last executing test programs:

2m40.034017566s ago: executing program 4 (id=472):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
r2 = epoll_create(0x20)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
clock_gettime(0x0, 0x0)

2m38.438024117s ago: executing program 4 (id=476):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r6=>0x0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r5, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
io_uring_enter(r5, 0x54, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18)

2m36.711384046s ago: executing program 4 (id=481):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000180)={@any, 0xd})
syz_open_dev$midi(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$vbi(0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c040090400000103000000092109000001228c0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9", 0x1e, 0xfffffffffffffffe)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x4e, "9b1ad269e3a6d2603949eb444658d9e6029c646d2c25dd36c46313120533746836e415dc499cd45c15cb4f10cc42a97929ae0f4765cd7d3490bf528fe0df9b63f9d18cd4ef937e332deda2551c60d4514aaaa7ba059d41936779301191d66cb6559c87eb0993eba8a926634e632944c934920d1786557bf4859d9a826951b612"})
fcntl$lock(r4, 0x25, &(0x7f00000000c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x1, 0xa124, 0x7ffffffd})

2m33.411053544s ago: executing program 4 (id=489):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc8f, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier')
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00380717a9320a7591c5000000"], 0x0}, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2m28.716435587s ago: executing program 4 (id=506):
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$dmmidi(0x0, 0x2, 0x8901)
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
r2 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r2, 0x0)
read(r2, &(0x7f0000000000)=""/269, 0xfffffdef)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1})
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004fa31a22f84815cb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r6, 0x0, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x72, 0x0)
getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0)

2m27.664045181s ago: executing program 4 (id=509):
r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x22, 0x2, 0x1)
socket$inet6(0xa, 0x3, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x18, 0x0)
fanotify_mark(r4, 0x1, 0x23, r3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x20000)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x280080, 0x0)
r6 = syz_open_dev$media(&(0x7f00000000c0), 0x102, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r10)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582)

2m12.086493785s ago: executing program 32 (id=509):
r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket(0x22, 0x2, 0x1)
socket$inet6(0xa, 0x3, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x18, 0x0)
fanotify_mark(r4, 0x1, 0x23, r3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x20000)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x280080, 0x0)
r6 = syz_open_dev$media(&(0x7f00000000c0), 0x102, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r10)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582)

1m43.34208107s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

1m30.396025302s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

1m13.798613108s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

56.103141554s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

39.339423292s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

19.592390036s ago: executing program 5 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r7=>0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r6, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

12.747271346s ago: executing program 1 (id=847):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_open_dev$usbmon(&(0x7f00000001c0), 0x1, 0x2040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="1e00000080000000030000000000010004a00200", @ANYRES32, @ANYBLOB="090000f3aa803787ca5a00000100000000dfffff0600000000000068403d78a6f0636cec0cf4529509cb8675a8f5c81839eaf4fa0f31559ab170c219ee809565a0cef8a00dbbed2226e79fd52623be58f4d69a21eb489d12acc3664f95a93b3bf28156c85c50be16b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000020000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x13, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x68}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}]}, 0x0, 0x10, 0x96, &(0x7f00000023c0)=""/150, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002540)={0x4, 0x8, 0x40, 0xffff7aad}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000002740)=[{0x2, 0x4, 0x5, 0xa}], 0x10, 0x7, @void, @value}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4300)
socket$kcm(0x21, 0x2, 0xa)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000300)={0x17, 0x1})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

11.110124422s ago: executing program 1 (id=849):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x78, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x78}}, 0x4000800)
getresgid(0x0, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000500))
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x2200000, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67726f75705f69643d5e7623cf42f66a3d082aab0da7dcc9dbbf9131b83e52713f26b9cd59558cb20dd98ce4f735cab51272a6740daf3ef472b50a2edf49c6a45e283a407908a9dabf440f82e397d3ba33f11360bf81135600ac04be2b6b158a2c941d4891341d90b0299795e40ec5fe70cb8f4b0f9ae7ac37fdcf5fd44bf1ce6a2d18317fe63fbe6eec020e0381ceae9d64a3eeeb019c74d925422139d7584d931c319c6c7daa5e63b81dc1b46389f75cfdf65940f3", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000010000,max_read=0xfffffffffffffffd,allow_other,allow_other,default_pe'])
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000000)='ocfs2\x00', 0x1020828, &(0x7f0000002440)='\x8b-\x8f\xc2M\xea\xfal\xb6\xda\xb3Z\xbeX\xf4\xcf\xe4\x83\xdd\xbd\xa6\xddf\xa0f|\x1aZ\xb6p\xe2')
chdir(&(0x7f0000000080)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000580)=0xe)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)

10.369975832s ago: executing program 3 (id=851):
syz_socket_connect_nvme_tcp()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$EVIOCGSND(r2, 0x8040451a, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r7, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r8)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
close(0xffffffffffffffff)

9.788585038s ago: executing program 1 (id=852):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001a0001000000000000000000810000000000000005000000140002"], 0x30}}, 0x0)
pread64(r0, &(0x7f0000000040)=""/11, 0xb, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x53)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x9, 0x8000, 0x0, 0x0, 0x10, 0x0, {0x1}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0)
syz_usb_connect$hid(0x2, 0x4a, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x8000801, 0x1}, 0x8)
close(r6)
io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

7.983753266s ago: executing program 0 (id=856):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
read$FUSE(r4, 0x0, 0x0)
clock_gettime(0x0, 0x0)

7.805768108s ago: executing program 3 (id=857):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = eventfd2(0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = dup3(r2, r1, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000003c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'})

6.650129703s ago: executing program 3 (id=858):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

6.640921044s ago: executing program 0 (id=859):
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r6, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="0763617331d49b7f7363616353652c005fd945ab"])
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r7, 0x75e7f000)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000740)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4d}}, 0x20)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

6.505340718s ago: executing program 3 (id=861):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc8f, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier')
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00380717a9320a7591c5000000"], 0x0}, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)

5.603417976s ago: executing program 0 (id=862):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x3a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e)
r2 = getpid()
syz_open_procfs(r2, &(0x7f0000000040)='net/fib_triestat\x00')
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)

5.49751665s ago: executing program 2 (id=863):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x78, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x78}}, 0x4000800)
getresgid(0x0, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000500))
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x2200000, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67726f75705f69643d5e7623cf42f66a3d082aab0da7dcc9dbbf9131b83e52713f26b9cd59558cb20dd98ce4f735cab51272a6740daf3ef472b50a2edf49c6a45e283a407908a9dabf440f82e397d3ba33f11360bf81135600ac04be2b6b158a2c941d4891341d90b0299795e40ec5fe70cb8f4b0f9ae7ac37fdcf5fd44bf1ce6a2d18317fe63fbe6eec020e0381ceae9d64a3eeeb019c74d925422139d7584d931c319c6c7daa5e63b81dc1b46389f75cfdf65940f3", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000010000,max_read=0xfffffffffffffffd,allow_other,allow_other,default_pe'])
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000000)='ocfs2\x00', 0x1020828, &(0x7f0000002440)='\x8b-\x8f\xc2M\xea\xfal\xb6\xda\xb3Z\xbeX\xf4\xcf\xe4\x83\xdd\xbd\xa6\xddf\xa0f|\x1aZ\xb6p\xe2')
chdir(&(0x7f0000000080)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000580)=0xe)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)

5.306562341s ago: executing program 2 (id=864):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
io_uring_enter(r6, 0x54, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

5.157843665s ago: executing program 1 (id=865):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_emit_vhci(0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$bind(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='./file0\x00', &(0x7f0000001580), 0x4000, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
userfaultfd(0x80001)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe})
syz_emit_ethernet(0x46, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x4, 0x1340)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0)

4.220065236s ago: executing program 2 (id=866):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r5=>0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r4, 0xffffffffffffffff, 0xfffffffffffffab2, 0x8007, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_enter(r4, 0x54, 0x0, 0x0, 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

4.095472283s ago: executing program 0 (id=867):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x110e, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x2, 0x1, 0x1, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94)

4.075194645s ago: executing program 1 (id=868):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_open_dev$usbmon(&(0x7f00000001c0), 0x1, 0x2040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="1e00000080000000030000000000010004a00200", @ANYRES32, @ANYBLOB="090000f3aa803787ca5a00000100000000dfffff0600000000000068403d78a6f0636cec0cf4529509cb8675a8f5c81839eaf4fa0f31559ab170c219ee809565a0cef8a00dbbed2226e79fd52623be58f4d69a21eb489d12acc3664f95a93b3bf28156c85c50be16b1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000020000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002780)={0x6, 0x13, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x68}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}]}, 0x0, 0x10, 0x96, &(0x7f00000023c0)=""/150, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002540)={0x4, 0x8, 0x40, 0xffff7aad}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000002740)=[{0x2, 0x4, 0x5, 0xa}], 0x10, 0x7, @void, @value}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4300)
socket$kcm(0x21, 0x2, 0xa)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000300)={0x17, 0x1})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

2.639008767s ago: executing program 2 (id=869):
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000200))
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x15}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x0)
setresuid(0x0, r4, 0x0)
fchown(r3, r4, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10)

2.282211685s ago: executing program 3 (id=870):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
read$FUSE(r4, 0x0, 0x0)
clock_gettime(0x0, 0x0)

2.006388208s ago: executing program 1 (id=871):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0x24)
prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0)
r1 = gettid()
tkill(r1, 0x7)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000002ff7120c40911001cb00102030109022400010004100009047e100226d5180809050602ff0300000009058202080000000075d8d5772e1efe46f969d3ce9abae456b71eae618c8ab8442d4ba0b8faf2a4dec811792a68c35ecd5549cf20d8944194bcdbb445544b672aeeb9c009bb5642a44fd2e66d0b284d9cc8faaaab0f9d49"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB='@!\f\x00\x00\x00\f!'], 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf000100000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.904261762s ago: executing program 0 (id=872):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x78, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x78}}, 0x4000800)
getresgid(0x0, &(0x7f0000000480)=<r4=>0x0, &(0x7f0000000500))
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x2200000, &(0x7f0000002240)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67726f75705f69643d5e7623cf42f66a3d082aab0da7dcc9dbbf9131b83e52713f26b9cd59558cb20dd98ce4f735cab51272a6740daf3ef472b50a2edf49c6a45e283a407908a9dabf440f82e397d3ba33f11360bf81135600ac04be2b6b158a2c941d4891341d90b0299795e40ec5fe70cb8f4b0f9ae7ac37fdcf5fd44bf1ce6a2d18317fe63fbe6eec020e0381ceae9d64a3eeeb019c74d925422139d7584d", @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000010000,max_read=0xfffffffffffffffd,allow_other,allow_other,default_permissions,fscontext=sysadm_u,\x00'])
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000000)='ocfs2\x00', 0x1020828, &(0x7f0000002440)='\x8b-\x8f\xc2M\xea\xfal\xb6\xda\xb3Z\xbeX\xf4\xcf\xe4\x83\xdd\xbd\xa6\xddf\xa0f|\x1aZ\xb6p\xe2')
chdir(&(0x7f0000000080)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000580)=0xe)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f)

1.428608629s ago: executing program 2 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x39a, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xe2, 0x4, 0x2}], "", ['\x00']}, 0x178)
fanotify_init(0x200, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="070000000400000020000000"], 0x50)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000019c0)={r5, 0x58, &(0x7f0000000200)}, 0x10)

326.397886ms ago: executing program 3 (id=874):
syz_socket_connect_nvme_tcp()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$EVIOCGSND(r2, 0x8040451a, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r7, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r8)
listen(0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
close(0xffffffffffffffff)

134.110053ms ago: executing program 0 (id=875):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x78, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x78}}, 0x4000800)
getresgid(0x0, &(0x7f0000000480), &(0x7f0000000500))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='\x00', &(0x7f0000000000)='ocfs2\x00', 0x1020828, &(0x7f0000002440)='\x8b-\x8f\xc2M\xea\xfal\xb6\xda\xb3Z\xbeX\xf4\xcf\xe4\x83\xdd\xbd\xa6\xddf\xa0f|\x1aZ\xb6p\xe2')
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000040)='.\x00', 0x418601, 0x8)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)

0s ago: executing program 2 (id=876):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)={0x65, 0x4, 0x24, 0x4, "ebea6d91"}, 0x24, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x8000, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
io_uring_enter(r6, 0x54, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='contention_end\x00', r5}, 0x18)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {0x0, 0x2}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @tick=0x1af8, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70)

kernel console output (not intermixed with test programs):

