283.348041ms ago: executing program 4 (id=1277):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x8000ffa4, 0x4)

48.122606ms ago: executing program 4 (id=1278):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c7, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x130, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)

0s ago: executing program 5 (id=1279):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote}, 0x10)
listen(r0, 0x8)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0)

kernel console output (not intermixed with test programs):

rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  428.998166][   T30] audit: type=1400 audit(1746879114.657:733): avc:  denied  { open } for  pid=13236 comm="syz.3.1036" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  429.071790][T12800] 8021q: adding VLAN 0 to HW filter on device bond0
[  429.078483][   T30] audit: type=1400 audit(1746879114.827:734): avc:  denied  { setopt } for  pid=13242 comm="syz.3.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  429.123365][T12800] 8021q: adding VLAN 0 to HW filter on device team0
[  429.160934][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.168088][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.324960][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.332062][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  429.690035][ T5866] usb 4-1: new low-speed USB device number 69 using dummy_hcd
[  429.818294][   T30] audit: type=1400 audit(1746879115.587:735): avc:  denied  { mount } for  pid=13249 comm="syz.0.1039" name="/" dev="ramfs" ino=34475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  429.831229][T13263] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  429.831269][T13263] overlayfs: failed to set xattr on upper
[  429.831274][T13263] overlayfs: ...falling back to redirect_dir=nofollow.
[  429.831278][T13263] overlayfs: ...falling back to index=off.
[  429.831282][T13263] overlayfs: ...falling back to uuid=null.
[  429.831316][T13263] overlayfs: failed to clone lowerpath
[  429.850028][ T5866] usb 4-1: Invalid ep0 maxpacket: 16
[  429.851251][   T30] audit: type=1400 audit(1746879115.597:736): avc:  denied  { mounton } for  pid=13249 comm="syz.0.1039" path="/file0" dev="ramfs" ino=35514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  429.880064][ T5827] Bluetooth: hci2: command tx timeout
[  429.937945][    C1] vkms_vblank_simulate: vblank timer overrun
[  429.960890][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  430.009940][ T5866] usb 4-1: new low-speed USB device number 70 using dummy_hcd
[  430.114639][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.159906][ T5866] usb 4-1: Invalid ep0 maxpacket: 16
[  430.160227][ T5866] usb usb4-port1: attempt power cycle
[  430.373922][T12800] veth0_vlan: entered promiscuous mode
[  430.415128][T12800] veth1_vlan: entered promiscuous mode
[  430.481988][T12800] veth0_macvtap: entered promiscuous mode
[  430.500722][ T5866] usb 4-1: new low-speed USB device number 71 using dummy_hcd
[  430.514566][T12800] veth1_macvtap: entered promiscuous mode
[  430.521029][ T5866] usb 4-1: Invalid ep0 maxpacket: 16
[  430.552207][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.563163][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.574883][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.585492][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.598333][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.650089][ T5866] usb 4-1: new low-speed USB device number 72 using dummy_hcd
[  430.672649][ T5866] usb 4-1: Invalid ep0 maxpacket: 16
[  430.682383][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.692446][ T5866] usb usb4-port1: unable to enumerate USB device
[  430.729147][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  430.759520][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  430.791034][T12800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.814844][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  430.929865][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.089700][   T30] audit: type=1400 audit(1746879116.777:737): avc:  denied  { create } for  pid=13276 comm="syz.4.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  431.350294][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.360783][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.371518][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.381982][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.392410][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  431.403747][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.426633][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  431.464906][T12800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  431.476929][T12800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  431.486481][T12800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  431.496575][T12800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.633148][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.715860][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.769554][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.780161][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.283902][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  432.639923][ T5864] usb 6-1: Using ep0 maxpacket: 8
[  432.686241][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.699027][ T5864] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  432.710062][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.213832][ T5863] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  433.248165][ T5864] usb 6-1: config 0 descriptor??
[  433.264590][ T5864] iowarrior 6-1:0.0: no interrupt-in endpoint found
[  433.418882][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  433.430639][ T5863] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  433.453753][ T5863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  433.483234][ T5863] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  433.493368][ T5863] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  433.506519][   T30] audit: type=1400 audit(1746879119.267:738): avc:  denied  { wake_alarm } for  pid=13290 comm="syz.5.1043" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  433.529903][ T5863] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  433.550008][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.882212][   T30] audit: type=1400 audit(1746879119.467:739): avc:  denied  { execute } for  pid=13290 comm="syz.5.1043" name="file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  433.906829][   T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  433.909967][ T5863] usb 4-1: usb_control_msg returned -32
[  433.918380][T13314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.935981][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  433.946679][ T5863] usbtmc 4-1:16.0: can't read capabilities
[  433.954971][   T30] audit: type=1400 audit(1746879119.467:740): avc:  denied  { execute_no_trans } for  pid=13290 comm="syz.5.1043" path="/51/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  433.980927][T13314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.218309][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.955873][ T5864] usb 6-1: USB disconnect, device number 11
[  435.080440][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  435.153424][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.211797][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.269761][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.359505][   T36] bridge_slave_1: left allmulticast mode
[  435.365214][   T36] bridge_slave_1: left promiscuous mode
[  435.371474][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.380190][   T36] bridge_slave_0: left allmulticast mode
[  435.385869][   T36] bridge_slave_0: left promiscuous mode
[  435.392855][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.553954][ T5908] usb 4-1: USB disconnect, device number 73
[  435.643836][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  435.653917][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  435.664135][   T36] bond0 (unregistering): Released all slaves
[  435.927814][   T36] hsr_slave_0: left promiscuous mode
[  435.933772][   T36] hsr_slave_1: left promiscuous mode
[  435.939341][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.946836][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.955253][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.964371][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.981611][   T36] veth1_macvtap: left promiscuous mode
[  435.987109][   T36] veth0_macvtap: left promiscuous mode
[  435.992678][   T36] veth1_vlan: left promiscuous mode
[  435.997912][   T36] veth0_vlan: left promiscuous mode
[  436.353941][   T30] audit: type=1400 audit(1746879122.127:741): avc:  denied  { create } for  pid=13387 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  436.390002][ T5815] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  436.562911][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.596749][ T5815] usb 6-1: config 0 interface 0 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  436.614397][ T5815] usb 6-1: config 0 interface 0 has no altsetting 0
[  436.626208][ T5815] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  436.642999][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.659539][ T5815] usb 6-1: config 0 descriptor??
[  436.676602][ T5815] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  436.719992][ T5908] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  436.808291][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  436.819047][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  436.839323][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.848001][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.858567][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.865618][ T5908] usb 4-1: device descriptor read/64, error -71
[  436.876800][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.896753][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.071353][   T36] team0 (unregistering): Port device team_slave_1 removed
[  437.181406][ T5908] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  437.278643][   T36] team0 (unregistering): Port device team_slave_0 removed
[  437.329999][ T5908] usb 4-1: device descriptor read/64, error -71
[  437.483929][ T5908] usb usb4-port1: attempt power cycle
[  437.631907][   T30] audit: type=1400 audit(1746879123.407:742): avc:  denied  { write } for  pid=13391 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  437.651515][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'.
[  437.673251][   T30] audit: type=1400 audit(1746879123.427:743): avc:  denied  { nlmsg_write } for  pid=13391 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  437.869973][ T5908] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  437.890977][ T5908] usb 4-1: device descriptor read/8, error -71
[  438.103856][T13435] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1061'.
[  438.253473][ T5908] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  438.286615][ T5908] usb 4-1: device descriptor read/8, error -71
[  438.787666][ T5908] usb usb4-port1: unable to enumerate USB device
[  438.972990][ T5827] Bluetooth: hci2: command tx timeout
[  439.004289][T13411] chnl_net:caif_netlink_parms(): no params data found
[  439.069591][T13411] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.077735][T13411] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.084985][T13411] bridge_slave_0: entered allmulticast mode
[  439.095127][T13411] bridge_slave_0: entered promiscuous mode
[  439.103678][T13411] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.111088][T13411] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.118221][T13411] bridge_slave_1: entered allmulticast mode
[  439.124370][ T5866] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  439.132982][T13411] bridge_slave_1: entered promiscuous mode
[  439.181214][ T5863] usb 6-1: USB disconnect, device number 12
[  439.435202][ T5866] usb 1-1: Using ep0 maxpacket: 8
[  439.924096][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  439.930998][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  439.939432][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  439.967060][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  439.975807][T13411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.990411][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  440.000637][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  440.011232][ T5866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  440.024298][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  440.130608][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.143294][T13411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.213857][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  440.242056][   T30] audit: type=1400 audit(1746879126.017:744): avc:  denied  { ioctl } for  pid=13644 comm="syz.3.1067" path="socket:[36162]" dev="sockfs" ino=36162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  440.294858][T13666] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  440.375196][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.386118][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.395474][ T5866] usb 1-1: usb_control_msg returned -32
[  440.408098][T13666] __vm_enough_memory: pid: 13666, comm: syz.3.1067, bytes: 21200311160832 not enough memory for the allocation
[  440.420368][ T5866] usbtmc 1-1:16.0: can't read capabilities
[  441.017845][ T5827] Bluetooth: hci2: command tx timeout
[  441.058116][T13411] team0: Port device team_slave_0 added
[  441.067902][T13411] team0: Port device team_slave_1 added
[  441.252253][ T5815] usb 1-1: USB disconnect, device number 76
[  441.337501][T13736] use of bytesused == 0 is deprecated and will be removed in the future,
[  441.346108][T13736] use the actual size instead.
[  441.368939][T13411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.394901][T13411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.455344][T13411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.477685][T13411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.501467][T13411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.528209][T13411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.528339][T13750] FAULT_INJECTION: forcing a failure.