-71
[  270.013526][ T5866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  270.033231][ T5866] usb 2-1: USB disconnect, device number 6
[  270.042692][ T7861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  270.216652][ T7875] syz.3.473 (7875): drop_caches: 2
[  270.420351][ T7864] fuse: Unknown parameter 'group_i00000000000000000000'
[  272.549862][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  272.555860][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  272.606804][    T9] usb 3-1: USB disconnect, device number 4
[  272.959794][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  273.072624][ T7903] dlm: no local IP address has been set
[  273.078220][ T7903] dlm: cannot start dlm midcomms -107
[  273.479769][   T10] usb 5-1: Using ep0 maxpacket: 16
[  273.511027][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.535813][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.915660][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  273.926211][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.941882][   T10] usb 5-1: config 0 descriptor??
[  274.081012][ T7918] fuse: Unknown parameter 'group_i00000000000000000000'
[  274.131528][ T7919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  274.159849][ T5866] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  274.339812][ T5866] usb 1-1: Using ep0 maxpacket: 16
[  274.346556][ T5866] usb 1-1: config 8 has an invalid interface number: 145 but max is 0
[  274.364359][   T10] kye 0003:0458:5016.0003: control desc unexpectedly large
[  274.373601][ T5866] usb 1-1: config 8 has no interface number 0
[  274.380133][   T10] kye 0003:0458:5016.0003: control desc unexpectedly large
[  274.388468][ T5866] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  274.406640][   T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0003/input/input5
[  274.418141][ T5866] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  274.432495][ T5866] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  274.443741][   T30] audit: type=1400 audit(1748772309.499:580): avc:  denied  { read } for  pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.449783][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  274.467742][ T5866] usb 1-1: config 8 interface 145 has no altsetting 0
[  274.481236][   T30] audit: type=1400 audit(1748772309.499:581): avc:  denied  { open } for  pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  274.506896][ T5866] usb 1-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  274.516128][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.525304][ T5866] usb 1-1: Product: syz
[  274.710128][ T5811] usb 2-1: Using ep0 maxpacket: 32
[  274.721813][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short
[  274.746161][ T5811] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  275.527704][   T30] audit: type=1400 audit(1748772309.889:582): avc:  denied  { ioctl } for  pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2858 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  275.552596][    C1] vkms_vblank_simulate: vblank timer overrun
[  275.588567][ T5811] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  275.677525][ T5866] usb 1-1: Manufacturer: syz
[  275.682204][ T5866] usb 1-1: SerialNumber: syz
[  275.689901][   T10] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0
[  275.694948][ T5811] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  275.807916][ T5811] usb 2-1: config 128 has no interface number 0
[  275.848236][ T5811] usb 2-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  275.865520][ T7927] fuse: Unknown parameter '0x0000000000000003'
[  275.878991][ T5862] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  275.907646][ T5811] usb 2-1: config 128 interface 127 has no altsetting 0
[  275.920796][ T7927] gfs2: Unknown parameter 'barrier'
[  275.928305][ T5811] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  275.946720][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.954781][ T5811] usb 2-1: Product: syz
[  275.967630][ T5811] usb 2-1: Manufacturer: syz
[  275.990266][ T5811] usb 2-1: SerialNumber: syz
[  276.007198][ T5866] usb 1-1: USB disconnect, device number 6
[  276.249860][ T5862] usb 5-1: device descriptor read/64, error -71
[  276.251682][   T30] audit: type=1400 audit(1748772311.309:583): avc:  denied  { read } for  pid=7920 comm="syz.1.487" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  276.291210][   T30] audit: type=1400 audit(1748772311.309:584): avc:  denied  { open } for  pid=7920 comm="syz.1.487" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  276.376116][ T7937] FAULT_INJECTION: forcing a failure.
[  276.376116][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  276.389268][ T7937] CPU: 1 UID: 0 PID: 7937 Comm: syz.3.492 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  276.389285][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.389291][ T7937] Call Trace:
[  276.389295][ T7937]  <TASK>
[  276.389299][ T7937]  dump_stack_lvl+0x16c/0x1f0
[  276.389317][ T7937]  should_fail_ex+0x512/0x640
[  276.389336][ T7937]  _copy_from_iter+0x29f/0x16f0
[  276.389358][ T7937]  ? __alloc_skb+0x200/0x380
[  276.389372][ T7937]  ? __pfx__copy_from_iter+0x10/0x10
[  276.389390][ T7937]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  276.389412][ T7937]  netlink_sendmsg+0x829/0xdd0
[  276.389432][ T7937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.389454][ T7937]  ____sys_sendmsg+0xa98/0xc70
[  276.389472][ T7937]  ? copy_msghdr_from_user+0x10a/0x160
[  276.389486][ T7937]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.389521][ T7937]  ___sys_sendmsg+0x134/0x1d0
[  276.389543][ T7937]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.389563][ T7937]  ? __lock_acquire+0x622/0x1c90
[  276.389597][ T7937]  __sys_sendmsg+0x16d/0x220
[  276.389611][ T7937]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.389635][ T7937]  do_syscall_64+0xcd/0x4c0
[  276.389651][ T7937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.389662][ T7937] RIP: 0033:0x7f262978e969
[  276.389671][ T7937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.389682][ T7937] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.389692][ T7937] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  276.389700][ T7937] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  276.389710][ T7937] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  276.389721][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.389730][ T7937] R13: 0000000000000000 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  276.389752][ T7937]  </TASK>
[  276.450057][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  276.452067][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.595891][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.601857][    C1] hrtimer: interrupt took 212095082 ns
[  276.688928][ T7940] FAULT_INJECTION: forcing a failure.
[  276.688928][ T7940] name failslab, interval 1, probability 0, space 0, times 0
[  276.701718][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.3.493 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  276.701741][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.701751][ T7940] Call Trace:
[  276.701755][ T7940]  <TASK>
[  276.701760][ T7940]  dump_stack_lvl+0x16c/0x1f0
[  276.701779][ T7940]  should_fail_ex+0x512/0x640
[  276.701795][ T7940]  ? __kmalloc_noprof+0xbf/0x510
[  276.701809][ T7940]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  276.701823][ T7940]  should_failslab+0xc2/0x120
[  276.701837][ T7940]  __kmalloc_noprof+0xd2/0x510
[  276.701849][ T7940]  ? __pfx___mutex_lock+0x10/0x10
[  276.701872][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.701873][ T7940]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  276.701901][ T7940]  genl_start+0x18f/0x980
[  276.701920][ T7940]  __netlink_dump_start+0x60b/0x990
[  276.701947][ T7940]  genl_family_rcv_msg_dumpit+0x1e2/0x2e0
[  276.701965][ T7940]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  276.701988][ T7940]  ? __pfx_genl_get_cmd+0x10/0x10
[  276.702002][ T7940]  ? __pfx_genl_start+0x10/0x10
[  276.702015][ T7940]  ? __pfx_genl_dumpit+0x10/0x10
[  276.702029][ T7940]  ? __pfx_genl_done+0x10/0x10
[  276.702048][ T7940]  ? __radix_tree_lookup+0x21f/0x2c0
[  276.702070][ T7940]  genl_rcv_msg+0x46e/0x800
[  276.702089][ T7940]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.702105][ T7940]  ? __pfx_ethnl_default_start+0x10/0x10
[  276.702124][ T7940]  ? __pfx_ethnl_default_dumpit+0x10/0x10
[  276.702143][ T7940]  ? __pfx_ethnl_default_done+0x10/0x10
[  276.702171][ T7940]  netlink_rcv_skb+0x155/0x420
[  276.702194][ T7940]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.702211][ T7940]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.702243][ T7940]  ? netlink_deliver_tap+0x1ae/0xd30
[  276.702269][ T7940]  genl_rcv+0x28/0x40
[  276.702282][ T7940]  netlink_unicast+0x53a/0x7f0
[  276.702308][ T7940]  ? __pfx_netlink_unicast+0x10/0x10
[  276.702337][ T7940]  netlink_sendmsg+0x8d1/0xdd0
[  276.702364][ T7940]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.702396][ T7940]  ____sys_sendmsg+0xa98/0xc70
[  276.702420][ T7940]  ? copy_msghdr_from_user+0x10a/0x160
[  276.702439][ T7940]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.702473][ T7940]  ___sys_sendmsg+0x134/0x1d0
[  276.702498][ T7940]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.702515][ T7940]  ? __lock_acquire+0x622/0x1c90
[  276.702570][ T7940]  __sys_sendmsg+0x16d/0x220
[  276.702590][ T7940]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.702625][ T7940]  do_syscall_64+0xcd/0x4c0
[  276.702647][ T7940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.702662][ T7940] RIP: 0033:0x7f262978e969
[  276.702675][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.702689][ T7940] RSP: 002b:00007f262a677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.702704][ T7940] RAX: ffffffffffffffda RBX: 00007f26299b6080 RCX: 00007f262978e969
[  276.702714][ T7940] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  276.702723][ T7940] RBP: 00007f262a677090 R08: 0000000000000000 R09: 0000000000000000
[  276.702732][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.702741][ T7940] R13: 0000000000000000 R14: 00007f26299b6080 R15: 00007fff43ecbef8
[  276.702763][ T7940]  </TASK>
[  276.859852][    T9] usb 3-1: Using ep0 maxpacket: 8
[  276.860373][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.963395][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  276.969092][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.971024][ T5862] usb 5-1: reset high-speed USB device number 12 using dummy_hcd
[  277.058816][ T5862] usb 5-1: device reset changed ep0 maxpacket size!
[  277.059196][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.068222][ T5861] usb 5-1: USB disconnect, device number 12
[  277.079745][    T9] usb 3-1: Product: syz
[  277.085396][    T9] usb 3-1: Manufacturer: syz
[  277.330517][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  277.424677][    T9] usb 3-1: SerialNumber: syz
[  277.453108][    T9] usb 3-1: config 0 descriptor??
[  277.473985][ T7944] FAULT_INJECTION: forcing a failure.
[  277.473985][ T7944] name failslab, interval 1, probability 0, space 0, times 0
[  277.520093][ T5861] usb 5-1: Using ep0 maxpacket: 32
[  277.810036][ T7944] CPU: 0 UID: 0 PID: 7944 Comm: syz.3.495 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  277.810063][ T7944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  277.810073][ T7944] Call Trace:
[  277.810079][ T7944]  <TASK>
[  277.810086][ T7944]  dump_stack_lvl+0x16c/0x1f0
[  277.810113][ T7944]  should_fail_ex+0x512/0x640
[  277.810136][ T7944]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  277.810158][ T7944]  should_failslab+0xc2/0x120
[  277.810180][ T7944]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  277.810199][ T7944]  ? __alloc_skb+0x2b2/0x380
[  277.810224][ T7944]  __alloc_skb+0x2b2/0x380
[  277.810249][ T7944]  ? __pfx___alloc_skb+0x10/0x10
[  277.810269][ T7944]  ? genl_rcv_msg+0x4bb/0x800
[  277.810294][ T7944]  netlink_ack+0x15d/0xb80
[  277.810320][ T7944]  ? __lock_acquire+0x622/0x1c90
[  277.810346][ T7944]  netlink_rcv_skb+0x332/0x420
[  277.810371][ T7944]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.810389][ T7944]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.810423][ T7944]  ? netlink_deliver_tap+0x1ae/0xd30
[  277.810446][ T7944]  ? is_vmalloc_addr+0x86/0xa0
[  277.810465][ T7944]  genl_rcv+0x28/0x40
[  277.810481][ T7944]  netlink_unicast+0x53a/0x7f0
[  277.810508][ T7944]  ? __pfx_netlink_unicast+0x10/0x10
[  277.810538][ T7944]  netlink_sendmsg+0x8d1/0xdd0
[  277.810565][ T7944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.810598][ T7944]  ____sys_sendmsg+0xa98/0xc70
[  277.810623][ T7944]  ? copy_msghdr_from_user+0x10a/0x160
[  277.810644][ T7944]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.810680][ T7944]  ___sys_sendmsg+0x134/0x1d0
[  277.810702][ T7944]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.810720][ T7944]  ? __lock_acquire+0x622/0x1c90
[  277.810771][ T7944]  __sys_sendmsg+0x16d/0x220
[  277.810792][ T7944]  ? __pfx___sys_sendmsg+0x10/0x10
[  277.810831][ T7944]  do_syscall_64+0xcd/0x4c0
[  277.810856][ T7944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.810874][ T7944] RIP: 0033:0x7f262978e969
[  277.810887][ T7944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.810904][ T7944] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.810922][ T7944] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  277.810933][ T7944] RDX: 0000000020044040 RSI: 00002000000000c0 RDI: 0000000000000004
[  277.810944][ T7944] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  277.810954][ T7944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.810964][ T7944] R13: 0000000000000000 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  277.810988][ T7944]  </TASK>
[  277.814227][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  277.932655][ T5811] usb 2-1: USB disconnect, device number 7
[  278.138430][   T30] audit: type=1400 audit(2000000001.400:585): avc:  denied  { setopt } for  pid=7950 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  278.175518][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  278.193142][    T9] usb 3-1: USB disconnect, device number 5
[  278.202601][ T5861] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  278.254481][ T5861] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.265179][ T7362] udevd[7362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.287363][ T5861] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  278.303651][ T7961] fuse: Unknown parameter 'group_id00000000000000000000'
[  278.310961][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[  278.317590][ T5861] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  278.377619][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.387909][ T5861] usb 5-1: config 0 descriptor??
[  278.616423][ T7966] dlm: no local IP address has been set
[  278.622093][ T7966] dlm: cannot start dlm midcomms -107
[  279.233688][ T7967] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  279.533786][   T30] audit: type=1400 audit(2000000002.840:586): avc:  denied  { create } for  pid=7974 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  280.455881][ T5861] usbhid 5-1:0.0: can't add hid device: -71
[  280.461916][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  280.501812][ T5861] usb 5-1: USB disconnect, device number 13
[  280.852026][ T7984] overlayfs: failed to resolve './file1': -2
[  281.979922][ T5866] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  282.188930][   T30] audit: type=1400 audit(2000000005.040:587): avc:  denied  { create } for  pid=7994 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  282.220542][   T30] audit: type=1400 audit(2000000005.520:588): avc:  denied  { watch watch_reads } for  pid=7994 comm="syz.4.509" path="/98" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  282.283085][ T7996] nbd4: detected capacity change from 0 to 4294967296