[  441.528339][T13750] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.560206][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.3.1072 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  441.560231][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.560241][T13750] Call Trace:
[  441.560246][T13750]  <TASK>
[  441.560252][T13750]  dump_stack_lvl+0x16c/0x1f0
[  441.560278][T13750]  should_fail_ex+0x512/0x640
[  441.560303][T13750]  _copy_from_user+0x2e/0xd0
[  441.560328][T13750]  csum_and_copy_from_iter_full+0x214/0x1e20
[  441.560361][T13750]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  441.560392][T13750]  ? rcu_is_watching+0x12/0xc0
[  441.560412][T13750]  ? trace_kmalloc+0x2b/0xd0
[  441.560429][T13750]  ? __kmalloc_node_track_caller_noprof+0x23e/0x510
[  441.560447][T13750]  ? __alloc_skb+0x166/0x380
[  441.560465][T13750]  ip_generic_getfrag+0x170/0x270
[  441.560484][T13750]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  441.560501][T13750]  ? do_csum+0x26f/0x2d0
[  441.560530][T13750]  raw6_getfrag+0x22d/0x2a0
[  441.560550][T13750]  __ip6_append_data+0x3e4d/0x4710
[  441.560575][T13750]  ? __pfx_raw6_getfrag+0x10/0x10
[  441.560602][T13750]  ? __pfx___ip6_append_data+0x10/0x10
[  441.560622][T13750]  ? ip6_setup_cork+0xd01/0x15d0
[  441.560644][T13750]  ip6_append_data+0x1bd/0x4c0
[  441.560663][T13750]  ? __pfx_raw6_getfrag+0x10/0x10
[  441.560683][T13750]  rawv6_sendmsg+0x175a/0x4890
[  441.560712][T13750]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  441.560729][T13750]  ? avc_has_perm_noaudit+0x149/0x3b0
[  441.560749][T13750]  ? avc_has_perm+0x11a/0x1c0
[  441.560765][T13750]  ? __pfx_avc_has_perm+0x10/0x10
[  441.560803][T13750]  ? __import_iovec+0x1c8/0x660
[  441.560826][T13750]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  441.560844][T13750]  ? inet_sendmsg+0x119/0x140
[  441.560864][T13750]  inet_sendmsg+0x119/0x140
[  441.560887][T13750]  ____sys_sendmsg+0x973/0xc70
[  441.560908][T13750]  ? copy_msghdr_from_user+0x10a/0x160
[  441.560925][T13750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.560958][T13750]  ___sys_sendmsg+0x134/0x1d0
[  441.560975][T13750]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.561024][T13750]  __sys_sendmsg+0x16d/0x220
[  441.561041][T13750]  ? __pfx___sys_sendmsg+0x10/0x10
[  441.561064][T13750]  ? rcu_is_watching+0x12/0xc0
[  441.561090][T13750]  do_syscall_64+0xcd/0x260
[  441.561113][T13750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.561129][T13750] RIP: 0033:0x7f9ff718e969
[  441.561142][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.561157][T13750] RSP: 002b:00007f9ff7fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.561173][T13750] RAX: ffffffffffffffda RBX: 00007f9ff73b5fa0 RCX: 00007f9ff718e969
[  441.561184][T13750] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003
[  441.561193][T13750] RBP: 00007f9ff7fa7090 R08: 0000000000000000 R09: 0000000000000000
[  441.561202][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.561211][T13750] R13: 0000000000000000 R14: 00007f9ff73b5fa0 R15: 00007ffe7cb9a848
[  441.561234][T13750]  </TASK>
[  441.888020][T13411] hsr_slave_0: entered promiscuous mode
[  441.906057][T13411] hsr_slave_1: entered promiscuous mode
[  441.925752][T13411] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.939625][T13411] Cannot create hsr debugfs directory
[  441.940450][   T30] audit: type=1400 audit(1746879127.717:745): avc:  denied  { write } for  pid=13779 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  442.133468][T13819] FAULT_INJECTION: forcing a failure.
[  442.133468][T13819] name failslab, interval 1, probability 0, space 0, times 0
[  442.236848][T13819] CPU: 1 UID: 0 PID: 13819 Comm: syz.0.1075 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  442.236872][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  442.236882][T13819] Call Trace:
[  442.236887][T13819]  <TASK>
[  442.236893][T13819]  dump_stack_lvl+0x16c/0x1f0
[  442.236919][T13819]  should_fail_ex+0x512/0x640
[  442.236939][T13819]  ? __kmalloc_noprof+0xbf/0x510
[  442.236963][T13819]  ? constrain_params_by_rules+0x175/0xca0
[  442.236983][T13819]  should_failslab+0xc2/0x120
[  442.237000][T13819]  __kmalloc_noprof+0xd2/0x510
[  442.237029][T13819]  constrain_params_by_rules+0x175/0xca0
[  442.237051][T13819]  ? mark_held_locks+0x49/0x80
[  442.237076][T13819]  ? lockdep_hardirqs_on+0x7c/0x110
[  442.237099][T13819]  ? stack_depot_save_flags+0x3e6/0xa50
[  442.237121][T13819]  ? __pfx_constrain_params_by_rules+0x10/0x10
[  442.237147][T13819]  ? __kasan_kmalloc+0xaa/0xb0
[  442.237170][T13819]  ? snd_pcm_oss_change_params_locked+0x6f4/0x3b40
[  442.237192][T13819]  ? snd_pcm_oss_make_ready_locked+0xb7/0x130
[  442.237212][T13819]  ? snd_pcm_oss_read+0x39b/0x760
[  442.237242][T13819]  ? snd_interval_refine+0x2fa/0x580
[  442.237261][T13819]  snd_pcm_hw_refine+0x7de/0xad0
[  442.237288][T13819]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  442.237322][T13819]  ? snd_interval_refine+0x2fa/0x580
[  442.237340][T13819]  snd_pcm_oss_change_params_locked+0x2185/0x3b40
[  442.237381][T13819]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  442.237426][T13819]  snd_pcm_oss_make_ready_locked+0xb7/0x130
[  442.237451][T13819]  snd_pcm_oss_read+0x39b/0x760
[  442.237474][T13819]  ? security_file_permission+0x71/0x210
[  442.237499][T13819]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  442.237520][T13819]  vfs_read+0x1de/0xc70
[  442.237549][T13819]  ? __pfx_vfs_read+0x10/0x10
[  442.237568][T13819]  ? find_held_lock+0x2b/0x80
[  442.237587][T13819]  ? __fget_files+0x204/0x3c0
[  442.237616][T13819]  ? __fget_files+0x20e/0x3c0
[  442.237648][T13819]  ksys_read+0x12a/0x240
[  442.237671][T13819]  ? __pfx_ksys_read+0x10/0x10
[  442.237692][T13819]  ? rcu_is_watching+0x12/0xc0
[  442.237718][T13819]  do_syscall_64+0xcd/0x260
[  442.237740][T13819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.237756][T13819] RIP: 0033:0x7f8255b8e969
[  442.237770][T13819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.237786][T13819] RSP: 002b:00007f82539f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  442.237803][T13819] RAX: ffffffffffffffda RBX: 00007f8255db6080 RCX: 00007f8255b8e969
[  442.237813][T13819] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000006
[  442.237823][T13819] RBP: 00007f82539f6090 R08: 0000000000000000 R09: 0000000000000000
[  442.237833][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.237843][T13819] R13: 0000000000000000 R14: 00007f8255db6080 R15: 00007fff733fa8b8
[  442.237866][T13819]  </TASK>
[  442.596975][   T30] audit: type=1400 audit(1746879128.367:746): avc:  denied  { append } for  pid=13862 comm="syz.0.1080" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  442.624323][T13865] usb usb1: usbfs: process 13865 (syz.0.1080) did not claim interface 0 before use
[  442.634931][ T5866] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  442.760013][ T5908] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  442.770372][ T5866] usb 4-1: device descriptor read/64, error -71
[  442.794585][   T30] audit: type=1400 audit(1746879128.567:747): avc:  denied  { connect } for  pid=13882 comm="syz.0.1082" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  442.902988][T13411] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  442.930875][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.949364][T13411] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  442.956196][ T5908] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  442.968511][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.979706][T13411] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  442.995372][T13411] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  443.009998][ T5866] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  443.029132][ T5908] usb 6-1: config 0 descriptor??
[  443.038146][ T5908] pwc: Askey VC010 type 2 USB webcam detected.
[  443.074909][T13411] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.080152][ T5827] Bluetooth: hci2: command tx timeout
[  443.105222][T13411] 8021q: adding VLAN 0 to HW filter on device team0
[  443.115581][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.122705][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  443.160274][ T5866] usb 4-1: device descriptor read/64, error -71
[  443.172019][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.179161][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.271066][ T5866] usb usb4-port1: attempt power cycle
[  443.432033][T13411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.480309][T13411] veth0_vlan: entered promiscuous mode
[  443.499038][T13411] veth1_vlan: entered promiscuous mode
[  443.509680][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00
[  443.524692][ T5908] pwc: recv_control_msg error -32 req 02 val 2700
[  443.534041][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00
[  443.543994][ T5908] pwc: recv_control_msg error -32 req 04 val 1000
[  443.551317][ T5908] pwc: recv_control_msg error -32 req 04 val 1300
[  443.558348][T13411] veth0_macvtap: entered promiscuous mode
[  443.558604][ T5908] pwc: recv_control_msg error -32 req 04 val 1400
[  443.587490][T13411] veth1_macvtap: entered promiscuous mode
[  443.608279][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.622265][ T5866] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  443.631987][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.642826][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.653703][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.663970][ T5866] usb 4-1: device descriptor read/8, error -71
[  443.670490][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.689986][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.730011][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.740690][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.751975][T13411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.762083][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.837584][ T5908] pwc: recv_control_msg error -32 req 02 val 2100
[  443.845693][ T5908] pwc: recv_control_msg error -32 req 04 val 1500
[  443.865071][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.885133][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.899921][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.910687][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.921559][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.931993][T13411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  443.942541][T13411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.967493][T13411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.989358][T13411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.998791][ T5866] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  443.999128][T13411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.015934][T13411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.024963][T13411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.043006][ T5866] usb 4-1: device descriptor read/8, error -71
[  444.055536][ T5908] pwc: recv_control_msg error -71 req 02 val 2400
[  444.070728][ T5908] pwc: recv_control_msg error -71 req 02 val 2600
[  444.093265][ T5908] pwc: recv_control_msg error -71 req 02 val 2900
[  444.116990][ T5908] pwc: recv_control_msg error -71 req 02 val 2800
[  444.118874][   T30] audit: type=1400 audit(1746879129.867:748): avc:  denied  { cmd } for  pid=13912 comm="syz.0.1086" path="socket:[37135]" dev="sockfs" ino=37135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  444.161870][ T5908] pwc: recv_control_msg error -71 req 04 val 1100
[  444.173779][ T5866] usb usb4-port1: unable to enumerate USB device
[  444.188626][ T5908] pwc: recv_control_msg error -71 req 04 val 1200
[  444.205424][ T5908] pwc: Registered as video103.
[  444.214227][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24
[  444.231071][ T8004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.238899][ T8004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.261819][ T5908] usb 6-1: USB disconnect, device number 13
[  444.313917][ T5886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.322224][ T5886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.410021][   T30] audit: type=1400 audit(1746879130.177:749): avc:  denied  { read } for  pid=13943 comm="syz.4.1087" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  445.228584][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  445.518582][   T30] audit: type=1400 audit(1746879131.287:750): avc:  denied  { create } for  pid=13987 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  445.612885][T13988] nftables ruleset with unbound set
[  445.625371][   T30] audit: type=1400 audit(1746879131.287:751): avc:  denied  { ioctl } for  pid=13987 comm="syz.3.1090" path="socket:[36596]" dev="sockfs" ino=36596 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  445.950046][ T5864] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  445.965238][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  446.513170][ T5864] usb 6-1: too many configurations: 239, using maximum allowed: 8
[  446.831353][ T5864] usb 6-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice=e6.56
[  446.846359][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  446.860203][ T5864] usb 6-1: SerialNumber: syz
[  447.052876][ T5864] usb 6-1: config 0 descriptor??