[  282.638448][ T5866] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  283.615308][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.676252][ T5866] usb 4-1: config 0 descriptor??
[  283.691104][ T8003] nbd4: detected capacity change from 4294967296 to 2820
[  283.723368][ T5866] gspca_main: cpia1-2.14.0 probing 0813:0001
[  283.765671][   T50] block nbd4: Receive control failed (result -104)
[  283.885999][   T30] audit: type=1400 audit(2000000007.190:589): avc:  denied  { create } for  pid=8008 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  284.126831][ T5866] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  284.428477][ T8019] fuse: Unknown parameter 'group_id00000000000000000000'
[  284.521503][ T5866] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  285.005523][ T8028] fuse: Unknown parameter '0x0000000000000003'
[  285.015375][ T8028] gfs2: Unknown parameter 'barrier'
[  285.159802][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  285.279786][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  285.341678][ T5866] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  285.355640][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.364747][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  285.372993][ T5866] usb 1-1: SerialNumber: syz
[  285.439888][ T5864] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  285.447439][    T9] usb 3-1: Using ep0 maxpacket: 32
[  285.458330][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  285.469540][    T9] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.480602][    T9] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  285.494327][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  285.501021][    T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  285.510119][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.519861][    T9] usb 3-1: config 0 descriptor??
[  285.621719][ T5864] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  285.631799][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.642560][ T5864] usb 2-1: config 0 descriptor??
[  285.859201][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  285.868099][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'.
[  285.883257][ T5864] usb 2-1: USB disconnect, device number 8
[  285.986218][ T5861] usb 4-1: USB disconnect, device number 7
[  286.012671][ T5866] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  286.059550][   T30] audit: type=1400 audit(2000000009.360:590): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.085471][   T30] audit: type=1400 audit(2000000009.360:591): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.113720][   T30] audit: type=1400 audit(2000000009.360:592): avc:  denied  { search } for  pid=5479 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.135248][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.145449][   T30] audit: type=1400 audit(2000000009.360:593): avc:  denied  { read } for  pid=5479 comm="dhcpcd" name="n101" dev="tmpfs" ino=3924 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.167063][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.176270][   T30] audit: type=1400 audit(2000000009.360:594): avc:  denied  { open } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3924 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.199218][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.216874][   T30] audit: type=1400 audit(2000000009.360:595): avc:  denied  { getattr } for  pid=5479 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3924 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.244292][   T30] audit: type=1400 audit(2000000009.450:596): avc:  denied  { read open } for  pid=8039 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.269637][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.279283][   T30] audit: type=1400 audit(2000000009.450:597): avc:  denied  { getattr } for  pid=8039 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.304490][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.353436][   T30] audit: type=1400 audit(2000000009.660:598): avc:  denied  { add_name } for  pid=8038 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.378203][ T5861] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  286.404993][   T30] audit: type=1400 audit(2000000009.660:599): avc:  denied  { create } for  pid=8038 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.434797][   T43] usb 1-1: USB disconnect, device number 7
[  286.444728][   T43] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  286.603175][ T5861] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  286.624661][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.677476][ T5861] usb 4-1: config 0 descriptor??
[  286.718252][ T8053] dlm: no local IP address has been set
[  286.723888][ T8053] dlm: cannot start dlm midcomms -107
[  287.157151][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  287.180972][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  287.232430][    T9] usb 3-1: USB disconnect, device number 6
[  287.252813][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'.
[  287.287187][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'.
[  287.387422][ T5861] usb 4-1: USB disconnect, device number 8
[  289.976304][ T8091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.529'.
[  290.003882][ T8091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.529'.
[  290.302906][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  290.447904][ T8107] dlm: no local IP address has been set
[  290.453540][ T8107] dlm: cannot start dlm midcomms -107
[  290.920691][ T5811] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  290.963405][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.983736][ T5811] usb 2-1: config 0 descriptor??
[  291.576343][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[  291.929949][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[  292.244332][   T24] usb 2-1: USB disconnect, device number 9
[  292.301510][ T8122] FAULT_INJECTION: forcing a failure.
[  292.301510][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.325660][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.341409][ T8122] CPU: 0 UID: 0 PID: 8122 Comm: syz.2.535 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  292.341434][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  292.341445][ T8122] Call Trace:
[  292.341450][ T8122]  <TASK>
[  292.341457][ T8122]  dump_stack_lvl+0x16c/0x1f0
[  292.341484][ T8122]  should_fail_ex+0x512/0x640
[  292.341515][ T8122]  _copy_from_user+0x2e/0xd0
[  292.341542][ T8122]  kstrtouint_from_user+0xd6/0x1d0
[  292.341564][ T8122]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  292.341585][ T8122]  ? __lock_acquire+0xb8a/0x1c90
[  292.341621][ T8122]  proc_fail_nth_write+0x83/0x250
[  292.341642][ T8122]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  292.341685][ T8122]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  292.341704][ T8122]  vfs_write+0x29d/0x1150
[  292.341728][ T8122]  ? __pfx___mutex_lock+0x10/0x10
[  292.341753][ T8122]  ? __pfx_vfs_write+0x10/0x10
[  292.341780][ T8122]  ? __fget_files+0x20e/0x3c0
[  292.341807][ T8122]  ksys_write+0x12a/0x250
[  292.341826][ T8122]  ? __pfx_ksys_write+0x10/0x10
[  292.341852][ T8122]  do_syscall_64+0xcd/0x4c0
[  292.341877][ T8122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.341895][ T8122] RIP: 0033:0x7fdeedd8d41f
[  292.341909][ T8122] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  292.341926][ T8122] RSP: 002b:00007fdeeec64030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  292.341943][ T8122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdeedd8d41f
[  292.341955][ T8122] RDX: 0000000000000001 RSI: 00007fdeeec640a0 RDI: 0000000000000006
[  292.341966][ T8122] RBP: 00007fdeeec64090 R08: 0000000000000000 R09: 0000000000000000
[  292.341976][ T8122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  292.341987][ T8122] R13: 0000000000000001 R14: 00007fdeedfb6080 R15: 00007ffc7d3c7c28
[  292.342012][ T8122]  </TASK>
[  292.710000][ T8131] dlm: no local IP address has been set
[  292.715598][ T8131] dlm: cannot start dlm midcomms -107
[  295.491613][ T5866] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  295.591761][ T8164] netlink: 10 bytes leftover after parsing attributes in process `syz.1.546'.
[  295.671282][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short
[  295.680131][ T5866] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  295.688435][ T5866] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  295.699743][ T5866] usb 1-1: config 63 has no interface number 0
[  295.706001][ T5866] usb 1-1: config 63 interface 66 has no altsetting 0
[  295.725393][ T5866] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  295.745697][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.756654][ T5866] usb 1-1: Product: syz
[  295.761196][ T5866] usb 1-1: Manufacturer: syz
[  295.766062][ T5866] usb 1-1: SerialNumber: syz
[  295.962685][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  296.514832][ T5866] usb 1-1: Found UVC 0.07 device syz (174f:8a31)
[  296.521339][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  296.521353][   T30] audit: type=1400 audit(2000000019.810:622): avc:  denied  { bind } for  pid=8154 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  296.529537][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  296.559358][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.570634][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  296.582218][   T24] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.586951][ T5866] usb 1-1: No valid video chain found.
[  296.596858][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  296.614038][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.621069][ T5866] usb 1-1: USB disconnect, device number 8
[  296.622834][   T24] usb 2-1: Product: syz
[  297.039602][   T24] usb 2-1: Manufacturer: syz
[  297.044298][   T24] usb 2-1: SerialNumber: syz
[  297.170345][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  297.225426][ T8177] syz.2.549 (8177): drop_caches: 2
[  297.491353][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  297.509990][   T10] usb 4-1: config 0 has no interface number 0
[  297.527332][   T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  297.652767][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.670696][   T10] usb 4-1: Product: syz
[  297.841830][   T10] usb 4-1: Manufacturer: syz
[  297.846457][   T10] usb 4-1: SerialNumber: syz
[  297.853383][   T10] usb 4-1: config 0 descriptor??
[  298.443680][   T24] cdc_ncm 2-1:1.0: bind() failure
[  298.466320][   T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  298.481951][   T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  298.500022][   T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  298.506801][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.516976][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.525829][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.541211][   T24] usb 2-1: USB disconnect, device number 10
[  298.545103][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.560105][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.584853][   T30] audit: type=1400 audit(2000000021.890:623): avc:  denied  { mounton } for  pid=8194 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  298.614573][ T8194] Failed to initialize the IGMP autojoin socket (err -2)
[  298.946919][   T10] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  299.171341][   T24] usb 4-1: USB disconnect, device number 9
[  299.276164][ T8194] chnl_net:caif_netlink_parms(): no params data found
[  300.373352][   T30] audit: type=1400 audit(2000000023.660:624): avc:  denied  { bind } for  pid=8196 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  300.420035][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  300.613925][ T5821] Bluetooth: hci5: command tx timeout
[  300.669870][    T9] usb 2-1: Using ep0 maxpacket: 16
[  300.722049][    T9] usb 2-1: config 8 has an invalid interface number: 145 but max is 0
[  300.786874][    T9] usb 2-1: config 8 has no interface number 0
[  300.832195][    T9] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  300.900177][    T9] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  300.968603][    T9] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  301.032465][    T9] usb 2-1: config 8 interface 145 has no altsetting 0
[  301.080955][    T9] usb 2-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  301.120743][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.169041][    T9] usb 2-1: Product: syz
[  301.195107][    T9] usb 2-1: Manufacturer: syz
[  301.219970][    T9] usb 2-1: SerialNumber: syz
[  301.597840][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.625621][    T9] usb 2-1: USB disconnect, device number 11
[  301.668660][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.711656][ T8194] bridge_slave_0: entered allmulticast mode
[  301.727532][ T8194] bridge_slave_0: entered promiscuous mode
[  301.752444][   T30] audit: type=1400 audit(2000000025.060:625): avc:  denied  { read } for  pid=8247 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  301.777890][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.854022][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.873173][ T8194] bridge_slave_1: entered allmulticast mode
[  301.892388][ T8194] bridge_slave_1: entered promiscuous mode
[  302.444154][   T30] audit: type=1400 audit(2000000025.750:626): avc:  denied  { write } for  pid=8255 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  302.501523][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.741386][ T5821] Bluetooth: hci5: command tx timeout
[  302.806557][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.890583][ T8264] dlm: no local IP address has been set
[  302.896692][ T8264] dlm: cannot start dlm midcomms -107
[  303.245560][ T8265] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  303.609811][   T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  303.898681][ T8277] fuse: Unknown parameter 'fd0x0000000000000003'
[  304.716176][   T43] usb 1-1: Using ep0 maxpacket: 32
[  305.020900][ T5821] Bluetooth: hci5: command tx timeout
[  306.800807][ T8275] gfs2: Unknown parameter 'barrier'
[  306.947233][   T43] usb 1-1: device descriptor read/all, error -71
[  306.953406][ T8194] team0: Port device team_slave_0 added
[  307.027862][ T8194] team0: Port device team_slave_1 added
[  307.090258][ T5821] Bluetooth: hci5: command tx timeout
[  308.043283][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  308.070414][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  308.265590][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.293505][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.319410][    C1] vkms_vblank_simulate: vblank timer overrun
[  308.422121][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.500279][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  308.684420][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.695964][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.721841][    C1] vkms_vblank_simulate: vblank timer overrun
[  308.729678][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.812946][ T5861] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  308.836358][ T5861] usb 3-1: config 1 interface 0 has no altsetting 0
[  308.855089][ T5861] usb 3-1: New USB device found, idVendor=0306, idProduct=ff3f, bcdDevice= 0.40
[  308.864377][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.874962][ T5861] usb 3-1: Product: �
[  308.879177][ T5861] usb 3-1: Manufacturer: Ї
[  308.888617][ T5861] usb 3-1: SerialNumber: ⿢暭刴⋵頞擉陑ỹ먲埵猪몫�「�웭ӊ�謗ꘀꦔ䣷힠䱩꠾�䎠쇦歂�렲ᒔВ㰷ৈ湢饼첗羣ꙡ
[  308.899759][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  309.556887][ T5861] usbhid 3-1:1.0: can't add hid device: -71
[  309.599119][ T5861] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  309.695409][ T5861] usb 3-1: USB disconnect, device number 7