[  447.064132][ T5864] gspca_main: 041e:4068 too many config
[  447.458020][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  447.580016][ T5864] usb 4-1: new low-speed USB device number 82 using dummy_hcd
[  447.596018][   T91] usb 6-1: USB disconnect, device number 14
[  447.729928][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  447.859949][ T5864] usb 4-1: new low-speed USB device number 83 using dummy_hcd
[  448.009881][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  448.015743][ T5864] usb usb4-port1: attempt power cycle
[  448.360112][ T5864] usb 4-1: new low-speed USB device number 84 using dummy_hcd
[  448.380313][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  448.510056][ T5864] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[  448.530388][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  448.535887][ T5864] usb usb4-port1: unable to enumerate USB device
[  448.752570][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.834664][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.891590][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.964138][   T12] bridge_slave_1: left allmulticast mode
[  448.969780][   T12] bridge_slave_1: left promiscuous mode
[  448.976315][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.986162][   T12] bridge_slave_0: left allmulticast mode
[  448.992480][   T12] bridge_slave_0: left promiscuous mode
[  448.998168][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.315491][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.336198][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.373547][   T12] bond0 (unregistering): Released all slaves
[  449.480083][ T5863] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  449.577334][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  449.586217][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  449.597733][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  450.349248][ T5863] usb 6-1: device descriptor read/64, error -71
[  450.456715][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  450.458560][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  450.475777][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  450.632383][T14083] misc userio: The device must be registered before sending interrupts
[  450.720062][ T5863] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  450.941999][ T5863] usb 6-1: device descriptor read/64, error -71
[  451.050823][ T5863] usb usb6-port1: attempt power cycle
[  451.060903][ T5866] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  451.105031][ T5862] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  451.134035][   T12] hsr_slave_0: left promiscuous mode
[  451.139656][   T12] hsr_slave_1: left promiscuous mode
[  451.145257][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.152646][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.167236][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.174794][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.187817][   T12] veth1_macvtap: left promiscuous mode
[  451.193397][   T12] veth0_macvtap: left promiscuous mode
[  451.198901][   T12] veth1_vlan: left promiscuous mode
[  451.204178][   T12] veth0_vlan: left promiscuous mode
[  451.224205][ T5866] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  451.237040][ T5866] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  451.253306][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  451.263069][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.271217][ T5862] usb 1-1: Using ep0 maxpacket: 16
[  451.279698][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.290882][ T5862] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  451.308229][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  451.315472][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.331953][ T5862] usb 1-1: config 0 descriptor??
[  451.341803][ T5862] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input25
[  451.377493][ T5866] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  451.410528][ T5863] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  451.440680][ T5863] usb 6-1: device descriptor read/8, error -71
[  451.542833][   T30] audit: type=1400 audit(1746879137.317:752): avc:  denied  { read } for  pid=14093 comm="syz.0.1106" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  451.544167][T14095] x_tables: duplicate underflow at hook 1
[  451.588154][   T30] audit: type=1400 audit(1746879137.317:753): avc:  denied  { open } for  pid=14093 comm="syz.0.1106" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  451.588188][   T30] audit: type=1400 audit(1746879137.317:754): avc:  denied  { ioctl } for  pid=14093 comm="syz.0.1106" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  451.588218][   T30] audit: type=1400 audit(1746879137.317:755): avc:  denied  { setopt } for  pid=14093 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  451.588265][   T30] audit: type=1400 audit(1746879137.357:756): avc:  denied  { ioctl } for  pid=14088 comm="syz.3.1105" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  451.597546][T14095] input: syz1 as /devices/virtual/input/input26
[  451.655871][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.689414][   T30] audit: type=1400 audit(1746879137.457:757): avc:  denied  { write } for  pid=14088 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  451.706434][    C0] vkms_vblank_simulate: vblank timer overrun
[  451.738720][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  451.756370][ T5863] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  451.780459][ T5863] usb 6-1: device descriptor read/8, error -71
[  451.807603][   T12] team0 (unregistering): Port device team_slave_1 removed
[  451.817114][ T5815] usb 4-1: USB disconnect, device number 86
[  451.844841][   T12] team0 (unregistering): Port device team_slave_0 removed
[  451.892197][ T5863] usb usb6-port1: unable to enumerate USB device
[  452.208867][T14072] chnl_net:caif_netlink_parms(): no params data found
[  452.318814][   T30] audit: type=1326 audit(1746879138.087:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e969 code=0x7ffc0000
[  452.342201][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.423571][   T30] audit: type=1326 audit(1746879138.127:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd57418e969 code=0x7ffc0000
[  452.549979][ T5831] Bluetooth: hci2: command tx timeout
[  452.556891][T14072] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.564530][T14072] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.572253][   T30] audit: type=1326 audit(1746879138.127:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57418e969 code=0x7ffc0000
[  452.613614][T14072] bridge_slave_0: entered allmulticast mode
[  452.624647][T14072] bridge_slave_0: entered promiscuous mode
[  452.631646][   T30] audit: type=1326 audit(1746879138.127:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd57418d2d0 code=0x7ffc0000
[  452.632709][T14072] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.655187][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.671687][T14072] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.678881][T14072] bridge_slave_1: entered allmulticast mode
[  452.687487][T14072] bridge_slave_1: entered promiscuous mode
[  452.758843][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.787986][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.856684][T14072] team0: Port device team_slave_0 added
[  452.866766][T14072] team0: Port device team_slave_1 added
[  452.914522][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.921566][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.951164][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.964627][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.973731][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.013567][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.740927][T14419] SELinux:  policydb magic number 0xff8c does not match expected magic number 0xf97cff8c
[  453.751259][T14419] SELinux: failed to load policy
[  453.765472][T14072] hsr_slave_0: entered promiscuous mode
[  453.776522][T14072] hsr_slave_1: entered promiscuous mode
[  453.783140][T14072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.790826][T14072] Cannot create hsr debugfs directory
[  454.394701][ T5168] bcm5974 1-1:0.0: could not read from device
[  454.428753][ T5168] bcm5974 1-1:0.0: could not read from device
[  454.438648][T14463] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  454.447322][ T5862] usb 1-1: USB disconnect, device number 77
[  454.600821][ T5831] Bluetooth: hci2: command tx timeout
[  454.612103][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'.
[  454.622082][T14516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1121'.
[  455.185164][ T5815] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  455.323623][T14072] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  455.334016][T14072] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  455.342525][T14072] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  455.352680][T14072] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  455.352970][ T5815] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  455.359908][ T5862] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  455.376412][ T5815] usb 6-1: config 0 has no interface number 0
[  455.386286][ T5815] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  455.399622][ T5815] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 61
[  455.417192][ T5815] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  455.426727][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.434947][ T5815] usb 6-1: Product: syz
[  455.439233][ T5815] usb 6-1: Manufacturer: syz
[  455.488976][T14072] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.496681][ T5815] usb 6-1: SerialNumber: syz
[  455.594167][ T5815] usb 6-1: config 0 descriptor??
[  455.594375][ T5862] usb 1-1: device descriptor read/64, error -71
[  455.599661][T14463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  455.612622][T14463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  455.630565][T14072] 8021q: adding VLAN 0 to HW filter on device team0
[  455.641948][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.649077][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.668280][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.675409][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.806190][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.870049][ T5862] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  455.954427][T14072] veth0_vlan: entered promiscuous mode
[  456.051763][ T5862] usb 1-1: device descriptor read/64, error -71
[  456.226268][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  456.244741][T14072] veth1_vlan: entered promiscuous mode
[  456.292645][T14072] veth0_macvtap: entered promiscuous mode
[  456.299190][ T5866] usb 6-1: USB disconnect, device number 19
[  456.303182][T14072] veth1_macvtap: entered promiscuous mode
[  456.321811][T14555] overlayfs: failed to clone upperpath
[  456.326343][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.338483][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.342738][ T5862] usb usb1-port1: attempt power cycle
[  456.351395][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.364491][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.376435][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.387014][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.399446][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.414296][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.425778][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.498136][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.517292][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.537865][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.549356][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.560385][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.589924][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.600266][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.611062][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.628564][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.680684][ T5831] Bluetooth: hci2: command tx timeout
[  456.711134][T14072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.721227][T14072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.735188][T14072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.745497][T14072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.780150][ T5862] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  456.811555][ T5862] usb 1-1: device descriptor read/8, error -71
[  456.840710][   T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  456.872223][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.894371][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.925446][ T8004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.933550][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  456.933563][   T30] audit: type=1400 audit(1746879142.697:788): avc:  denied  { bind } for  pid=14585 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  456.967439][ T8004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.050178][ T5862] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  457.170402][ T5862] usb 1-1: device descriptor read/8, error -71
[  457.410032][ T5815] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  457.481683][ T5862] usb usb1-port1: unable to enumerate USB device
[  457.483888][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'.
[  457.610045][ T5815] usb 4-1: Using ep0 maxpacket: 8
[  457.649267][ T5815] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  457.815593][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.868010][ T5815] usb 4-1: config 0 descriptor??
[  458.385392][   T30] audit: type=1400 audit(1746879144.157:789): avc:  denied  { write } for  pid=14613 comm="syz.5.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  458.479177][ T5815] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  458.489396][ T5815] asix 4-1:0.0: probe with driver asix failed with error -71
[  458.499208][ T5815] usb 4-1: USB disconnect, device number 87
[  458.757786][   T30] audit: type=1400 audit(1746879144.527:790): avc:  denied  { read } for  pid=14635 comm="syz.3.1132" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.135198][   T30] audit: type=1400 audit(1746879144.527:791): avc:  denied  { open } for  pid=14635 comm="syz.3.1132" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  459.294036][   T30] audit: type=1400 audit(1746879145.067:792): avc:  denied  { create } for  pid=14662 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  459.349441][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.491629][ T5815] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  459.662904][ T5815] usb 1-1: config 0 has an invalid interface number: 138 but max is 0
[  459.671168][ T5815] usb 1-1: config 0 has no interface number 0
[  459.677282][ T5815] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  459.689059][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66
[  459.698228][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.708971][ T5815] usb 1-1: config 0 descriptor??
[  459.917937][ T5815] usb 1-1: string descriptor 0 read error: -71
[  459.925252][ T5815] usbtest 1-1:0.138: Linux gadget zero
[  459.930782][ T5815] usbtest 1-1:0.138: full-speed {control in/out bulk-out iso-out} tests (+alt)
[  459.944508][ T5815] usb 1-1: USB disconnect, device number 82
[  460.111873][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.153541][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.193753][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.275460][   T36] bridge_slave_1: left allmulticast mode
[  460.281212][   T36] bridge_slave_1: left promiscuous mode
[  460.286847][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.295900][   T36] bridge_slave_0: left allmulticast mode
[  460.301774][   T36] bridge_slave_0: left promiscuous mode
[  460.307509][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.523332][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.534610][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.543972][   T36] bond0 (unregistering): Released all slaves
[  460.798930][   T36] hsr_slave_0: left promiscuous mode
[  460.807511][   T36] hsr_slave_1: left promiscuous mode
[  460.813585][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.824031][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.832897][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.840532][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.854552][   T36] veth1_macvtap: left promiscuous mode
[  460.860122][   T36] veth0_macvtap: left promiscuous mode
[  460.865620][   T36] veth1_vlan: left promiscuous mode
[  460.871884][   T36] veth0_vlan: left promiscuous mode
[  461.166795][   T36] team0 (unregistering): Port device team_slave_1 removed
[  461.196165][   T36] team0 (unregistering): Port device team_slave_0 removed
[  461.329857][   T30] audit: type=1400 audit(1746879147.097:793): avc:  denied  { map } for  pid=14721 comm="syz.3.1139" path="socket:[38308]" dev="sockfs" ino=38308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  461.472767][T14735] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1142'.