[  309.926915][ T8194] hsr_slave_0: entered promiscuous mode
[  309.932764][   T10] usb 1-1: Using ep0 maxpacket: 16
[  310.060622][ T8194] hsr_slave_1: entered promiscuous mode
[  310.068192][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.077587][ T8194] Cannot create hsr debugfs directory
[  310.098751][   T10] usb 1-1: config 8 has an invalid interface number: 145 but max is 0
[  310.114828][   T10] usb 1-1: config 8 has no interface number 0
[  310.123214][   T10] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  310.314533][   T30] audit: type=1400 audit(2000000033.490:627): avc:  denied  { create } for  pid=8322 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  310.353571][   T10] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  310.580466][   T10] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  310.617723][   T10] usb 1-1: config 8 interface 145 has no altsetting 0
[  310.631580][ T8330] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  310.973841][   T10] usb 1-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  310.992797][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.275214][   T10] usb 1-1: Product: syz
[  311.279404][   T10] usb 1-1: Manufacturer: syz
[  311.307149][   T10] usb 1-1: SerialNumber: syz
[  312.245934][ T8344] dlm: no local IP address has been set
[  312.251568][ T8344] dlm: cannot start dlm midcomms -107
[  312.504052][ T8334] syz.1.582 (8334): drop_caches: 2
[  312.655457][   T10] usb 1-1: USB disconnect, device number 11
[  312.705748][ T8348] gfs2: Unknown parameter 'barrier'
[  312.896352][   T30] audit: type=1400 audit(2000000036.200:628): avc:  denied  { append } for  pid=8347 comm="syz.3.586" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  313.000103][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  313.008767][   T30] audit: type=1400 audit(2000000036.300:629): avc:  denied  { rename } for  pid=8347 comm="syz.3.586" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  313.026544][ T8194] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  313.077059][ T8194] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  313.131685][ T8194] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  313.197058][ T8194] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  313.325961][   T24] usb 2-1: Using ep0 maxpacket: 32
[  313.356739][   T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  313.381025][ T8368] 9pnet_fd: p9_fd_create_tcp (8368): problem creating socket
[  313.400142][   T24] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.502240][ T8369] dlm: no local IP address has been set
[  313.507846][ T8369] dlm: cannot start dlm midcomms -107
[  313.855756][   T24] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  313.875883][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  313.882955][   T24] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  313.938718][ T8372] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  313.972891][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.101828][ T5977] block nbd4: Possible stuck request ffff888026be7000: control (read@0,4096B). Runtime 30 seconds
[  314.301631][   T24] usb 2-1: config 0 descriptor??
[  315.061365][ T8194] 8021q: adding VLAN 0 to HW filter on device team0
[  315.094362][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.101496][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.177497][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.184624][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.530965][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  316.553646][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  316.637262][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  316.645628][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  316.659573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  316.981190][   T24] usb 2-1: USB disconnect, device number 13
[  317.359822][   T10] usb 4-1: Using ep0 maxpacket: 16
[  317.424507][   T10] usb 4-1: config 8 has an invalid interface number: 145 but max is 0
[  317.450557][   T10] usb 4-1: config 8 has no interface number 0
[  317.474288][   T10] usb 4-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  317.497545][   T10] usb 4-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  317.528627][   T10] usb 4-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  317.564113][   T10] usb 4-1: config 8 interface 145 has no altsetting 0
[  317.786279][   T10] usb 4-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  317.829639][   T30] audit: type=1400 audit(2000000041.130:630): avc:  denied  { getopt } for  pid=8410 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  317.842579][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.856687][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'.
[  317.887821][   T10] usb 4-1: Product: syz
[  317.899818][   T10] usb 4-1: Manufacturer: syz
[  317.907443][   T10] usb 4-1: SerialNumber: syz
[  317.954861][ T8411] team0: Port device team_slave_0 removed
[  318.437294][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.452513][   T10] usb 4-1: USB disconnect, device number 10
[  318.667323][ T8428] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  320.666525][ T8445] gfs2: Unknown parameter 'barrier'
[  320.940217][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  321.035047][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'.
[  321.109443][ T8460] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  321.289759][    T9] usb 3-1: Using ep0 maxpacket: 32
[  321.306268][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  321.321235][    T9] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.334287][    T9] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  321.359848][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  321.366523][    T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  321.376200][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.384721][ T8459] 8021q: adding VLAN 0 to HW filter on device team1
[  321.407019][    T9] usb 3-1: config 0 descriptor??
[  321.488829][ T8194] veth0_vlan: entered promiscuous mode
[  322.360189][ T8194] veth1_vlan: entered promiscuous mode
[  322.680026][ T8194] veth0_macvtap: entered promiscuous mode
[  323.153229][ T8194] veth1_macvtap: entered promiscuous mode
[  323.446840][ T8473] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  323.468123][ T8479] fuse: Unknown parameter 'f$'
[  323.690858][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.849432][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  323.880411][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  323.883235][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.956379][    T9] usb 3-1: USB disconnect, device number 8
[  324.001112][ T8194] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  324.094217][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'.
[  324.154388][   T30] audit: type=1400 audit(2000000047.440:631): avc:  denied  { write } for  pid=8488 comm="syz.2.620" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  324.322980][ T8194] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  324.495898][   T30] audit: type=1400 audit(2000000047.450:632): avc:  denied  { ioctl } for  pid=8488 comm="syz.2.620" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  324.852071][ T8194] wireguard: wg0: Could not create IPv4 socket
[  324.893759][ T8194] wireguard: wg1: Could not create IPv4 socket
[  324.902661][ T8194] wireguard: wg2: Could not create IPv4 socket
[  325.827789][ T8502] dlm: no local IP address has been set
[  325.833909][ T8502] dlm: cannot start dlm midcomms -107
[  325.847629][ T8498] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[8498]
[  326.204574][ T8503] netlink: zone id is out of range
[  326.231331][ T8503] netlink: del zone limit has 4 unknown bytes
[  327.101554][ T8516] dlm: no local IP address has been set
[  327.107159][ T8516] dlm: cannot start dlm midcomms -107
[  327.282359][ T8517] dlm: no local IP address has been set
[  327.288892][ T8517] dlm: cannot start dlm midcomms -107
[  328.466409][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  328.476188][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  328.484651][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  328.493029][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  328.500876][ T8524] SELinux: security_context_str_to_sid (tser_u) failed with errno=-22
[  328.501647][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  328.510538][   T30] audit: type=1400 audit(2000000051.800:633): avc:  denied  { mounton } for  pid=8522 comm="syz.2.628" path="/146/file0" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  328.586892][ T8523] Failed to initialize the IGMP autojoin socket (err -2)
[  328.671236][   T30] audit: type=1400 audit(2000000051.800:634): avc:  denied  { mount } for  pid=8522 comm="syz.2.628" name="/" dev="hugetlbfs" ino=17213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  328.694202][   T30] audit: type=1400 audit(2000000051.870:635): avc:  denied  { setopt } for  pid=8522 comm="syz.2.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  328.713548][    C1] vkms_vblank_simulate: vblank timer overrun
[  328.847577][ T8529] gfs2: Unknown parameter 'barrier'
[  329.089856][ T5862] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  329.290107][ T5862] usb 3-1: Using ep0 maxpacket: 32
[  329.311304][ T5862] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  329.353109][ T5862] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.506479][ T5862] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  329.617250][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0
[  329.660810][ T5862] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  329.691364][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.721953][ T5862] usb 3-1: config 0 descriptor??
[  329.824633][ T8530] syz.3.630 (8530): drop_caches: 2
[  330.359762][   T43] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  330.485208][ T5862] usbhid 3-1:0.0: can't add hid device: -71
[  330.497146][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  330.535388][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.611630][   T50] Bluetooth: hci5: command tx timeout
[  330.693515][ T5862] usb 3-1: USB disconnect, device number 9
[  330.706511][   T43] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  330.727716][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.740113][   T43] usb 4-1: Product: syz
[  330.744331][   T43] usb 4-1: Manufacturer: syz
[  330.750032][   T43] usb 4-1: SerialNumber: syz
[  330.763502][   T43] usb 4-1: config 0 descriptor??
[  330.770547][   T43] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  330.792320][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  330.822545][   T43] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  330.878693][   T43] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  330.905065][   T43] usb 4-1: media controller created
[  330.914426][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  330.944283][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  330.957753][ T8558] FAULT_INJECTION: forcing a failure.
[  330.957753][ T8558] name failslab, interval 1, probability 0, space 0, times 0
[  330.986381][   T43] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  331.015468][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'.
[  331.017631][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.2.636 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  331.017654][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.017662][ T8558] Call Trace:
[  331.017673][ T8558]  <TASK>
[  331.017678][ T8558]  dump_stack_lvl+0x16c/0x1f0
[  331.017703][ T8558]  should_fail_ex+0x512/0x640
[  331.017724][ T8558]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  331.017744][ T8558]  should_failslab+0xc2/0x120
[  331.017764][ T8558]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  331.017781][ T8558]  ? getname_flags.part.0+0x4c/0x550
[  331.017809][ T8558]  getname_flags.part.0+0x4c/0x550
[  331.017833][ T8558]  getname_flags+0x93/0xf0
[  331.017850][ T8558]  do_sys_openat2+0xb8/0x1d0
[  331.017871][ T8558]  ? __pfx_do_sys_openat2+0x10/0x10
[  331.017894][ T8558]  ? __fget_files+0x20e/0x3c0
[  331.017916][ T8558]  __x64_sys_open+0x153/0x1e0
[  331.017937][ T8558]  ? __pfx___x64_sys_open+0x10/0x10
[  331.017963][ T8558]  ? rcu_is_watching+0x12/0xc0
[  331.017981][ T8558]  do_syscall_64+0xcd/0x4c0
[  331.018003][ T8558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.018018][ T8558] RIP: 0033:0x7fdeedd8e969
[  331.018031][ T8558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.018045][ T8558] RSP: 002b:00007fdeeec85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  331.018061][ T8558] RAX: ffffffffffffffda RBX: 00007fdeedfb5fa0 RCX: 00007fdeedd8e969
[  331.018071][ T8558] RDX: 0000000000000008 RSI: 0000000000418601 RDI: 0000200000000040
[  331.018081][ T8558] RBP: 00007fdeeec85090 R08: 0000000000000000 R09: 0000000000000000
[  331.018090][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.018099][ T8558] R13: 0000000000000000 R14: 00007fdeedfb5fa0 R15: 00007ffc7d3c7c28
[  331.018119][ T8558]  </TASK>
[  331.023221][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  331.024580][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  331.082391][   T43] dvb-usb: schedule remote query interval to 150 msecs.
[  331.109320][   T30] audit: type=1400 audit(2000000054.400:636): avc:  denied  { connect } for  pid=8561 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  331.128943][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  331.172524][   T30] audit: type=1326 audit(2000000054.400:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ecd98e969 code=0x0
[  331.202364][   T43] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  331.258892][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.633'.
[  331.288939][ T5862] dvb-usb: bulk message failed: -22 (1/0)
[  331.288997][ T5862] dvb-usb: error while querying for an remote control event.
[  331.427450][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'.
[  331.440228][ T5862] dvb-usb: bulk message failed: -22 (1/0)
[  331.446078][ T5862] dvb-usb: error while querying for an remote control event.
[  331.626717][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  331.663119][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  331.794593][   T24] dvb-usb: error while querying for an remote control event.
[  332.239872][ T5866] usb 1-1: Using ep0 maxpacket: 16
[  332.324696][ T5866] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  332.333228][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  332.359983][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  332.368490][ T5866] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  332.379754][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  332.389425][ T5866] usb 1-1: config 0 has no interface number 0
[  332.397658][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  332.409218][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  332.429908][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  332.435649][   T24] dvb-usb: error while querying for an remote control event.
[  332.485398][ T5866] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  332.496108][ T5866] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  332.514656][   T30] audit: type=1326 audit(2000000055.820:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.559133][ T5866] usb 1-1: config 0 interface 125 has no altsetting 0
[  332.581062][    T9] usb 4-1: USB disconnect, device number 11
[  332.622929][ T8523] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  332.630464][ T5866] usb 1-1: config 0 interface 125 has no altsetting 2