[  461.560388][T14729] tmpfs: Unknown parameter 'usrquotaÑLåbÙåòÂj8·°þ+)UWÝ9�ÌzíYøegI�øDÓi´Ôžä‹i»ˆø™u!§”0é»ì¤�~ª¡>�óWpöt›V
[  461.560388][T14729] oÇOéÆç´'
[  461.950602][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  461.960839][ T5886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  461.972469][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  461.980995][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  461.985533][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  461.994582][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  462.013152][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  462.788767][T14776] FAULT_INJECTION: forcing a failure.
[  462.788767][T14776] name failslab, interval 1, probability 0, space 0, times 0
[  462.799979][ T5815] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  462.803636][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.5.1146 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  462.803657][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  462.803667][T14776] Call Trace:
[  462.803672][T14776]  <TASK>
[  462.803678][T14776]  dump_stack_lvl+0x16c/0x1f0
[  462.803700][T14776]  should_fail_ex+0x512/0x640
[  462.803718][T14776]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  462.803740][T14776]  should_failslab+0xc2/0x120
[  462.803755][T14776]  __kmalloc_cache_noprof+0x6a/0x3e0
[  462.803773][T14776]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  462.803793][T14776]  ? genl_start+0x1e8/0x980
[  462.803813][T14776]  genl_start+0x1e8/0x980
[  462.803834][T14776]  __netlink_dump_start+0x60b/0x990
[  462.803853][T14776]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  462.803874][T14776]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  462.803897][T14776]  ? genl_op_from_small+0x25/0x440
[  462.803919][T14776]  ? __pfx_genl_get_cmd+0x10/0x10
[  462.803934][T14776]  ? __pfx_genl_start+0x10/0x10
[  462.803950][T14776]  ? __pfx_genl_dumpit+0x10/0x10
[  462.803966][T14776]  ? __pfx_genl_done+0x10/0x10
[  462.803985][T14776]  ? __local_bh_enable_ip+0xa4/0x120
[  462.804002][T14776]  ? __dev_queue_xmit+0x896/0x43e0
[  462.804021][T14776]  ? __radix_tree_lookup+0x21f/0x2c0
[  462.804042][T14776]  genl_rcv_msg+0x46e/0x800
[  462.804063][T14776]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.804080][T14776]  ? __pfx___dev_queue_xmit+0x10/0x10
[  462.804099][T14776]  ? __pfx_ovs_dp_cmd_dump+0x10/0x10
[  462.804119][T14776]  ? __lock_acquire+0xaa4/0x1ba0
[  462.804144][T14776]  netlink_rcv_skb+0x16a/0x440
[  462.804159][T14776]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.804179][T14776]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  462.804206][T14776]  ? __pfx_down_read+0x10/0x10
[  462.804227][T14776]  ? netlink_deliver_tap+0x1ae/0xd30
[  462.804246][T14776]  genl_rcv+0x28/0x40
[  462.804261][T14776]  netlink_unicast+0x53a/0x7f0
[  462.804281][T14776]  ? __pfx_netlink_unicast+0x10/0x10
[  462.804303][T14776]  netlink_sendmsg+0x8d1/0xdd0
[  462.804323][T14776]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.804348][T14776]  ____sys_sendmsg+0xa95/0xc70
[  462.804367][T14776]  ? copy_msghdr_from_user+0x10a/0x160
[  462.804381][T14776]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.804409][T14776]  ___sys_sendmsg+0x134/0x1d0
[  462.804425][T14776]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.804466][T14776]  __sys_sendmsg+0x16d/0x220
[  462.804481][T14776]  ? __pfx___sys_sendmsg+0x10/0x10
[  462.804503][T14776]  ? rcu_is_watching+0x12/0xc0
[  462.804525][T14776]  do_syscall_64+0xcd/0x260
[  462.804546][T14776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.804560][T14776] RIP: 0033:0x7fd57418e969
[  462.804572][T14776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.804585][T14776] RSP: 002b:00007fd57501a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.804600][T14776] RAX: ffffffffffffffda RBX: 00007fd5743b5fa0 RCX: 00007fd57418e969
[  462.804609][T14776] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000003
[  462.804618][T14776] RBP: 00007fd57501a090 R08: 0000000000000000 R09: 0000000000000000
[  462.804627][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.804635][T14776] R13: 0000000000000000 R14: 00007fd5743b5fa0 R15: 00007ffd0cf3e5b8
[  462.804655][T14776]  </TASK>
[  463.098274][T14741] chnl_net:caif_netlink_parms(): no params data found
[  463.234954][ T5815] usb 4-1: device descriptor read/64, error -71
[  463.484558][ T5815] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  463.511156][T14741] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.587439][T14741] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.672498][T14741] bridge_slave_0: entered allmulticast mode
[  463.680329][ T5815] usb 4-1: device descriptor read/64, error -71
[  463.754668][T14741] bridge_slave_0: entered promiscuous mode
[  463.820709][ T5815] usb usb4-port1: attempt power cycle
[  463.913954][T14741] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.998917][T14741] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.049996][ T5827] Bluetooth: hci2: command tx timeout
[  464.089149][T14741] bridge_slave_1: entered allmulticast mode
[  464.250804][ T5815] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  464.289594][T14741] bridge_slave_1: entered promiscuous mode
[  464.336393][ T5815] usb 4-1: device descriptor read/8, error -71
[  464.486659][T14942] netlink: 'syz.0.1151': attribute type 3 has an invalid length.
[  464.500072][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'.
[  464.535742][T14942] FAULT_INJECTION: forcing a failure.
[  464.535742][T14942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.566339][T14741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.572647][T14942] CPU: 1 UID: 0 PID: 14942 Comm: syz.0.1151 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  464.572669][T14942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  464.572677][T14942] Call Trace:
[  464.572683][T14942]  <TASK>
[  464.572689][T14942]  dump_stack_lvl+0x16c/0x1f0
[  464.572711][T14942]  should_fail_ex+0x512/0x640
[  464.572732][T14942]  _copy_from_iter+0x2a4/0x15b0
[  464.572753][T14942]  ? __alloc_skb+0x200/0x380
[  464.572768][T14942]  ? __pfx__copy_from_iter+0x10/0x10
[  464.572788][T14942]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  464.572811][T14942]  netlink_sendmsg+0x829/0xdd0
[  464.572831][T14942]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.572855][T14942]  ____sys_sendmsg+0xa95/0xc70
[  464.572878][T14942]  ? copy_msghdr_from_user+0x10a/0x160
[  464.572892][T14942]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.572919][T14942]  ___sys_sendmsg+0x134/0x1d0
[  464.572935][T14942]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.572975][T14942]  __sys_sendmsg+0x16d/0x220
[  464.572989][T14942]  ? __pfx___sys_sendmsg+0x10/0x10
[  464.573010][T14942]  ? rcu_is_watching+0x12/0xc0
[  464.573032][T14942]  do_syscall_64+0xcd/0x260
[  464.573052][T14942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.573066][T14942] RIP: 0033:0x7f8255b8e969
[  464.573077][T14942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.573090][T14942] RSP: 002b:00007f825692c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.573104][T14942] RAX: ffffffffffffffda RBX: 00007f8255db5fa0 RCX: 00007f8255b8e969
[  464.573113][T14942] RDX: 0000000000009004 RSI: 0000200000000100 RDI: 000000000000000f
[  464.573122][T14942] RBP: 00007f825692c090 R08: 0000000000000000 R09: 0000000000000000
[  464.573130][T14942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.573138][T14942] R13: 0000000000000000 R14: 00007f8255db5fa0 R15: 00007fff733fa8b8
[  464.573157][T14942]  </TASK>
[  464.698827][T14955] tmpfs: Unknown parameter 'usrquotaÑLåbÙåòÂj8·°þ+)UWÝ9�ÌzíYøegI�øDÓi´Ôžä‹i»ˆø™u!§”0é»ì¤�~ª¡>�óWpöt›V
[  464.698827][T14955] oÇOéÆç´'
[  464.700001][ T5815] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  464.870578][ T5815] usb 4-1: device descriptor read/8, error -71
[  464.889302][T14959] random: crng reseeded on system resumption
[  464.894404][T14741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.927791][   T30] audit: type=1400 audit(1746879150.657:794): avc:  denied  { append } for  pid=14958 comm="syz.0.1156" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  464.967925][   T30] audit: type=1400 audit(1746879150.657:795): avc:  denied  { open } for  pid=14958 comm="syz.0.1156" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  464.991959][ T5815] usb usb4-port1: unable to enumerate USB device
[  464.995148][T14971] FAULT_INJECTION: forcing a failure.
[  464.995148][T14971] name failslab, interval 1, probability 0, space 0, times 0
[  465.031530][   T30] audit: type=1400 audit(1746879150.697:796): avc:  denied  { firmware_load } for  pid=5886 comm="kworker/u8:7" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  465.402741][T14977] vivid-007: =================  START STATUS  =================
[  465.410482][T14977] vivid-007: Generate PTS: true
[  465.413518][   T30] audit: type=1400 audit(1746879150.697:797): avc:  denied  { firmware_load } for  pid=81 comm="kworker/u8:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  465.416079][T14977] vivid-007: Generate SCR: true
[  465.445949][T14977] tpg source WxH: 640x360 (Y'CbCr)
[  465.451123][T14977] tpg field: 1
[  465.455850][T14977] tpg crop: (0,0)/640x360
[  465.460246][T14977] tpg compose: (0,0)/640x360
[  465.464831][T14977] tpg colorspace: 8
[  465.468631][T14977] tpg transfer function: 0/0
[  465.473245][T14977] tpg Y'CbCr encoding: 0/0
[  465.477653][T14977] tpg quantization: 0/0
[  465.481848][T14977] tpg RGB range: 0/2
[  465.485733][T14977] vivid-007: ==================  END STATUS  ==================
[  465.496626][T14971] CPU: 0 UID: 0 PID: 14971 Comm: syz.0.1156 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  465.496649][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  465.496659][T14971] Call Trace:
[  465.496665][T14971]  <TASK>
[  465.496672][T14971]  dump_stack_lvl+0x16c/0x1f0
[  465.496699][T14971]  should_fail_ex+0x512/0x640
[  465.496717][T14971]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  465.496745][T14971]  should_failslab+0xc2/0x120
[  465.496762][T14971]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  465.496785][T14971]  ? getname_flags.part.0+0x4c/0x550
[  465.496807][T14971]  getname_flags.part.0+0x4c/0x550
[  465.496827][T14971]  getname_flags+0x93/0xf0
[  465.496847][T14971]  do_sys_openat2+0xb8/0x1d0
[  465.496865][T14971]  ? __pfx_do_sys_openat2+0x10/0x10
[  465.496885][T14971]  ? __fget_files+0x20e/0x3c0
[  465.496910][T14971]  __x64_sys_openat+0x174/0x210
[  465.496926][T14971]  ? __pfx___x64_sys_openat+0x10/0x10
[  465.496942][T14971]  ? ksys_write+0x1b9/0x240
[  465.496970][T14971]  do_syscall_64+0xcd/0x260
[  465.496993][T14971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.497007][T14971] RIP: 0033:0x7f8255b8e969
[  465.497019][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.497033][T14971] RSP: 002b:00007f82539f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  465.497049][T14971] RAX: ffffffffffffffda RBX: 00007f8255db6080 RCX: 00007f8255b8e969
[  465.497059][T14971] RDX: 0000000000104843 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  465.497074][T14971] RBP: 00007f82539f6090 R08: 0000000000000000 R09: 0000000000000000
[  465.497083][T14971] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000001
[  465.497092][T14971] R13: 0000000000000001 R14: 00007f8255db6080 R15: 00007fff733fa8b8
[  465.497114][T14971]  </TASK>
[  465.695683][   T30] audit: type=1400 audit(1746879151.457:798): avc:  denied  { write } for  pid=14960 comm="syz.5.1154" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  465.750239][T14741] team0: Port device team_slave_0 added
[  465.766195][T14741] team0: Port device team_slave_1 added
[  466.113154][T14741] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.122008][ T5827] Bluetooth: hci2: command tx timeout
[  466.129972][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.133858][   T30] audit: type=1400 audit(1746879151.907:799): avc:  denied  { create } for  pid=15024 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  466.155932][T14741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.157631][T14741] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.230020][T14741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.270044][T14741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.281624][   T30] audit: type=1400 audit(1746879151.957:800): avc:  denied  { ioctl } for  pid=15024 comm="syz.3.1159" path="socket:[38502]" dev="sockfs" ino=38502 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  466.347747][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'.
[  466.378666][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'.
[  466.720693][   T30] audit: type=1400 audit(1746879151.957:801): avc:  denied  { connect } for  pid=15024 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  466.752767][T14741] hsr_slave_0: entered promiscuous mode
[  466.758726][T14741] hsr_slave_1: entered promiscuous mode
[  466.799502][T14741] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  466.976278][T14741] Cannot create hsr debugfs directory
[  467.091713][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1164'.
[  467.102910][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1164'.
[  467.339223][T15088] tmpfs: Unknown parameter 'usrquotaÑLåbÙåòÂj8·°þ+)UWÝ9�ÌzíYøegI�øDÓi´Ôžä‹i»ˆø™u!§”0é»ì¤�~ª¡>�óWpöt›V
[  467.339223][T15088] oÇOéÆç´'
[  467.386950][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  468.334427][T15098] netlink: 'syz.0.1167': attribute type 4 has an invalid length.
[  468.337132][ T5827] Bluetooth: hci2: command tx timeout
[  468.342207][T15098] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  468.394406][T15117] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1168'.
[  468.413816][   T30] audit: type=1400 audit(1746879154.177:802): avc:  denied  { unlink } for  pid=15112 comm="syz.3.1168" name="#2b" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  469.897750][T14741] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  469.907943][T14741] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  469.921651][T14741] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  469.930241][   T91] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  469.963870][T14741] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  470.007700][   T30] audit: type=1400 audit(1746879155.777:803): avc:  denied  { read } for  pid=15189 comm="syz.5.1172" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  470.066662][   T30] audit: type=1400 audit(1746879155.807:804): avc:  denied  { open } for  pid=15189 comm="syz.5.1172" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  470.096359][T14741] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.130586][   T91] usb 1-1: Using ep0 maxpacket: 8
[  470.156277][T14741] 8021q: adding VLAN 0 to HW filter on device team0
[  470.156668][   T91] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  470.185986][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.193123][ T8004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.200820][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  470.212957][   T91] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.224246][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1172'.
[  470.224745][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.236865][T15190] xt_recent: Unsupported userspace flags (000000de)
[  470.245182][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  470.260514][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.265988][   T91] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  470.268626][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  470.276043][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  470.309969][   T91] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.324456][T14741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  470.335530][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.338982][T14741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  470.354977][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  470.364714][ T5827] Bluetooth: hci2: command tx timeout
[  470.384321][   T91] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  470.409099][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  470.412614][T15200] FAULT_INJECTION: forcing a failure.
[  470.412614][T15200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.433557][T15200] CPU: 1 UID: 0 PID: 15200 Comm: syz.3.1174 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  470.433576][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  470.433584][T15200] Call Trace:
[  470.433589][T15200]  <TASK>
[  470.433594][T15200]  dump_stack_lvl+0x16c/0x1f0
[  470.433615][T15200]  should_fail_ex+0x512/0x640
[  470.433634][T15200]  _copy_from_iter+0x2a4/0x15b0
[  470.433654][T15200]  ? alloc_pages_mpol+0x25a/0x550
[  470.433667][T15200]  ? __pfx__copy_from_iter+0x10/0x10
[  470.433683][T15200]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  470.433703][T15200]  copy_page_from_iter+0xa5/0x120
[  470.433722][T15200]  tun_build_skb.constprop.0+0x292/0x1480
[  470.433748][T15200]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  470.433769][T15200]  ? find_held_lock+0x2b/0x80
[  470.433785][T15200]  ? avc_has_perm_noaudit+0x117/0x3b0
[  470.433805][T15200]  ? avc_has_perm+0x11a/0x1c0
[  470.433819][T15200]  tun_get_user+0x165f/0x3b10
[  470.433845][T15200]  ? __pfx_tun_get_user+0x10/0x10
[  470.433862][T15200]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  470.433884][T15200]  ? find_held_lock+0x2b/0x80
[  470.433898][T15200]  ? tun_get+0x191/0x370
[  470.433919][T15200]  tun_chr_write_iter+0xdc/0x210
[  470.433939][T15200]  vfs_write+0x5ba/0x1180
[  470.433957][T15200]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  470.433978][T15200]  ? __pfx_vfs_write+0x10/0x10
[  470.433993][T15200]  ? find_held_lock+0x2b/0x80
[  470.434019][T15200]  ksys_write+0x12a/0x240
[  470.434036][T15200]  ? __pfx_ksys_write+0x10/0x10
[  470.434063][T15200]  do_syscall_64+0xcd/0x260
[  470.434081][T15200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.434093][T15200] RIP: 0033:0x7f9ff718d41f
[  470.434104][T15200] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  470.434116][T15200] RSP: 002b:00007f9ff7fa7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  470.434128][T15200] RAX: ffffffffffffffda RBX: 00007f9ff73b5fa0 RCX: 00007f9ff718d41f
[  470.434136][T15200] RDX: 000000000000007e RSI: 00002000000003c0 RDI: 00000000000000c8
[  470.434143][T15200] RBP: 00007f9ff7fa7090 R08: 0000000000000000 R09: 0000000000000000
[  470.434151][T15200] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001
[  470.434158][T15200] R13: 0000000000000001 R14: 00007f9ff73b5fa0 R15: 00007ffe7cb9a848
[  470.434174][T15200]  </TASK>
[  470.685244][   T91] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.697243][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.708419][   T91] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  470.730807][   T91] usb 1-1: string descriptor 0 read error: -22
[  470.737168][   T91] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  470.749163][   T91] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.817175][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1179'.
[  471.828059][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1179'.
[  471.980117][   T91] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  472.050123][T14741] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.968036][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  473.063050][T14741] veth0_vlan: entered promiscuous mode
[  473.078403][   T91] usb 1-1: USB disconnect, device number 83
[  473.092929][ T5827] block nbd0: Receive control failed (result -104)
[  473.165070][T14741] veth1_vlan: entered promiscuous mode
[  473.186701][T14741] veth0_macvtap: entered promiscuous mode
[  473.196895][T14741] veth1_macvtap: entered promiscuous mode
[  473.219799][   T30] audit: type=1400 audit(1746879158.967:805): avc:  denied  { read } for  pid=15238 comm="syz.5.1181" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  473.263809][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.287696][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.301893][   T30] audit: type=1400 audit(1746879159.047:806): avc:  denied  { read append } for  pid=15255 comm="syz.3.1185" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  473.323533][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.334893][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.346922][   T30] audit: type=1400 audit(1746879159.047:807): avc:  denied  { open } for  pid=15255 comm="syz.3.1185" path="/286/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  473.370322][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.381048][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.392325][   T30] audit: type=1400 audit(1746879159.047:808): avc:  denied  { remount } for  pid=15255 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  473.417017][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.428037][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.440095][T15239] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  473.447697][T15239] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  473.462569][T15239] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  473.470964][T15239] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  473.477385][T15239] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  473.489416][T14741] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.498230][T15239] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  473.540605][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.555616][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.568830][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.794807][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.824101][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.835688][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.899934][T14741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.910540][T14741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.922397][T14741] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.938624][T14741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.947902][T14741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.959623][T14741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.058695][   T30] audit: type=1400 audit(1746879159.807:809): avc:  denied  { read } for  pid=15279 comm="syz.5.1189" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  474.214447][T14741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.235382][   T30] audit: type=1400 audit(1746879159.807:810): avc:  denied  { open } for  pid=15279 comm="syz.5.1189" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  474.451044][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.462728][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.109361][ T3443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.164566][ T3443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.319939][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[  476.959948][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.180192][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.189616][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.200645][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.209588][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.220018][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.228937][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.239408][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.248360][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.258368][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'.
[  477.446259][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[  477.585254][   T30] audit: type=1400 audit(1746879163.347:811): avc:  denied  { write } for  pid=15333 comm="syz.5.1195" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  477.614185][T15336] program syz.5.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  477.660416][T15336] FAULT_INJECTION: forcing a failure.
[  477.660416][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.673537][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz.5.1195 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  477.673560][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  477.673569][T15336] Call Trace:
[  477.673575][T15336]  <TASK>
[  477.673580][T15336]  dump_stack_lvl+0x16c/0x1f0
[  477.673597][T15336]  should_fail_ex+0x512/0x640
[  477.673613][T15336]  _copy_from_user+0x2e/0xd0
[  477.673628][T15336]  move_addr_to_kernel+0x65/0x170
[  477.673644][T15336]  __sys_connect+0xaf/0x170
[  477.673664][T15336]  ? __pfx___sys_connect+0x10/0x10
[  477.673684][T15336]  ? preempt_schedule_thunk+0x16/0x30
[  477.673703][T15336]  ? __pfx_ksys_write+0x10/0x10
[  477.673723][T15336]  __x64_sys_connect+0x72/0xb0
[  477.673737][T15336]  ? lockdep_hardirqs_on+0x7c/0x110
[  477.673750][T15336]  do_syscall_64+0xcd/0x260
[  477.673764][T15336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.673775][T15336] RIP: 0033:0x7fd57418e969
[  477.673783][T15336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  477.673793][T15336] RSP: 002b:00007fd574ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  477.673803][T15336] RAX: ffffffffffffffda RBX: 00007fd5743b6080 RCX: 00007fd57418e969
[  477.673809][T15336] RDX: 0000000000000048 RSI: 0000200000001140 RDI: 0000000000000008
[  477.673815][T15336] RBP: 00007fd574ff9090 R08: 0000000000000000 R09: 0000000000000000
[  477.673821][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.673827][T15336] R13: 0000000000000000 R14: 00007fd5743b6080 R15: 00007ffd0cf3e5b8
[  477.673840][T15336]  </TASK>
[  478.156166][ T3443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.465679][ T3443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.530529][   T91] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  478.600330][   T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.720015][   T91] usb 6-1: Using ep0 maxpacket: 16
[  478.738505][   T91] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  478.756335][   T91] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11
[  478.779611][   T91] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024
[  478.795232][   T91] usb 6-1: config 0 interface 0 has no altsetting 0
[  478.806584][   T91] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  478.820082][   T91] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.822938][ T3443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.843959][   T91] usb 6-1: Product: syz
[  478.848126][   T91] usb 6-1: Manufacturer: syz
[  478.860223][   T91] usb 6-1: SerialNumber: syz
[  478.867100][   T91] usb 6-1: config 0 descriptor??