[  332.637937][   T30] audit: type=1326 audit(2000000055.820:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.664627][   T30] audit: type=1326 audit(2000000055.820:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.688473][ T5866] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  332.689913][   T50] Bluetooth: hci5: command tx timeout
[  332.698912][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.726460][   T30] audit: type=1326 audit(2000000055.820:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.749555][    C1] vkms_vblank_simulate: vblank timer overrun
[  332.760736][ T8523] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  332.767593][   T30] audit: type=1326 audit(2000000055.820:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.789670][    T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  332.791592][   T30] audit: type=1326 audit(2000000055.820:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.802254][ T5866] usb 1-1: Product: syz
[  332.906289][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  332.921971][   T30] audit: type=1326 audit(2000000055.820:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  332.945636][   T30] audit: type=1326 audit(2000000055.820:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0be78e969 code=0x7ffc0000
[  333.166228][ T5866] usb 1-1: Manufacturer: syz
[  333.209515][ T8586] 8021q: adding VLAN 0 to HW filter on device team1
[  333.227432][ T5866] usb 1-1: SerialNumber: syz
[  333.232936][ T8523] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  333.325544][ T8590] syz.1.642 (8590): drop_caches: 2
[  333.335075][ T5866] usb 1-1: config 0 descriptor??
[  333.398578][ T5866] usb 1-1: selecting invalid altsetting 2
[  333.445201][ T8523] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  333.809844][ T5811] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  334.010037][ T8612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  334.021563][ T8612] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  334.423205][ T5811] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  334.450149][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.493139][ T5811] usb 2-1: config 0 descriptor??
[  334.558802][ T5866] get_1284_register timeout
[  334.563558][    C0] usb 1-1: async_complete: urb error -104
[  334.569402][    C0] usb 1-1: async_complete: urb error -104
[  334.575187][ T5866] uss720 1-1:0.125: probe with driver uss720 failed with error -5
[  334.713207][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  334.722161][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  334.734412][ T5811] usb 2-1: USB disconnect, device number 14
[  334.770095][   T50] Bluetooth: hci5: command tx timeout
[  336.402864][ T5893] usb 1-1: USB disconnect, device number 12
[  336.438459][ T8523] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  336.515312][ T8523] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  336.896853][   T50] Bluetooth: hci5: command tx timeout
[  337.430291][ T8523] wireguard: wg0: Could not create IPv4 socket
[  337.438896][ T8523] wireguard: wg1: Could not create IPv4 socket
[  337.447132][ T8523] wireguard: wg2: Could not create IPv4 socket
[  337.691499][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  337.691533][   T30] audit: type=1326 audit(2000000060.950:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  337.927438][   T30] audit: type=1326 audit(2000000060.950:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.290394][   T30] audit: type=1326 audit(2000000060.950:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.373817][ T8667] overlayfs: missing 'lowerdir'
[  338.378752][   T30] audit: type=1326 audit(2000000060.950:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.481442][   T30] audit: type=1326 audit(2000000060.950:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.509363][   T30] audit: type=1326 audit(2000000060.950:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.635151][   T30] audit: type=1326 audit(2000000060.960:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.712335][   T30] audit: type=1326 audit(2000000060.960:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.771538][   T30] audit: type=1326 audit(2000000060.960:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.849204][   T30] audit: type=1326 audit(2000000060.960:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8651 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  338.949780][   T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  339.292564][ T8687] dlm: no local IP address has been set
[  339.298167][ T8687] dlm: cannot start dlm midcomms -107
[  339.751224][   T43] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  339.771662][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.820920][   T43] usb 2-1: config 0 descriptor??
[  340.054146][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[  340.093682][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[  340.155923][   T43] usb 2-1: USB disconnect, device number 15
[  340.744413][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  340.764196][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  340.772150][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  340.780404][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  340.789096][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  340.953493][ T8701] Failed to initialize the IGMP autojoin socket (err -2)
[  342.248449][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[  342.539290][ T8724] 8021q: adding VLAN 0 to HW filter on device team2
[  342.852075][   T50] Bluetooth: hci5: command tx timeout
[  343.027496][   T30] kauditd_printk_skb: 74 callbacks suppressed
[  343.027512][   T30] audit: type=1400 audit(2000000066.330:757): avc:  denied  { getopt } for  pid=8726 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  343.483382][ T8745] dlm: no local IP address has been set
[  343.488984][ T8745] dlm: cannot start dlm midcomms -107
[  343.809349][ T5811] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  343.992436][ T5811] usb 3-1: Using ep0 maxpacket: 32
[  344.021271][ T5811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x7 has invalid wMaxPacketSize 0
[  344.110918][ T5811] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 0
[  344.129256][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0
[  344.148880][ T5811] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  344.209280][ T5977] block nbd4: Possible stuck request ffff888026be7000: control (read@0,4096B). Runtime 60 seconds
[  344.271052][ T8749] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  344.282128][ T8749] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  344.394168][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.410328][ T5811] usb 3-1: Product: syz
[  344.414678][ T5811] usb 3-1: Manufacturer: syz
[  344.419335][ T5811] usb 3-1: SerialNumber: syz
[  344.438566][ T5811] usb 3-1: config 0 descriptor??
[  344.463551][ T5811] gs_usb 3-1:0.0: Required endpoints not found
[  344.620102][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  344.792229][    T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  344.805783][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.818577][    T9] usb 4-1: config 0 descriptor??
[  344.929796][   T50] Bluetooth: hci5: command tx timeout
[  345.080300][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  345.090040][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  345.123835][ T5811] usb 4-1: USB disconnect, device number 12
[  345.254517][ T8701] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  345.313475][ T8701] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  345.386102][ T8701] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  345.446288][ T8701] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  346.489839][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'.
[  346.680456][ T8779] 8021q: adding VLAN 0 to HW filter on device team3
[  347.019776][   T50] Bluetooth: hci5: command tx timeout
[  348.005683][ T8801] dlm: no local IP address has been set
[  348.011335][ T8801] dlm: cannot start dlm midcomms -107
[  348.447718][   T30] audit: type=1400 audit(2000000071.750:758): avc:  denied  { connect } for  pid=8806 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  348.793900][ T8701] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  348.869958][ T8701] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  348.890717][ T8701] wireguard: wg0: Could not create IPv4 socket
[  348.899342][ T8701] wireguard: wg1: Could not create IPv4 socket
[  348.958048][ T8701] wireguard: wg2: Could not create IPv4 socket
[  349.096614][   T50] Bluetooth: hci5: command tx timeout
[  349.450934][ T8840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  349.465041][ T8840] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  349.622295][ T5866] usb 3-1: USB disconnect, device number 10
[  350.181944][ T5893] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  350.994811][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short
[  351.676073][ T5893] usb 4-1: not running at top speed; connect to a high speed hub
[  351.690033][ T5893] usb 4-1: config 8 has an invalid interface number: 250 but max is 0
[  351.703395][ T5893] usb 4-1: config 8 has no interface number 0
[  351.709576][ T5893] usb 4-1: config 8 interface 250 has no altsetting 0
[  351.731340][ T5893] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b9.7d
[  351.757974][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.616190][ T5893] usb 4-1: Product: syz
[  353.643161][ T5893] usb 4-1: Manufacturer: syz
[  353.647777][ T5893] usb 4-1: SerialNumber: syz
[  353.704269][ T5893] usb 4-1: can't set config #8, error -71
[  353.712814][ T5893] usb 4-1: USB disconnect, device number 13
[  353.981880][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[  354.833276][ T8880] 8021q: adding VLAN 0 to HW filter on device team4
[  355.092735][   T30] audit: type=1326 audit(2000000078.390:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.170533][   T30] audit: type=1326 audit(2000000078.390:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.194070][   T30] audit: type=1326 audit(2000000078.390:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.218195][ T8892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.695'.
[  355.280456][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'.
[  355.335461][   T30] audit: type=1326 audit(2000000078.390:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.376977][ T8896] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  355.421563][ T8896] audit: out of memory in audit_log_start
[  355.459008][ T8890] hsr_slave_1 (unregistering): left promiscuous mode
[  355.466212][   T30] audit: type=1326 audit(2000000078.390:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.533203][   T30] audit: type=1326 audit(2000000078.390:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.619822][   T30] audit: type=1326 audit(2000000078.390:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.654343][   T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  355.668015][   T30] audit: type=1326 audit(2000000078.390:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeedd8e969 code=0x7ffc0000
[  355.903111][   T24] usb 2-1: too many configurations: 26, using maximum allowed: 8
[  355.937145][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  355.966428][   T24] usb 2-1: can't read configurations, error -61
[  356.371702][ T8918] FAULT_INJECTION: forcing a failure.
[  356.371702][ T8918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  356.530554][ T8918] CPU: 0 UID: 0 PID: 8918 Comm: syz.3.701 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  356.530581][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  356.530592][ T8918] Call Trace:
[  356.530598][ T8918]  <TASK>
[  356.530606][ T8918]  dump_stack_lvl+0x16c/0x1f0
[  356.530633][ T8918]  should_fail_ex+0x512/0x640
[  356.530663][ T8918]  _copy_from_iter+0x29f/0x16f0
[  356.530693][ T8918]  ? __alloc_skb+0x200/0x380
[  356.530716][ T8918]  ? __pfx__copy_from_iter+0x10/0x10
[  356.530744][ T8918]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  356.530779][ T8918]  netlink_sendmsg+0x829/0xdd0
[  356.530809][ T8918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.530845][ T8918]  ____sys_sendmsg+0xa98/0xc70
[  356.530872][ T8918]  ? copy_msghdr_from_user+0x10a/0x160
[  356.530894][ T8918]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.530932][ T8918]  ___sys_sendmsg+0x134/0x1d0
[  356.530956][ T8918]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.530975][ T8918]  ? __lock_acquire+0x622/0x1c90
[  356.531030][ T8918]  __sys_sendmsg+0x16d/0x220
[  356.531053][ T8918]  ? __pfx___sys_sendmsg+0x10/0x10
[  356.531095][ T8918]  do_syscall_64+0xcd/0x4c0
[  356.531119][ T8918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.531137][ T8918] RIP: 0033:0x7f262978e969
[  356.531151][ T8918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.531168][ T8918] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.531186][ T8918] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  356.531198][ T8918] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000007
[  356.531208][ T8918] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  356.531219][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.531229][ T8918] R13: 0000000000000000 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  356.531253][ T8918]  </TASK>
[  356.739877][   T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  356.804210][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  356.815146][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  356.823986][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  356.834381][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  356.874666][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  356.893591][ T8926] Failed to initialize the IGMP autojoin socket (err -2)
[  357.873717][   T24] usb 2-1: too many configurations: 26, using maximum allowed: 8
[  357.891777][   T24] usb 2-1: unable to read config index 0 descriptor/start: -61
[  357.899384][   T24] usb 2-1: can't read configurations, error -61
[  358.091221][ T8937] dlm: no local IP address has been set
[  358.096792][ T8937] dlm: cannot start dlm midcomms -107
[  358.206289][   T24] usb usb2-port1: attempt power cycle
[  358.592203][ T8953] fuse: Invalid rootmode
[  358.940674][ T5821] Bluetooth: hci5: command tx timeout
[  360.018433][ T8965] FAULT_INJECTION: forcing a failure.
[  360.018433][ T8965] name failslab, interval 1, probability 0, space 0, times 0
[  360.141883][ T8965] CPU: 0 UID: 0 PID: 8965 Comm: syz.1.710 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  360.141910][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  360.141920][ T8965] Call Trace:
[  360.141926][ T8965]  <TASK>
[  360.141933][ T8965]  dump_stack_lvl+0x16c/0x1f0
[  360.141959][ T8965]  should_fail_ex+0x512/0x640
[  360.141984][ T8965]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  360.142003][ T8965]  should_failslab+0xc2/0x120
[  360.142024][ T8965]  __kmalloc_cache_noprof+0x6a/0x3e0
[  360.142041][ T8965]  ? rtnl_newlink+0x11b/0x2000
[  360.142067][ T8965]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.142087][ T8965]  rtnl_newlink+0x11b/0x2000
[  360.142117][ T8965]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.142138][ T8965]  ? find_held_lock+0x2b/0x80
[  360.142158][ T8965]  ? avc_has_perm_noaudit+0x117/0x3b0
[  360.142181][ T8965]  ? avc_has_perm_noaudit+0x149/0x3b0
[  360.142202][ T8965]  ? cred_has_capability.isra.0+0x193/0x2f0
[  360.142230][ T8965]  ? __lock_acquire+0x622/0x1c90
[  360.142264][ T8965]  ? find_held_lock+0x2b/0x80
[  360.142278][ T8965]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.142299][ T8965]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.142319][ T8965]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  360.142343][ T8965]  ? __pfx_rtnl_newlink+0x10/0x10
[  360.142371][ T8965]  rtnetlink_rcv_msg+0x95e/0xe90
[  360.142397][ T8965]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  360.142426][ T8965]  ? ref_tracker_free+0x37c/0x830