[  478.874795][T15350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  478.911382][ T3443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.988057][ T3443] bridge_slave_1: left allmulticast mode
[  478.995150][ T3443] bridge_slave_1: left promiscuous mode
[  479.000922][ T3443] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.056502][ T3443] bridge_slave_0: left allmulticast mode
[  479.062312][ T3443] bridge_slave_0: left promiscuous mode
[  479.067967][ T3443] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.085819][T15350] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  479.096810][   T91] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27
[  479.323207][ T3443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.333642][ T3443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.342995][ T3443] bond0 (unregistering): Released all slaves
[  479.360564][T15350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.369061][T15350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.378591][   T30] audit: type=1400 audit(1746879165.157:812): avc:  denied  { append } for  pid=15348 comm="syz.5.1199" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  479.480135][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout
[  479.582114][ T5866] usb 6-1: USB disconnect, device number 20
[  479.711022][ T3443] hsr_slave_0: left promiscuous mode
[  479.717010][ T3443] hsr_slave_1: left promiscuous mode
[  479.725781][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.733419][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.742042][ T3443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.749420][ T3443] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.763972][ T3443] veth1_macvtap: left promiscuous mode
[  479.769481][ T3443] veth0_macvtap: left promiscuous mode
[  479.775110][ T3443] veth1_vlan: left promiscuous mode
[  479.780455][ T3443] veth0_vlan: left promiscuous mode
[  480.037727][ T3443] team0 (unregistering): Port device team_slave_1 removed
[  480.066657][ T3443] team0 (unregistering): Port device team_slave_0 removed
[  480.370725][   T30] audit: type=1400 audit(1746879166.147:813): avc:  denied  { write } for  pid=15411 comm="syz.5.1202" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  480.396894][T15413] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns
[  480.430179][T15420] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  480.462902][T15420] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  480.590282][ T5815] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  480.681632][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  480.701822][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  480.710804][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  480.719201][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  480.727662][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  480.771580][ T5815] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  480.794762][ T5815] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024
[  480.816212][ T5815] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  480.901736][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  480.919862][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  480.943564][ T5815] usb 1-1: Product: syz
[  480.947758][ T5815] usb 1-1: Manufacturer: syz
[  480.959849][ T5815] usb 1-1: SerialNumber: syz
[  481.006149][ T5815] cdc_mbim 1-1:1.0: skipping garbage
[  481.203470][T15407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  481.211261][   T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.391613][   T30] audit: type=1400 audit(1746879167.167:814): avc:  denied  { write } for  pid=15520 comm="syz.5.1209" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  481.455677][T15556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=15556 comm=syz.4.1210
[  481.475427][T15433] chnl_net:caif_netlink_parms(): no params data found
[  481.735485][T15433] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.743084][T15433] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.753837][T15433] bridge_slave_0: entered allmulticast mode
[  481.761022][T15433] bridge_slave_0: entered promiscuous mode
[  481.762428][   T30] audit: type=1326 audit(1746879167.537:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15555 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead058e969 code=0x7ffc0000
[  481.840096][T15407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  481.859065][   T30] audit: type=1326 audit(1746879167.537:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15555 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead058e969 code=0x7ffc0000
[  481.896721][T15433] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.910156][T15433] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.917738][T15433] bridge_slave_1: entered allmulticast mode
[  481.926788][T15433] bridge_slave_1: entered promiscuous mode
[  482.655715][T15668] __nla_validate_parse: 134 callbacks suppressed
[  482.657046][T15668] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1213'.
[  482.733861][   T30] audit: type=1400 audit(1746879168.497:817): avc:  denied  { setopt } for  pid=15663 comm="syz.5.1213" lport=53888 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  482.800185][ T5831] Bluetooth: hci2: command tx timeout
[  482.859685][T15433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.910242][ T5815] cdc_mbim 1-1:1.0: failed to get mac address
[  482.928682][ T5815] cdc_mbim 1-1:1.0: bind() failure
[  482.950400][T15433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.969863][ T5815] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  482.989721][ T5815] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  483.006587][T15683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=15683 comm=syz.5.1215
[  483.035742][ T5815] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  483.064935][ T5815] usb 1-1: USB disconnect, device number 84
[  483.124204][T15433] team0: Port device team_slave_0 added
[  483.131680][   T30] audit: type=1400 audit(1746879168.887:818): avc:  denied  { execute } for  pid=15678 comm="syz.5.1215" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=40880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  483.150748][T15433] team0: Port device team_slave_1 added
[  483.517568][T15433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.525676][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.552580][T15433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.579634][T15433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.638337][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.696491][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.722408][   T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.845250][T15433] hsr_slave_0: entered promiscuous mode
[  483.860613][T15433] hsr_slave_1: entered promiscuous mode
[  483.868084][T15433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.879245][T15433] Cannot create hsr debugfs directory
[  483.931335][ T5815] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  483.996631][T15827] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  484.102917][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.140574][ T5815] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  484.163674][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.182476][ T5815] usb 6-1: config 0 descriptor??
[  484.211800][ T5815] pwc: Askey VC010 type 2 USB webcam detected.
[  484.721735][ T5815] pwc: recv_control_msg error -32 req 02 val 2b00
[  484.792796][ T5815] pwc: recv_control_msg error -32 req 02 val 2700
[  484.800783][ T5815] pwc: recv_control_msg error -32 req 02 val 2c00
[  484.808196][ T5815] pwc: recv_control_msg error -32 req 04 val 1000
[  484.815718][ T5815] pwc: recv_control_msg error -32 req 04 val 1300
[  484.828255][ T5815] pwc: recv_control_msg error -32 req 04 val 1400
[  484.853937][ T5831] Bluetooth: hci2: command tx timeout
[  485.476237][ T5815] pwc: recv_control_msg error -32 req 02 val 2100
[  485.489807][ T5815] pwc: recv_control_msg error -32 req 04 val 1500
[  485.600162][ T5864] usb 4-1: new low-speed USB device number 92 using dummy_hcd
[  485.789221][   T30] audit: type=1400 audit(1746879171.427:819): avc:  denied  { create } for  pid=15895 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  485.846795][T15433] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  485.921241][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  486.027723][T15433] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  486.062139][ T5815] pwc: recv_control_msg error -71 req 02 val 2400
[  486.138486][T15433] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  486.162259][ T5864] usb 4-1: new low-speed USB device number 93 using dummy_hcd
[  486.275726][T15433] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  486.443716][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  486.502103][ T5864] usb usb4-port1: attempt power cycle
[  486.513131][ T5815] pwc: recv_control_msg error -71 req 02 val 2600
[  486.520249][ T5815] pwc: recv_control_msg error -71 req 02 val 2900
[  486.527071][ T5815] pwc: recv_control_msg error -71 req 02 val 2800
[  486.534011][ T5815] pwc: recv_control_msg error -71 req 04 val 1100
[  486.540864][ T5815] pwc: recv_control_msg error -71 req 04 val 1200
[  486.549863][ T5815] pwc: Registered as video103.
[  486.556165][ T5815] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28
[  486.571555][ T5815] usb 6-1: USB disconnect, device number 21
[  486.700564][T15925] Invalid logical block size (8210)
[  486.896279][T15433] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.922684][   T81] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  486.933209][ T5864] usb 4-1: new low-speed USB device number 94 using dummy_hcd
[  486.941046][ T5831] Bluetooth: hci2: command tx timeout
[  486.974735][T15433] 8021q: adding VLAN 0 to HW filter on device team0
[  486.986515][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.993700][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.005826][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  487.035932][T15433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  487.047298][T15433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  487.076908][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.084064][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.140004][ T5864] usb 4-1: new low-speed USB device number 95 using dummy_hcd
[  487.160490][ T5864] usb 4-1: Invalid ep0 maxpacket: 16
[  487.176229][   T30] audit: type=1400 audit(1746879172.947:820): avc:  denied  { write } for  pid=15930 comm="syz.0.1230" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  487.200331][ T5864] usb usb4-port1: unable to enumerate USB device
[  487.310225][   T30] audit: type=1400 audit(1746879173.087:821): avc:  denied  { write } for  pid=15932 comm="syz.5.1231" path="socket:[42008]" dev="sockfs" ino=42008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  487.424046][T15433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.514553][T15950] FAULT_INJECTION: forcing a failure.
[  487.514553][T15950] name failslab, interval 1, probability 0, space 0, times 0
[  487.546835][T15433] veth0_vlan: entered promiscuous mode
[  487.552502][T15950] CPU: 1 UID: 0 PID: 15950 Comm: syz.0.1233 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  487.552526][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  487.552537][T15950] Call Trace:
[  487.552543][T15950]  <TASK>
[  487.552549][T15950]  dump_stack_lvl+0x16c/0x1f0
[  487.552577][T15950]  should_fail_ex+0x512/0x640
[  487.552598][T15950]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  487.552628][T15950]  should_failslab+0xc2/0x120
[  487.552646][T15950]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  487.552672][T15950]  ? __alloc_skb+0x2b2/0x380
[  487.552693][T15950]  __alloc_skb+0x2b2/0x380
[  487.552708][T15950]  ? __pfx___alloc_skb+0x10/0x10
[  487.552726][T15950]  ? tcp_chrono_stop+0x95/0x420
[  487.552757][T15950]  tcp_stream_alloc_skb+0x34/0x570
[  487.552783][T15950]  tcp_connect+0xe75/0x5480
[  487.552826][T15950]  ? __pfx_tcp_connect+0x10/0x10
[  487.552850][T15950]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  487.552883][T15950]  tcp_v4_connect+0x1517/0x1ba0
[  487.552915][T15950]  ? __pfx_tcp_v4_connect+0x10/0x10
[  487.552935][T15950]  ? __lock_acquire+0xaa4/0x1ba0
[  487.552967][T15950]  __inet_stream_connect+0x3c5/0x1020
[  487.552996][T15950]  ? __pfx___inet_stream_connect+0x10/0x10
[  487.553017][T15950]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  487.553039][T15950]  ? __pfx_inet_stream_connect+0x10/0x10
[  487.553062][T15950]  ? __local_bh_enable_ip+0xa4/0x120
[  487.553086][T15950]  ? __pfx_inet_stream_connect+0x10/0x10
[  487.553106][T15950]  inet_stream_connect+0x57/0xa0
[  487.553130][T15950]  __sys_connect_file+0x13e/0x1a0
[  487.553158][T15950]  __sys_connect+0x14d/0x170
[  487.553182][T15950]  ? __pfx___sys_connect+0x10/0x10
[  487.553214][T15950]  ? __pfx_ksys_write+0x10/0x10
[  487.553238][T15950]  ? rcu_is_watching+0x12/0xc0
[  487.553263][T15950]  __x64_sys_connect+0x72/0xb0
[  487.553285][T15950]  ? lockdep_hardirqs_on+0x7c/0x110
[  487.553307][T15950]  do_syscall_64+0xcd/0x260
[  487.553331][T15950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.553348][T15950] RIP: 0033:0x7f8255b8e969
[  487.553363][T15950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  487.553378][T15950] RSP: 002b:00007f825692c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  487.553395][T15950] RAX: ffffffffffffffda RBX: 00007f8255db5fa0 RCX: 00007f8255b8e969
[  487.553406][T15950] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  487.553416][T15950] RBP: 00007f825692c090 R08: 0000000000000000 R09: 0000000000000000
[  487.553426][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.553436][T15950] R13: 0000000000000000 R14: 00007f8255db5fa0 R15: 00007fff733fa8b8
[  487.553459][T15950]  </TASK>
[  487.845137][T15433] veth1_vlan: entered promiscuous mode
[  487.942556][T15961] Cannot find del_set index 4 as target
[  487.966042][T15961] Invalid ELF header magic: != ELF
[  487.980185][   T30] audit: type=1400 audit(1746879173.727:822): avc:  denied  { module_load } for  pid=15947 comm="syz.4.1234" path="/330/bus" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[  488.329525][T15433] veth0_macvtap: entered promiscuous mode
[  488.343703][T15433] veth1_macvtap: entered promiscuous mode
[  488.360887][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.372934][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.383519][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.393996][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.418488][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.429094][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.439661][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.454010][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.473765][T15433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.491872][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.514269][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.524882][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.535444][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.545311][ T5863] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  488.553113][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.563808][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.574405][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  488.585465][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.589965][ T5815] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  488.596360][T15433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  488.667034][T15433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.685397][T15433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.694264][T15433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.703112][T15433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.711934][ T5864] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  488.735090][ T5863] usb 4-1: Using ep0 maxpacket: 8
[  488.744113][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  488.752357][ T5863] usb 4-1: config 0 has no interface number 0
[  488.758466][ T5863] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  488.770380][ T5815] usb 1-1: Using ep0 maxpacket: 8
[  488.772563][ T5863] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  488.783149][ T5815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  488.784989][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.794694][ T5863] usb 4-1: config 0 descriptor??