[  360.142455][ T8965]  netlink_rcv_skb+0x155/0x420
[  360.142481][ T8965]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  360.142504][ T8965]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  360.142537][ T8965]  ? netlink_deliver_tap+0x1ae/0xd30
[  360.142566][ T8965]  netlink_unicast+0x53a/0x7f0
[  360.142593][ T8965]  ? __pfx_netlink_unicast+0x10/0x10
[  360.142625][ T8965]  netlink_sendmsg+0x8d1/0xdd0
[  360.142653][ T8965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.142687][ T8965]  ____sys_sendmsg+0xa98/0xc70
[  360.142714][ T8965]  ? copy_msghdr_from_user+0x10a/0x160
[  360.142735][ T8965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.142772][ T8965]  ___sys_sendmsg+0x134/0x1d0
[  360.142795][ T8965]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.142813][ T8965]  ? __lock_acquire+0x622/0x1c90
[  360.142863][ T8965]  __sys_sendmsg+0x16d/0x220
[  360.142885][ T8965]  ? __pfx___sys_sendmsg+0x10/0x10
[  360.142921][ T8965]  do_syscall_64+0xcd/0x4c0
[  360.142945][ T8965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.142963][ T8965] RIP: 0033:0x7fc0be78e969
[  360.142977][ T8965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.142993][ T8965] RSP: 002b:00007fc0bf65d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.143010][ T8965] RAX: ffffffffffffffda RBX: 00007fc0be9b5fa0 RCX: 00007fc0be78e969
[  360.143021][ T8965] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004
[  360.143030][ T8965] RBP: 00007fc0bf65d090 R08: 0000000000000000 R09: 0000000000000000
[  360.143040][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.143050][ T8965] R13: 0000000000000000 R14: 00007fc0be9b5fa0 R15: 00007ffcaec3b428
[  360.143072][ T8965]  </TASK>
[  361.056392][ T5821] Bluetooth: hci5: command tx timeout
[  361.287675][ T8990] dlm: no local IP address has been set
[  361.293266][ T8990] dlm: cannot start dlm midcomms -107
[  361.641132][ T8991] overlay: filesystem on ./file0 not supported as upperdir
[  363.089782][ T5821] Bluetooth: hci5: command tx timeout
[  363.619939][ T9007] fuse: Invalid rootmode
[  363.889439][ T9013] gfs2: Unknown parameter 'barrier'
[  364.180626][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  364.237292][ T9021] fuse: Bad value for 'rootmode'
[  364.283547][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  364.283562][   T30] audit: type=1400 audit(2000000087.590:794): avc:  denied  { ioctl } for  pid=9004 comm="syz.2.718" path="socket:[20459]" dev="sockfs" ino=20459 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  364.382627][   T10] usb 1-1: Using ep0 maxpacket: 32
[  364.400693][   T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  364.436398][   T10] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.543148][   T30] audit: type=1400 audit(2000000087.770:795): avc:  denied  { ioctl } for  pid=9030 comm="syz.3.723" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xff scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  364.699987][   T10] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  364.723332][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  364.742321][   T10] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  364.756290][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.774120][   T10] usb 1-1: config 0 descriptor??
[  365.171926][ T5821] Bluetooth: hci5: command tx timeout
[  365.252336][   T30] audit: type=1400 audit(2000000088.550:796): avc:  denied  { bind } for  pid=9044 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  365.337427][   T30] audit: type=1400 audit(2000000088.600:797): avc:  denied  { listen } for  pid=9044 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  365.499768][ T9047] syz.1.725: attempt to access beyond end of device
[  365.499768][ T9047] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[  365.546947][ T9047] syz.1.725: attempt to access beyond end of device
[  365.546947][ T9047] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[  365.584901][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  365.612744][ T8926] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  365.675428][ T9047] syz.1.725: attempt to access beyond end of device
[  365.675428][ T9047] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[  365.697410][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  365.724253][   T30] audit: type=1400 audit(2000000089.020:798): avc:  denied  { map } for  pid=9044 comm="syz.3.726" path="socket:[20937]" dev="sockfs" ino=20937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  365.727848][ T8926] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  365.796944][ T9047] syz.1.725: attempt to access beyond end of device
[  365.796944][ T9047] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[  365.815406][   T30] audit: type=1400 audit(2000000089.020:799): avc:  denied  { read accept } for  pid=9044 comm="syz.3.726" path="socket:[20937]" dev="sockfs" ino=20937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  365.826709][ T8926] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  365.846277][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  365.890478][ T9047] syz.1.725: attempt to access beyond end of device
[  365.890478][ T9047] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[  365.906088][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  365.916529][ T9047] syz.1.725: attempt to access beyond end of device
[  365.916529][ T9047] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[  365.934835][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  365.947400][ T9047] syz.1.725: attempt to access beyond end of device
[  365.947400][ T9047] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[  365.949624][ T8926] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  365.963913][ T9047] syz.1.725: attempt to access beyond end of device
[  365.963913][ T9047] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[  366.015207][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  366.028048][ T9047] syz.1.725: attempt to access beyond end of device
[  366.028048][ T9047] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[  366.049340][ T9056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.079813][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  366.079936][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  366.104901][ T9047] syz.1.725: attempt to access beyond end of device
[  366.104901][ T9047] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  366.106493][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  366.158374][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  366.159192][    T9] usb 3-1: config 129 has an invalid interface number: 81 but max is 0
[  366.187332][    T9] usb 3-1: config 129 has no interface number 0
[  366.214484][ T9047] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  366.217433][    T9] usb 3-1: config 129 interface 81 has no altsetting 0
[  366.233863][ T9047] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  366.611339][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  366.625034][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.a8
[  366.659038][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  366.673319][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.729752][   T10] usb 1-1: USB disconnect, device number 13
[  366.755895][    T9] usb 3-1: Product: syz
[  366.775510][    T9] usb 3-1: Manufacturer: syz
[  366.802588][    T9] usb 3-1: SerialNumber: syz
[  367.629995][    T9] ttusbir 3-1:129.81: cannot find expected altsetting
[  367.754701][    T9] usb 3-1: USB disconnect, device number 11
[  367.854258][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'.
[  368.224263][ T9082] 8021q: adding VLAN 0 to HW filter on device team2
[  369.236852][   T30] audit: type=1400 audit(2000000092.540:800): avc:  denied  { mount } for  pid=9100 comm="syz.3.735" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  369.640735][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  369.811572][   T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  369.834706][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.859894][ T5864] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  369.866760][   T24] usb 3-1: config 0 descriptor??
[  370.039772][ T5864] usb 2-1: Using ep0 maxpacket: 16
[  370.054994][ T5864] usb 2-1: config 8 has an invalid interface number: 145 but max is 0
[  370.113734][ T5864] usb 2-1: config 8 has no interface number 0
[  370.127313][ T9121] FAULT_INJECTION: forcing a failure.
[  370.127313][ T9121] name failslab, interval 1, probability 0, space 0, times 0
[  370.149948][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  370.158737][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  370.167828][ T5864] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  370.200919][ T5864] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  370.208794][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.0.739 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  370.208817][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  370.208826][ T9121] Call Trace:
[  370.208831][ T9121]  <TASK>
[  370.208838][ T9121]  dump_stack_lvl+0x16c/0x1f0
[  370.208864][ T9121]  should_fail_ex+0x512/0x640
[  370.208886][ T9121]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  370.208906][ T9121]  should_failslab+0xc2/0x120
[  370.208927][ T9121]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  370.208945][ T9121]  ? ptlock_alloc+0x1f/0x70
[  370.208963][ T9121]  ptlock_alloc+0x1f/0x70
[  370.208977][ T9121]  pte_alloc_one+0x82/0x3a0
[  370.208998][ T9121]  __pte_alloc+0x6d/0x3c0
[  370.209017][ T9121]  ? __pfx___pte_alloc+0x10/0x10
[  370.209037][ T9121]  ? _raw_spin_unlock+0x28/0x50
[  370.209053][ T9121]  ? __pmd_alloc+0x3fb/0x930
[  370.209076][ T9121]  __handle_mm_fault+0x4262/0x53d0
[  370.209106][ T9121]  ? __pfx___handle_mm_fault+0x10/0x10
[  370.209128][ T9121]  ? __pfx_mt_find+0x10/0x10
[  370.209162][ T9121]  ? find_vma+0xbf/0x140
[  370.209181][ T9121]  ? __pfx_find_vma+0x10/0x10
[  370.209203][ T9121]  handle_mm_fault+0x589/0xd10
[  370.209218][ T9121]  ? __pkru_allows_pkey+0x21/0xb0
[  370.209243][ T9121]  do_user_addr_fault+0x7a6/0x1370
[  370.209263][ T9121]  ? rcu_is_watching+0x12/0xc0
[  370.209281][ T9121]  exc_page_fault+0x5c/0xb0
[  370.209300][ T9121]  asm_exc_page_fault+0x26/0x30
[  370.209316][ T9121] RIP: 0010:__get_user_8+0x14/0x30
[  370.209332][ T9121] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 7f 09 04 00 66 66 2e 0f 1f 84 00 00 00
[  370.209346][ T9121] RSP: 0018:ffffc9000425fef0 EFLAGS: 00050283
[  370.209360][ T9121] RAX: 0000200000000380 RBX: ffffc9000425ff58 RCX: ffffc9000425fe94
[  370.209370][ T9121] RDX: 00007ffffffff000 RSI: ffffffff824f46eb RDI: ffffffff8c1544e0
[  370.209380][ T9121] RBP: 0000200000000380 R08: 6e3da4e5b782f7c8 R09: 0000000000000000
[  370.209390][ T9121] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000000ce
[  370.209399][ T9121] R13: 0000000080000000 R14: 0000000000000000 R15: 0000000000000000
[  370.209415][ T9121]  ? __x64_sys_io_setup+0x6b/0x210
[  370.209437][ T9121]  __x64_sys_io_setup+0x73/0x210
[  370.209456][ T9121]  do_syscall_64+0xcd/0x4c0
[  370.209477][ T9121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.209493][ T9121] RIP: 0033:0x7f1ecd98e969
[  370.209506][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.209519][ T9121] RSP: 002b:00007f1ece8e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  370.209533][ T9121] RAX: ffffffffffffffda RBX: 00007f1ecdbb5fa0 RCX: 00007f1ecd98e969
[  370.209543][ T9121] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000080000000
[  370.209552][ T9121] RBP: 00007f1ece8e2090 R08: 0000000000000000 R09: 0000000000000000
[  370.209561][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.209573][ T9121] R13: 0000000000000001 R14: 00007f1ecdbb5fa0 R15: 00007ffff51cc6d8
[  370.209597][ T9121]  </TASK>
[  370.209724][ T8926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  370.246415][    T9] usb 3-1: USB disconnect, device number 12
[  370.542038][ T5864] usb 2-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  370.553242][ T5864] usb 2-1: config 8 interface 145 has no altsetting 0
[  370.565766][ T8926] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  370.624498][ T8926] wireguard: wg0: Could not create IPv4 socket
[  370.735339][ T5864] usb 2-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  370.744655][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.752957][ T5864] usb 2-1: Product: syz
[  370.757225][ T5864] usb 2-1: Manufacturer: syz
[  370.764579][ T8926] wireguard: wg1: Could not create IPv4 socket
[  370.771582][ T5864] usb 2-1: SerialNumber: syz
[  371.273848][ T8926] wireguard: wg2: Could not create IPv4 socket
[  371.670879][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  371.768205][ T9142] dlm: no local IP address has been set
[  371.773977][ T9142] dlm: cannot start dlm midcomms -107
[  372.084362][ T5893] usb 4-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  372.101291][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.111125][ T5864] usb 2-1: USB disconnect, device number 19
[  372.547489][ T5893] usb 4-1: config 0 descriptor??
[  372.568871][ T5893] gspca_main: mars-2.14.0 probing 093a:050f
[  372.842712][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'.
[  372.959539][ T9156] netlink: 'syz.3.741': attribute type 10 has an invalid length.
[  373.062720][ T9152] 8021q: adding VLAN 0 to HW filter on device team2
[  373.310084][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'.
[  373.410360][ T9165] dlm: no local IP address has been set
[  373.415961][ T9165] dlm: cannot start dlm midcomms -107
[  373.531948][ T9158] netlink: 'syz.3.741': attribute type 7 has an invalid length.
[  373.816269][ T9158] netlink: 'syz.3.741': attribute type 8 has an invalid length.
[  373.836031][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'.
[  373.884359][ T9158] syz_tun: entered promiscuous mode
[  373.912820][ T9158] batadv_slave_1: entered promiscuous mode
[  373.939759][ T9158] syz_tun: left promiscuous mode
[  373.958546][ T9158] batadv_slave_1: left promiscuous mode
[  375.030091][ T5977] block nbd4: Possible stuck request ffff888026be7000: control (read@0,4096B). Runtime 90 seconds
[  375.047014][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  375.386634][   T30] audit: type=1400 audit(2000000097.690:801): avc:  denied  { create } for  pid=9213 comm="syz.2.749" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  375.446158][ T5861] usb 4-1: USB disconnect, device number 14
[  375.481814][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  375.516722][ T9214] fuse: Unknown parameter 'rootmodeE0_l3ñíR’\áãŽ0000000000I0000004000000000000000000000'
[  375.530642][ T5864] usb 2-1: Using ep0 maxpacket: 8
[  375.536287][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.547064][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.558712][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.566046][ T5864] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  375.574545][ T5864] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  375.584258][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.595147][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.603178][ T5864] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  375.612818][ T5864] usb 2-1: config 250 has no interface number 0
[  375.619289][ T5864] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  375.640151][ T9216] Failed to initialize the IGMP autojoin socket (err -2)
[  375.647315][ T5864] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  375.655383][ T9222] FAULT_INJECTION: forcing a failure.
[  375.655383][ T9222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.657977][ T5864] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  375.681975][ T5864] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  375.693765][ T5864] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  375.708207][ T5864] usb 2-1: config 250 interface 228 has no altsetting 0
[  375.716696][ T9222] CPU: 0 UID: 0 PID: 9222 Comm: syz.3.751 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  375.716721][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.716732][ T9222] Call Trace:
[  375.716738][ T9222]  <TASK>
[  375.716745][ T9222]  dump_stack_lvl+0x16c/0x1f0
[  375.716777][ T9222]  should_fail_ex+0x512/0x640
[  375.716808][ T9222]  _copy_from_iter+0x29f/0x16f0
[  375.716838][ T9222]  ? __asan_memset+0x23/0x50
[  375.716857][ T9222]  ? __pfx__copy_from_iter+0x10/0x10
[  375.716884][ T9222]  ? __alloc_skb+0x200/0x380
[  375.716905][ T9222]  ? __pfx___alloc_skb+0x10/0x10
[  375.716924][ T9222]  ? __pfx___mutex_lock+0x10/0x10
[  375.716952][ T9222]  skb_copy_datagram_from_iter+0x124/0x740
[  375.716982][ T9222]  tun_get_user+0x17ac/0x3b80
[  375.717022][ T9222]  ? __pfx_tun_get_user+0x10/0x10
[  375.717047][ T9222]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  375.717082][ T9222]  ? find_held_lock+0x2b/0x80
[  375.717101][ T9222]  ? tun_get+0x191/0x370
[  375.717132][ T9222]  tun_chr_write_iter+0xdc/0x210
[  375.717161][ T9222]  vfs_write+0x6c7/0x1150
[  375.717182][ T9222]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  375.717219][ T9222]  ? __pfx_vfs_write+0x10/0x10
[  375.717235][ T9222]  ? find_held_lock+0x2b/0x80
[  375.717269][ T9222]  ksys_write+0x12a/0x250
[  375.717288][ T9222]  ? __pfx_ksys_write+0x10/0x10
[  375.717314][ T9222]  do_syscall_64+0xcd/0x4c0
[  375.717338][ T9222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.717356][ T9222] RIP: 0033:0x7f262978e969
[  375.717371][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.717388][ T9222] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  375.717405][ T9222] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  375.717417][ T9222] RDX: 000000000000008f RSI: 0000200000000180 RDI: 0000000000000003
[  375.717428][ T9222] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  375.717438][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.717448][ T9222] R13: 0000000000000000 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  375.717472][ T9222]  </TASK>
[  375.718997][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  375.981409][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  376.009932][ T5864] usb 2-1: Product: syz
[  376.019432][ T5864] usb 2-1: SerialNumber: syz
[  376.249872][ T5811] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  376.544650][ T5864] hub 2-1:250.228: bad descriptor, ignoring hub
[  376.561043][ T5811] usb 3-1: config 0 has no interfaces?
[  376.563380][ T5864] hub 2-1:250.228: probe with driver hub failed with error -5
[  376.611133][ T5811] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  376.626994][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.655622][ T5811] usb 3-1: Product: syz
[  376.686106][ T5811] usb 3-1: Manufacturer: syz
[  376.701762][ T5811] usb 3-1: SerialNumber: syz
[  376.735191][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.745114][ T5811] usb 3-1: config 0 descriptor??
[  376.750172][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.767555][ T9193] netlink: 'syz.1.747': attribute type 21 has an invalid length.
[  376.809419][ T9193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.747'.
[  376.834671][   T50] Bluetooth: hci1: unexpected event for opcode 0x0c12
[  376.865672][ T5864] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  377.915030][   T50] Bluetooth: hci5: command tx timeout
[  377.944753][ T5811] usb 3-1: USB disconnect, device number 13
[  378.111503][ T5864] usb 2-1: USB disconnect, device number 20
[  378.136349][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  378.143278][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  378.328873][ T5864] usblp0: removed
[  378.497036][   T30] audit: type=1400 audit(2000000100.800:802): avc:  denied  { getopt } for  pid=9255 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  378.801585][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  378.893334][ T9266] dlm: no local IP address has been set
[  378.898966][ T9266] dlm: cannot start dlm midcomms -107
[  379.307285][   T30] audit: type=1400 audit(2000000101.610:803): avc:  denied  { unlink } for  pid=5817 comm="syz-executor" name="file2" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  379.363348][ T5864] usb 4-1: device descriptor read/64, error -71
[  379.703988][ T5864] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  379.787680][ T9277] 8021q: adding VLAN 0 to HW filter on device bond1
[  379.879078][ T9285] tipc: Started in network mode
[  379.884465][ T9285] tipc: Node identity ac1414aa, cluster identity 4711
[  379.896193][ T9285] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  379.980593][   T50] Bluetooth: hci5: command tx timeout
[  380.589915][   T30] audit: type=1400 audit(2000000102.150:804): avc:  denied  { create } for  pid=9280 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  380.611922][   T30] audit: type=1400 audit(2000000102.220:805): avc:  denied  { ioctl } for  pid=9280 comm="syz.0.762" path="socket:[22112]" dev="sockfs" ino=22112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  380.783497][ T5864] usb 4-1: device descriptor read/64, error -71
[  380.851561][   T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  380.860945][   T50] Bluetooth: hci1: Injecting HCI hardware error event
[  380.871739][ T5821] Bluetooth: hci1: hardware error 0x00
[  380.906313][ T9295] dlm: no local IP address has been set
[  380.912039][ T9295] dlm: cannot start dlm midcomms -107
[  381.207330][ T5864] usb usb4-port1: attempt power cycle
[  381.236033][ T9299] fuse: Bad value for 'fd'
[  381.251317][   T30] audit: type=1400 audit(2000000103.560:806): avc:  denied  { remount } for  pid=9296 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  381.304688][   T30] audit: type=1400 audit(2000000103.610:807): avc:  denied  { create } for  pid=9296 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  381.763094][   T30] audit: type=1400 audit(2000000104.040:808): avc:  denied  { read } for  pid=9308 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  382.066932][   T50] Bluetooth: hci5: command tx timeout
[  382.730983][ T9216] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  382.947673][ T9216] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  383.096526][ T9216] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  383.209203][ T9216] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  383.341484][ T5821] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  383.776507][ T9352] syz.3.773 (9352): drop_caches: 2
[  384.129766][ T5821] Bluetooth: hci5: command tx timeout
[  384.605146][   T30] audit: type=1400 audit(2000000106.910:809): avc:  denied  { bind } for  pid=9359 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  386.255333][ T9377] dlm: no local IP address has been set
[  386.261128][ T9377] dlm: cannot start dlm midcomms -107
[  386.954103][   T30] audit: type=1400 audit(2000000109.260:810): avc:  denied  { setopt } for  pid=9381 comm="syz.0.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  387.238640][ T9393] vivid-000: disconnect
[  388.965657][ T9216] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  389.015383][ T9216] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  389.080709][ T9216] wireguard: wg0: Could not create IPv4 socket
[  389.102114][ T9216] wireguard: wg1: Could not create IPv4 socket
[  389.160320][ T9216] wireguard: wg2: Could not create IPv4 socket
[  389.565587][ T9414] bond0: entered promiscuous mode
[  389.575107][ T9414] bond_slave_0: entered promiscuous mode
[  389.591866][ T9414] bond_slave_1: entered promiscuous mode
[  389.598128][ T9414] bond0: entered allmulticast mode
[  389.605374][ T9414] bond_slave_0: entered allmulticast mode
[  389.614580][ T9414] bond_slave_1: entered allmulticast mode
[  389.821163][ T9392] vivid-000: reconnect
[  389.825793][ T9392] delete_channel: no stack
[  392.153160][ T9471] syz.3.790 (9471): drop_caches: 2
[  392.370840][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.381540][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.394282][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.402201][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.409551][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.453108][ T9476] Failed to initialize the IGMP autojoin socket (err -2)
[  392.521781][   T30] audit: type=1400 audit(2000000114.810:811): avc:  denied  { read } for  pid=9457 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  392.609763][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  393.181663][ T9482] 9pnet_virtio: no channels available for device syz
[  393.319878][ T5861] usb 3-1: Using ep0 maxpacket: 8
[  393.325313][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'.
[  393.326832][ T5861] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  393.343770][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.482539][ T5861] pvrusb2: Hardware description: Terratec Grabster AV400
[  393.560009][ T5861] pvrusb2: **********
[  393.574139][ T5861] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  393.628714][ T5861] pvrusb2: Important functionality might not be entirely working.
[  393.652029][   T30] audit: type=1326 audit(2000000115.960:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  393.669031][   T30] audit: type=1326 audit(2000000115.960:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  393.752207][ T5861] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  393.762952][   T30] audit: type=1326 audit(2000000115.960:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  393.776961][ T5861] pvrusb2: **********
[  393.832106][ T2334] pvrusb2: Invalid write control endpoint
[  393.848894][   T30] audit: type=1326 audit(2000000116.020:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  394.319248][   T30] audit: type=1326 audit(2000000116.020:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  394.348151][   T30] audit: type=1326 audit(2000000116.020:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  394.477796][ T5821] Bluetooth: hci5: command tx timeout
[  394.511253][ T5866] usb 3-1: USB disconnect, device number 14
[  394.523654][   T30] audit: type=1326 audit(2000000116.020:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  394.659416][ T9502] netlink: 596 bytes leftover after parsing attributes in process `syz.1.796'.
[  394.693175][ T2334] pvrusb2: Invalid write control endpoint
[  394.732190][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  394.778412][   T30] audit: type=1326 audit(2000000116.020:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  394.870912][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  394.881729][ T5821] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  395.304611][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  395.316788][   T30] audit: type=1326 audit(2000000116.020:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.3.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262978e969 code=0x7ffc0000
[  395.395657][ T2334] pvrusb2: Device being rendered inoperable
[  395.416229][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  395.443144][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  395.457133][ T2334] pvrusb2: Attached sub-driver cx25840
[  395.467674][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  395.502804][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  395.719995][ T9319] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  395.881551][ T9319] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  395.893611][ T9319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.921515][ T9319] usb 2-1: config 0 descriptor??
[  396.208736][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  396.217854][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  396.397812][ T9319] usb 2-1: USB disconnect, device number 21
[  396.533854][ T5821] Bluetooth: hci5: command tx timeout
[  397.374478][ T9476] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  397.482522][ T9476] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  397.577967][ T9476] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  398.129742][   T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  398.395939][   T24] usb 3-1: Using ep0 maxpacket: 8
[  398.573251][   T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  398.612765][ T5821] Bluetooth: hci5: command tx timeout
[  398.744097][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.754993][ T9476] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  399.471894][   T24] usb 3-1: config 0 descriptor??
[  400.197129][ T9561] FAT-fs (nullb0): bogus number of reserved sectors
[  400.204025][ T9561] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  400.527791][   T30] audit: type=1400 audit(2000000122.470:821): avc:  denied  { write } for  pid=9553 comm="syz.1.807" path="socket:[24121]" dev="sockfs" ino=24121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  400.645339][   T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  400.655744][   T24] asix 3-1:0.0: probe with driver asix failed with error -71
[  400.694614][ T5821] Bluetooth: hci5: command tx timeout
[  400.732271][   T24] usb 3-1: USB disconnect, device number 15
[  400.877651][ T9571] FAULT_INJECTION: forcing a failure.
[  400.877651][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.913533][ T5862] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  400.928462][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.3.810 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  400.928488][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  400.928498][ T9571] Call Trace:
[  400.928503][ T9571]  <TASK>
[  400.928509][ T9571]  dump_stack_lvl+0x16c/0x1f0
[  400.928536][ T9571]  should_fail_ex+0x512/0x640
[  400.928563][ T9571]  _copy_to_user+0x32/0xd0
[  400.928590][ T9571]  keyctl_capabilities+0x54/0x150
[  400.928614][ T9571]  __do_sys_keyctl+0x4a7/0x590
[  400.928636][ T9571]  do_syscall_64+0xcd/0x4c0
[  400.928660][ T9571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.928678][ T9571] RIP: 0033:0x7f262978e969
[  400.928692][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.928709][ T9571] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  400.928726][ T9571] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  400.928737][ T9571] RDX: 0000000000000005 RSI: 0000200000000240 RDI: 000000000000001f
[  400.928748][ T9571] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  400.928758][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.928768][ T9571] R13: 0000000000000001 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  400.928792][ T9571]  </TASK>
[  401.087440][ T9570] dlm: no local IP address has been set
[  401.093895][ T9570] dlm: cannot start dlm midcomms -107
[  401.200541][ T5862] usb 2-1: Using ep0 maxpacket: 8
[  401.234562][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  401.266587][ T5862] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  401.303127][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.345400][ T5862] usb 2-1: config 0 descriptor??
[  401.408968][ T5862] gspca_main: vc032x-2.14.0 probing 046d:0892
[  401.558509][ T9593] dlm: no local IP address has been set
[  401.564145][ T9593] dlm: cannot start dlm midcomms -107
[  402.622804][ T9601] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  403.631393][ T5862] gspca_vc032x: reg_w err -110
[  403.663890][ T5862] vc032x 2-1:0.0: probe with driver vc032x failed with error -110
[  404.197872][ T9630] syz.3.820 (9630): drop_caches: 2
[  404.696198][   T24] usb 2-1: USB disconnect, device number 22
[  404.812052][ T9637] FAULT_INJECTION: forcing a failure.
[  404.812052][ T9637] name failslab, interval 1, probability 0, space 0, times 0
[  405.569992][ T5977] block nbd4: Possible stuck request ffff888026be7000: control (read@0,4096B). Runtime 120 seconds