[  488.804490][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  488.817817][ T5863] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  488.861505][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  488.871760][ T5815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  488.871800][ T5815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  488.871821][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.908148][ T5864] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb
[  488.917237][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.935100][ T5864] usb 6-1: config 0 descriptor??
[  488.947170][ T5886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.959439][ T5886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  488.961078][ T5864] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[  488.981515][ T5864] dvb-usb: bulk message failed: -22 (3/0)
[  488.995817][ T5886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  488.997391][ T5864] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  489.008310][ T5886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.012916][ T5831] Bluetooth: hci2: command tx timeout
[  489.027759][ T5864] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[  489.045539][   T91] usb 4-1: USB disconnect, device number 96
[  489.053543][ T5864] usb 6-1: media controller created
[  489.070927][ T5864] dvb-usb: bulk message failed: -22 (5/0)
[  489.076689][ T5864] dvb-usb: MAC address reading failed.
[  489.085176][T15963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.089156][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  489.101153][ T5815] usb 1-1: usb_control_msg returned -32
[  489.115240][ T5815] usbtmc 1-1:16.0: can't read capabilities
[  489.128507][ T5864] dvb-usb: bulk message failed: -22 (6/0)
[  489.131207][T15963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.137338][ T5864] dvb-usb: bulk message failed: -22 (6/0)
[  489.161684][ T5864] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[  489.176660][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29
[  489.201304][ T5864] dvb-usb: schedule remote query interval to 100 msecs.
[  489.208239][ T5864] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[  489.231697][ T5864] usb 6-1: USB disconnect, device number 22
[  489.373426][ T5864] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[  489.482981][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  489.977886][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'.
[  490.167434][T16035] Invalid logical block size (8210)
[  490.556927][   T30] audit: type=1400 audit(1746879176.317:823): avc:  denied  { block_suspend } for  pid=16040 comm="syz.5.1242" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  490.580312][T16039] netlink: 'syz.3.1241': attribute type 3 has an invalid length.
[  490.853979][ T5886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.320768][ T5815] usb 4-1: new low-speed USB device number 97 using dummy_hcd
[  491.385153][ T5863] usb 1-1: USB disconnect, device number 85
[  491.490564][ T5815] usb 4-1: Invalid ep0 maxpacket: 16
[  491.629951][ T5815] usb 4-1: new low-speed USB device number 98 using dummy_hcd
[  491.703380][ T5886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.773663][ T5886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.780474][ T5815] usb 4-1: Invalid ep0 maxpacket: 16
[  491.789502][ T5815] usb usb4-port1: attempt power cycle
[  491.811014][ T5886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  491.882986][ T5886] bridge_slave_1: left allmulticast mode
[  491.888625][ T5886] bridge_slave_1: left promiscuous mode
[  491.895513][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.904009][ T5886] bridge_slave_0: left allmulticast mode
[  491.909628][ T5886] bridge_slave_0: left promiscuous mode
[  491.915381][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.123579][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.132343][ T5815] usb 4-1: new low-speed USB device number 99 using dummy_hcd
[  492.143175][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.153346][ T5886] bond0 (unregistering): Released all slaves
[  492.164161][ T5815] usb 4-1: Invalid ep0 maxpacket: 16
[  492.299949][ T5815] usb 4-1: new low-speed USB device number 100 using dummy_hcd
[  492.320339][ T5815] usb 4-1: Invalid ep0 maxpacket: 16
[  492.325798][ T5815] usb usb4-port1: unable to enumerate USB device
[  492.472595][ T5886] hsr_slave_0: left promiscuous mode
[  492.478519][ T5886] hsr_slave_1: left promiscuous mode
[  492.486798][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.496078][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.504000][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.511398][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.526139][ T5886] veth1_macvtap: left promiscuous mode
[  492.531769][ T5886] veth0_macvtap: left promiscuous mode
[  492.537288][ T5886] veth1_vlan: left promiscuous mode
[  492.542568][ T5886] veth0_vlan: left promiscuous mode
[  492.682232][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  492.823330][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  492.853560][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  493.480641][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1246'.
[  493.769964][   T91] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  493.998075][   T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  494.058414][   T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.138593][   T91] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  494.216216][   T91] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.551926][   T30] audit: type=1400 audit(1746879180.327:824): avc:  denied  { write } for  pid=16092 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  494.671005][   T91] usb 1-1: config 0 descriptor??
[  495.177803][   T91] bigben 0003:146B:0902.0006: unexpected rdesc, please submit for review
[  495.190844][   T91] bigben 0003:146B:0902.0006: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0
[  495.222024][   T91] bigben 0003:146B:0902.0006: not enough values in HID_OUTPUT_REPORT 0 field 0
[  495.241623][ T3443] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  495.265942][   T91] bigben 0003:146B:0902.0006: no output report found
[  495.306520][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  495.320052][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  495.329414][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  495.338254][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  495.347202][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  495.381263][ T5863] usb 1-1: USB disconnect, device number 86
[  495.591373][   T30] audit: type=1400 audit(1746879181.357:825): avc:  denied  { accept } for  pid=16156 comm="syz.4.1254" path="socket:[43221]" dev="sockfs" ino=43221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  495.727032][T16120] chnl_net:caif_netlink_parms(): no params data found
[  495.795039][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'.
[  495.822017][T16271] overlayfs: failed to clone upperpath
[  495.946995][T16120] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.965664][T16120] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.990275][T16120] bridge_slave_0: entered allmulticast mode
[  496.015225][T16120] bridge_slave_0: entered promiscuous mode
[  496.045705][ T5863] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  496.060707][T16120] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.067928][   T30] audit: type=1400 audit(1746879181.827:826): avc:  denied  { connect } for  pid=16314 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  496.108724][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'.
[  496.145011][T16120] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.162958][T16120] bridge_slave_1: entered allmulticast mode
[  496.191451][T16120] bridge_slave_1: entered promiscuous mode
[  496.215076][ T5863] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  496.234927][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.290790][ T5863] usb 4-1: config 0 descriptor??
[  496.322579][T16120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.333950][ T5863] cp210x 4-1:0.0: cp210x converter detected
[  496.334272][T16120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.460582][T16120] team0: Port device team_slave_0 added
[  496.476455][T16120] team0: Port device team_slave_1 added
[  496.531748][T16120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.538943][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.655905][T16120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.687537][T16120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.696464][T16120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.724628][T16120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.736339][ T5863] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  496.761666][ T5863] usb 4-1: cp210x converter now attached to ttyUSB0
[  497.770375][ T5831] Bluetooth: hci2: command tx timeout
[  497.783673][T16120] hsr_slave_0: entered promiscuous mode
[  497.791225][T16120] hsr_slave_1: entered promiscuous mode
[  497.797327][T16120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  497.805451][T16120] Cannot create hsr debugfs directory
[  498.556852][ T5886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  498.869850][   T30] audit: type=1400 audit(1746879184.637:827): avc:  denied  { append } for  pid=16522 comm="syz.5.1265" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  498.882510][ T5864] usb 4-1: USB disconnect, device number 101
[  498.958747][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  499.048651][ T5864] cp210x 4-1:0.0: device disconnected
[  499.367784][   T30] audit: type=1400 audit(1746879185.007:828): avc:  denied  { relabelfrom } for  pid=16517 comm="syz.0.1264" name="" dev="pipefs" ino=42490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  499.429982][   T91] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  499.471176][   T30] audit: type=1400 audit(1746879185.247:829): avc:  denied  { write } for  pid=16551 comm="syz.4.1267" lport=43869 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  499.473204][T16552] netlink: 'syz.4.1267': attribute type 13 has an invalid length.
[  499.522296][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'.
[  499.629406][   T91] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  499.681397][   T91] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.733321][   T91] usb 6-1: Product: syz
[  499.800144][ T5831] Bluetooth: hci2: command tx timeout
[  499.801170][   T91] usb 6-1: Manufacturer: syz
[  499.829943][ T5864] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  499.903042][T16120] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  499.918496][   T91] usb 6-1: SerialNumber: syz
[  499.935176][   T91] usb 6-1: config 0 descriptor??
[  499.955184][T16120] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  499.978916][   T91] gspca_main: sq905c-2.14.0 probing 2770:9052
[  499.989565][T16120] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  500.013002][T16120] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  500.032551][ T5864] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=fd.bf
[  500.044294][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.059889][ T5864] usb 4-1: Product: syz
[  500.068557][ T5864] usb 4-1: Manufacturer: syz
[  500.078192][ T5864] usb 4-1: SerialNumber: syz
[  500.089018][ T5864] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  500.103457][ T5864] dvb-usb: bulk message failed: -22 (3/0)
[  500.141322][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  500.169216][ T5864] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  500.203229][T16120] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.214854][ T5864] usb 4-1: media controller created
[  500.228112][T16120] 8021q: adding VLAN 0 to HW filter on device team0
[  500.252885][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.260003][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.298147][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  500.308546][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.315728][ T8004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.362164][ T5886] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  500.448426][ T5864] DVB: Unable to find symbol mt352_attach()
[  500.454834][ T5864] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  500.467952][ T5864] dvb-usb: bulk message failed: -22 (3/0)
[  500.496896][ T5864] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  500.750528][   T91] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  500.758000][   T91] sq905c 6-1:0.0: probe with driver sq905c failed with error -71
[  500.798873][   T91] usb 6-1: USB disconnect, device number 23
[  500.870914][T16607] lo speed is unknown, defaulting to 1000
[  500.884058][T16607] lo speed is unknown, defaulting to 1000
[  500.908028][T16607] lo speed is unknown, defaulting to 1000
[  500.965675][T16607] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  500.986209][T16607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  501.005261][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.008137][T16120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.011663][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  501.072655][T16120] veth0_vlan: entered promiscuous mode
[  501.098784][T16120] veth1_vlan: entered promiscuous mode
[  501.137506][T16607] lo speed is unknown, defaulting to 1000
[  501.145236][T16120] veth0_macvtap: entered promiscuous mode
[  501.156883][T16607] lo speed is unknown, defaulting to 1000
[  501.162046][T16120] veth1_macvtap: entered promiscuous mode
[  501.175095][T16607] lo speed is unknown, defaulting to 1000
[  501.193528][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.204917][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.214822][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.222506][   T30] audit: type=1400 audit(1746879186.997:830): avc:  denied  { read } for  pid=16630 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  501.225368][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.256748][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.267345][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.277286][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  501.287811][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.298507][T16120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.312212][T16607] lo speed is unknown, defaulting to 1000
[  501.324136][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.337047][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.347594][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.362705][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.373604][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.385111][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.395925][T16120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  501.406508][T16120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  501.417384][T16120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.443487][T16607] lo speed is unknown, defaulting to 1000
[  501.452952][T16605] smc: removing ib device syz!
[  501.465907][T16120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.478157][T16120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.487677][T16120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.499407][T16120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.886566][T16605] ------------[ cut here ]------------
[  501.892056][T16605] WARNING: CPU: 1 PID: 16605 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60
[  501.902812][T16605] Modules linked in:
[  501.907068][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.0.1274 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  501.919123][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  501.929196][T16605] RIP: 0010:rxe_pool_cleanup+0x41/0x60
[  501.934668][T16605] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 02 1a f9 e8 a0 02 1a f9 90 <0f> 0b 90 5b e9 96 02 1a f9 e8 51 7d 7f f9 eb da 66 66 2e 0f 1f 84
[  501.954285][T16605] RSP: 0018:ffffc9000bb6f1b0 EFLAGS: 00010246
[  501.960537][T16605] RAX: 0000000000080000 RBX: ffff88802aafd320 RCX: ffffc9000c6d1000
[  501.968485][T16605] RDX: 0000000000080000 RSI: ffffffff88a12040 RDI: ffff88802aafd3a0
[  501.976485][T16605] RBP: ffffffff889f8670 R08: 0000000000000005 R09: 0000000000000001
[  501.984460][T16605] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802aafc668
[  501.992462][T16605] R13: ffff88802aafbfe0 R14: ffff88802aafbfe0 R15: ffff88802aafd080
[  502.000434][T16605] FS:  00007f825692c6c0(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000
[  502.009528][T16605] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  502.016110][T16605] CR2: 00007fead136df98 CR3: 000000005911e000 CR4: 00000000003526f0
[  502.024072][T16605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  502.032035][T16605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  502.040040][T16605] Call Trace:
[  502.043296][T16605]  <TASK>
[  502.046204][T16605]  rxe_dealloc+0x25/0xc0
[  502.050445][T16605]  ib_dealloc_device+0x46/0x230
[  502.055281][T16605]  __ib_unregister_device+0x396/0x480
[  502.060651][T16605]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  502.066526][T16605]  ib_unregister_device_and_put+0x5a/0x80
[  502.072239][T16605]  nldev_dellink+0x21f/0x320
[  502.076805][T16605]  ? __pfx_nldev_dellink+0x10/0x10
[  502.081992][T16605]  ? cap_capable+0xb3/0x250
[  502.086473][T16605]  ? bpf_lsm_capable+0x9/0x10
[  502.091141][T16605]  ? security_capable+0x7e/0x260
[  502.096054][T16605]  ? ns_capable+0xd7/0x110
[  502.100473][T16605]  ? __pfx_nldev_dellink+0x10/0x10
[  502.105559][T16605]  rdma_nl_rcv_msg+0x387/0x6e0
[  502.110329][T16605]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  502.115593][T16605]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450
[  502.122030][T16605]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  502.129294][T16605]  ? netlink_deliver_tap+0x1ae/0xd30
[  502.134575][T16605]  netlink_unicast+0x53a/0x7f0
[  502.139315][T16605]  ? __pfx_netlink_unicast+0x10/0x10
[  502.144594][T16605]  netlink_sendmsg+0x8d1/0xdd0
[  502.149334][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.154617][T16605]  ____sys_sendmsg+0xa95/0xc70
[  502.159358][T16605]  ? copy_msghdr_from_user+0x10a/0x160
[  502.164808][T16605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.170107][T16605]  ___sys_sendmsg+0x134/0x1d0
[  502.174758][T16605]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.179954][T16605]  __sys_sendmsg+0x16d/0x220
[  502.184519][T16605]  ? __pfx___sys_sendmsg+0x10/0x10
[  502.189631][T16605]  ? __x64_sys_futex+0x1e0/0x4c0
[  502.194589][T16605]  ? rcu_is_watching+0x12/0xc0
[  502.199343][T16605]  do_syscall_64+0xcd/0x260
[  502.203899][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.209773][T16605] RIP: 0033:0x7f8255b8e969
[  502.214197][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.233821][T16605] RSP: 002b:00007f825692c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.242228][T16605] RAX: ffffffffffffffda RBX: 00007f8255db5fa0 RCX: 00007f8255b8e969
[  502.250193][T16605] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007
[  502.258148][T16605] RBP: 00007f8255c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  502.266108][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.274063][T16605] R13: 0000000000000000 R14: 00007f8255db5fa0 R15: 00007fff733fa8b8
[  502.282273][T16605]  </TASK>
[  502.285272][T16605] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  502.292609][T16605] CPU: 1 UID: 0 PID: 16605 Comm: syz.0.1274 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) 
[  502.304646][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  502.314682][T16605] Call Trace:
[  502.317933][T16605]  <TASK>
[  502.320839][T16605]  dump_stack_lvl+0x3d/0x1f0
[  502.325414][T16605]  panic+0x71c/0x800
[  502.329288][T16605]  ? __pfx_panic+0x10/0x10
[  502.333680][T16605]  ? show_trace_log_lvl+0x29b/0x3e0
[  502.338854][T16605]  ? rxe_pool_cleanup+0x41/0x60
[  502.343680][T16605]  check_panic_on_warn+0xab/0xb0
[  502.348593][T16605]  __warn+0xf6/0x3c0
[  502.352469][T16605]  ? rxe_pool_cleanup+0x41/0x60
[  502.357294][T16605]  report_bug+0x3c3/0x580
[  502.361615][T16605]  ? rxe_pool_cleanup+0x41/0x60
[  502.366437][T16605]  handle_bug+0x184/0x210
[  502.370743][T16605]  exc_invalid_op+0x17/0x50
[  502.375222][T16605]  asm_exc_invalid_op+0x1a/0x20
[  502.380045][T16605] RIP: 0010:rxe_pool_cleanup+0x41/0x60
[  502.385475][T16605] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 02 1a f9 e8 a0 02 1a f9 90 <0f> 0b 90 5b e9 96 02 1a f9 e8 51 7d 7f f9 eb da 66 66 2e 0f 1f 84
[  502.405071][T16605] RSP: 0018:ffffc9000bb6f1b0 EFLAGS: 00010246
[  502.411110][T16605] RAX: 0000000000080000 RBX: ffff88802aafd320 RCX: ffffc9000c6d1000
[  502.419068][T16605] RDX: 0000000000080000 RSI: ffffffff88a12040 RDI: ffff88802aafd3a0
[  502.427038][T16605] RBP: ffffffff889f8670 R08: 0000000000000005 R09: 0000000000000001
[  502.434990][T16605] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802aafc668
[  502.442943][T16605] R13: ffff88802aafbfe0 R14: ffff88802aafbfe0 R15: ffff88802aafd080
[  502.450907][T16605]  ? __pfx_rxe_dealloc+0x10/0x10
[  502.455824][T16605]  ? rxe_pool_cleanup+0x40/0x60
[  502.460653][T16605]  rxe_dealloc+0x25/0xc0
[  502.464868][T16605]  ib_dealloc_device+0x46/0x230
[  502.469700][T16605]  __ib_unregister_device+0x396/0x480
[  502.475049][T16605]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  502.480921][T16605]  ib_unregister_device_and_put+0x5a/0x80
[  502.486620][T16605]  nldev_dellink+0x21f/0x320
[  502.491185][T16605]  ? __pfx_nldev_dellink+0x10/0x10
[  502.496305][T16605]  ? cap_capable+0xb3/0x250
[  502.500785][T16605]  ? bpf_lsm_capable+0x9/0x10
[  502.505431][T16605]  ? security_capable+0x7e/0x260
[  502.510343][T16605]  ? ns_capable+0xd7/0x110
[  502.514743][T16605]  ? __pfx_nldev_dellink+0x10/0x10
[  502.519832][T16605]  rdma_nl_rcv_msg+0x387/0x6e0
[  502.524573][T16605]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[  502.529843][T16605]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450
[  502.536232][T16605]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[  502.543329][T16605]  ? netlink_deliver_tap+0x1ae/0xd30
[  502.548593][T16605]  netlink_unicast+0x53a/0x7f0
[  502.553592][T16605]  ? __pfx_netlink_unicast+0x10/0x10
[  502.558852][T16605]  netlink_sendmsg+0x8d1/0xdd0
[  502.563593][T16605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  502.568860][T16605]  ____sys_sendmsg+0xa95/0xc70
[  502.573600][T16605]  ? copy_msghdr_from_user+0x10a/0x160
[  502.579031][T16605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.584370][T16605]  ___sys_sendmsg+0x134/0x1d0
[  502.589030][T16605]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.594216][T16605]  __sys_sendmsg+0x16d/0x220
[  502.598787][T16605]  ? __pfx___sys_sendmsg+0x10/0x10
[  502.603879][T16605]  ? __x64_sys_futex+0x1e0/0x4c0
[  502.608806][T16605]  ? rcu_is_watching+0x12/0xc0
[  502.613550][T16605]  do_syscall_64+0xcd/0x260
[  502.618045][T16605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.623918][T16605] RIP: 0033:0x7f8255b8e969
[  502.628567][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.648234][T16605] RSP: 002b:00007f825692c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.656626][T16605] RAX: ffffffffffffffda RBX: 00007f8255db5fa0 RCX: 00007f8255b8e969
[  502.664571][T16605] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007
[  502.672513][T16605] RBP: 00007f8255c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  502.680457][T16605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  502.688398][T16605] R13: 0000000000000000 R14: 00007f8255db5fa0 R15: 00007fff733fa8b8
[  502.696368][T16605]  </TASK>
[  502.699562][T16605] Kernel Offset: disabled
[  502.703863][T16605] Rebooting in 86400 seconds..