[  405.737098][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.3.822 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  405.737125][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  405.737135][ T9637] Call Trace:
[  405.737140][ T9637]  <TASK>
[  405.737147][ T9637]  dump_stack_lvl+0x16c/0x1f0
[  405.737165][ T9637]  should_fail_ex+0x512/0x640
[  405.737182][ T9637]  ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0
[  405.737197][ T9637]  should_failslab+0xc2/0x120
[  405.737212][ T9637]  kmem_cache_alloc_lru_noprof+0x72/0x3b0
[  405.737225][ T9637]  ? sock_alloc_inode+0x25/0x1c0
[  405.737245][ T9637]  ? __pfx_sock_alloc_inode+0x10/0x10
[  405.737260][ T9637]  sock_alloc_inode+0x25/0x1c0
[  405.737276][ T9637]  alloc_inode+0x61/0x240
[  405.737293][ T9637]  sock_alloc+0x40/0x280
[  405.737308][ T9637]  __sock_create+0xc1/0x8d0
[  405.737329][ T9637]  __sys_socket+0x14d/0x260
[  405.737338][ T9637]  ? fput+0x70/0xf0
[  405.737352][ T9637]  ? __pfx___sys_socket+0x10/0x10
[  405.737362][ T9637]  ? ksys_write+0x1ac/0x250
[  405.737373][ T9637]  ? __pfx_ksys_write+0x10/0x10
[  405.737388][ T9637]  __x64_sys_socket+0x72/0xb0
[  405.737397][ T9637]  ? lockdep_hardirqs_on+0x7c/0x110
[  405.737411][ T9637]  do_syscall_64+0xcd/0x4c0
[  405.737427][ T9637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.737439][ T9637] RIP: 0033:0x7f262978e969
[  405.737448][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.737459][ T9637] RSP: 002b:00007f262a698038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  405.737470][ T9637] RAX: ffffffffffffffda RBX: 00007f26299b5fa0 RCX: 00007f262978e969
[  405.737476][ T9637] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c
[  405.737483][ T9637] RBP: 00007f262a698090 R08: 0000000000000000 R09: 0000000000000000
[  405.737489][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.737495][ T9637] R13: 0000000000000000 R14: 00007f26299b5fa0 R15: 00007fff43ecbef8
[  405.737508][ T9637]  </TASK>
[  405.737514][ T9637] socket: no more sockets
[  406.019124][ T9476] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  406.076492][ T9476] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  406.118508][ T9476] wireguard: wg0: Could not create IPv4 socket
[  406.146259][ T9476] wireguard: wg1: Could not create IPv4 socket
[  406.156125][ T9476] wireguard: wg2: Could not create IPv4 socket
[  406.977406][ T9645] Can't find ip_set type hash:ip,ma
[  410.402258][ T9319] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  410.570014][ T9319] usb 1-1: Using ep0 maxpacket: 16
[  410.577361][ T9319] usb 1-1: config 8 has an invalid interface number: 145 but max is 0
[  410.589975][ T9319] usb 1-1: config 8 has no interface number 0
[  410.596138][ T9319] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xF has invalid maxpacket 1088, setting to 64
[  410.607752][ T9319] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  410.619195][ T9319] usb 1-1: config 8 interface 145 altsetting 252 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  410.634579][ T9319] usb 1-1: config 8 interface 145 has no altsetting 0
[  410.646351][ T9319] usb 1-1: New USB device found, idVendor=157e, idProduct=3013, bcdDevice=37.4b
[  410.658398][ T9319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.666692][ T9319] usb 1-1: Product: syz
[  410.674287][ T9319] usb 1-1: Manufacturer: syz
[  410.678892][ T9319] usb 1-1: SerialNumber: syz
[  410.955398][ T9319] usb 1-1: USB disconnect, device number 14
[  412.440694][ T9729] dlm: no local IP address has been set
[  412.446337][ T9729] dlm: cannot start dlm midcomms -107
[  414.996429][ T9741] gfs2: not a GFS2 filesystem
[  415.102077][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  415.110963][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  415.119920][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  415.127921][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  415.137432][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  415.235316][ T9746] Failed to initialize the IGMP autojoin socket (err -2)
[  415.314240][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  415.322709][ T9744] 9pnet_fd: Insufficient options for proto=fd
[  415.362911][ T9752] gfs2: not a GFS2 filesystem
[  415.499954][    T9] usb 4-1: Using ep0 maxpacket: 32
[  415.667573][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  415.779734][ T5811] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  416.409226][    T9] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.469973][    T9] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  416.512138][ T5811] usb 3-1: Using ep0 maxpacket: 32
[  416.523684][ T5811] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  416.534350][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  416.556346][ T5811] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.667687][    T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  416.679834][ T5811] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  416.791567][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.808864][    T9] usb 4-1: config 0 descriptor??
[  417.372031][   T50] Bluetooth: hci5: command tx timeout
[  417.429738][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0
[  417.445661][ T5811] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  417.515575][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.539560][ T5811] usb 3-1: config 0 descriptor??
[  418.797161][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  418.804107][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  418.821049][    T9] usb 4-1: USB disconnect, device number 18
[  419.098692][ T9785] dlm: no local IP address has been set
[  419.104420][ T9785] dlm: cannot start dlm midcomms -107
[  419.490525][   T50] Bluetooth: hci5: command tx timeout
[  419.857552][ T5811] usbhid 3-1:0.0: can't add hid device: -71
[  419.888915][ T5811] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  419.899951][ T5861] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  420.017782][ T5811] usb 3-1: USB disconnect, device number 16
[  420.161324][ T5861] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  420.257651][ T5861] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  420.284362][ T5861] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  420.308768][ T9807] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  420.333976][ T5861] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  420.454743][ T5861] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  420.463877][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.234710][ T9746] netdevsim netdevsim5 netdevsim0: renamed from eth1
[  421.405946][ T9746] netdevsim netdevsim5 netdevsim1: renamed from eth2
[  421.569994][   T50] Bluetooth: hci5: command tx timeout
[  421.575627][ T5861] ath6kl: Failed to submit usb control message: -110
[  422.411486][ T5861] ath6kl: unable to send the bmi data to the device: -110
[  422.413638][ T9746] netdevsim netdevsim5 netdevsim2: renamed from eth3
[  422.418617][ T5861] ath6kl: Unable to send get target info: -110
[  422.502506][ T5861] ath6kl: Failed to init ath6kl core: -110
[  422.530553][ T5861] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110
[  422.622661][ T9746] netdevsim netdevsim5 netdevsim3: renamed from eth4
[  423.033423][ T9846] 9pnet_fd: Insufficient options for proto=fd
[  423.659837][   T50] Bluetooth: hci5: command tx timeout
[  423.812688][ T9857] gfs2: not a GFS2 filesystem
[  423.942245][   T43] usb 2-1: USB disconnect, device number 23
[  424.140388][ T5811] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  424.369518][ T9869] dlm: no local IP address has been set
[  424.375155][ T9869] dlm: cannot start dlm midcomms -107
[  424.800484][ T5811] usb 4-1: Using ep0 maxpacket: 32
[  425.053318][ T5811] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  425.102588][ T5811] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.164123][ T5811] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  425.208339][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0
[  425.330227][ T5811] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  425.802394][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.855417][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[  426.612370][ T5811] usb 4-1: config 0 descriptor??
[  426.726666][ T9882] 8021q: adding VLAN 0 to HW filter on device team1
[  426.893793][ T5811] usbhid 4-1:0.0: can't add hid device: -71
[  426.910837][ T5811] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  427.175985][ T5811] usb 4-1: USB disconnect, device number 19
[  427.219190][   T30] audit: type=1400 audit(2000000002.420:822): avc:  denied  { setattr } for  pid=9888 comm="syz.2.869" name="NETLINK" dev="sockfs" ino=25428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  428.619960][ T5863] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  429.214881][ T9746] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  429.250094][   T31] INFO: task syz.4.509:7996 blocked for more than 143 seconds.
[  429.258810][   T31]       Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0
[  429.269803][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.278671][   T31] task:syz.4.509       state:D stack:26584 pid:7996  tgid:7994  ppid:5807   task_flags:0x400140 flags:0x00004004
[  429.290861][ T5863] usb 2-1: Using ep0 maxpacket: 32
[  429.296922][   T31] Call Trace:
[  429.303798][ T5863] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  429.319317][ T5863] usb 2-1: config 0 has no interface number 0
[  429.343098][   T31]  <TASK>
[  429.350441][   T31]  __schedule+0x116a/0x5de0
[  429.354993][   T31]  ? __pfx___schedule+0x10/0x10
[  429.373250][ T5863] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  429.394836][   T31]  ? find_held_lock+0x2b/0x80
[  429.410016][ T5863] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  429.420128][   T31]  ? schedule+0x2d7/0x3a0
[  429.424484][   T31]  schedule+0xe7/0x3a0
[  429.428560][   T31]  schedule_preempt_disabled+0x13/0x30
[  429.454577][ T5863] usb 2-1: config 0 interface 126 has no altsetting 0
[  429.459545][   T31]  __mutex_lock+0x6c7/0xb90
[  429.490630][   T31]  ? bdev_release+0x15a/0x6d0
[  429.495395][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  429.500544][   T31]  ? find_held_lock+0x2b/0x80
[  429.580362][ T9927] dlm: no local IP address has been set
[  429.586008][ T9927] dlm: cannot start dlm midcomms -107
[  429.628348][ T5863] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  429.961929][   T31]  ? do_raw_spin_unlock+0x172/0x230
[  429.967205][   T31]  ? bdev_release+0x15a/0x6d0
[  429.972419][   T31]  bdev_release+0x15a/0x6d0
[  429.977787][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  429.983040][   T31]  blkdev_release+0x15/0x20
[  429.987550][   T31]  __fput+0x402/0xb70
[  429.997222][   T31]  task_work_run+0x14d/0x240
[  430.001875][   T31]  ? __pfx_task_work_run+0x10/0x10
[  430.006994][   T31]  ? selinux_file_ioctl+0xb4/0x270
[  430.016436][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.027591][ T5863] usb 2-1: Product: syz
[  430.032445][ T5863] usb 2-1: Manufacturer: syz
[  430.037201][ T5863] usb 2-1: SerialNumber: syz
[  430.048532][ T5863] usb 2-1: config 0 descriptor??
[  430.057595][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  430.063550][ T9898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  430.169838][ T9898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  430.265021][   T31]  do_syscall_64+0x3f6/0x4c0
[  430.270206][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.276653][   T31] RIP: 0033:0x7f52a198e969
[  430.283302][   T31] RSP: 002b:00007f52a2881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  430.291889][   T31] RAX: 0000000000000000 RBX: 00007f52a1bb5fa0 RCX: 00007f52a198e969
[  430.307929][   T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  430.357200][   T31] RBP: 00007f52a1a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  430.483781][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.493227][   T31] R13: 0000000000000000 R14: 00007f52a1bb5fa0 R15: 00007fff34a25f68
[  430.504711][   T31]  </TASK>
[  430.508685][ T5863] ir_usb 2-1:0.126: IR Dongle converter detected
[  430.515141][   T31] 
[  430.515141][   T31] Showing all locks held in the system:
[  430.521437][ T9746] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  430.525525][   T31] 2 locks held by kworker/u8:0/12:
[  430.544731][ T5863] usb 2-1: IRDA class descriptor not found, device not bound
[  430.552523][   T31]  #0: ffff8881466e6148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  430.563274][   T31]  #1: ffffc90000117d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  430.575058][   T31] 1 lock held by khungtaskd/31:
[  430.580532][   T31]  #0: ffffffff8e5c4d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  430.595202][ T5863] usb 2-1: USB disconnect, device number 24
[  430.612817][   T31] 2 locks held by getty/5569:
[  430.617823][   T31]  #0: ffff88803269f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  430.624421][ T9746] wireguard: wg0: Could not create IPv4 socket
[  430.628606][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  430.644016][   T31] 1 lock held by udevd/5828:
[  430.648614][   T31]  #0: ffff8880b843bc58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  430.655016][ T9746] wireguard: wg1: Could not create IPv4 socket
[  430.658653][   T31] 3 locks held by kworker/1:6/5863:
[  430.674003][   T31]  #0: ffff88801eef3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  430.676968][ T9746] wireguard: wg2: Could not create IPv4 socket
[  430.685267][   T31]  #1: ffffc9000481fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  430.706170][   T31]  #2: ffff888029b39198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[  430.715887][   T31] 1 lock held by udevd/7362:
[  430.721309][   T31]  #0: ffff8880269fe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  430.723587][ T9746] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  430.738970][   T31] 1 lock held by syz.4.509/7996:
[  430.744109][   T31]  #0: ffff8880269fe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0
[  430.754330][   T31] 5 locks held by syz-executor/9746:
[  430.762972][   T31] 2 locks held by syz.3.874/9916:
[  430.770142][   T31]  #0: ffffffff8e492ac8 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0
[  430.794186][   T31]  #1: ffffffff8e5d0338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  430.807540][   T31] 1 lock held by syz.0.875/9920:
[  430.812976][   T31]  #0: ffffffff8e492ac8 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0
[  430.822790][   T31] 3 locks held by sed/9937:
[  430.890727][   T31] 
[  430.893156][   T31] =============================================
[  430.893156][   T31] 
[  430.921788][   T31] NMI backtrace for cpu 0
[  430.921806][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  430.921826][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  430.921835][   T31] Call Trace:
[  430.921841][   T31]  <TASK>
[  430.921847][   T31]  dump_stack_lvl+0x116/0x1f0
[  430.921871][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  430.921885][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  430.921904][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  430.921922][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  430.921941][   T31]  watchdog+0xf70/0x12c0
[  430.921969][   T31]  ? __pfx_watchdog+0x10/0x10
[  430.921991][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  430.922010][   T31]  ? __kthread_parkme+0x19e/0x250
[  430.922029][   T31]  ? __pfx_watchdog+0x10/0x10
[  430.922053][   T31]  kthread+0x3c5/0x780
[  430.922076][   T31]  ? __pfx_kthread+0x10/0x10
[  430.922098][   T31]  ? rcu_is_watching+0x12/0xc0
[  430.922114][   T31]  ? __pfx_kthread+0x10/0x10
[  430.922135][   T31]  ret_from_fork+0x5d7/0x6f0
[  430.922153][   T31]  ? __pfx_kthread+0x10/0x10
[  430.922175][   T31]  ret_from_fork_asm+0x1a/0x30
[  430.922204][   T31]  </TASK>
[  430.922210][   T31] Sending NMI from CPU 0 to CPUs 1:
[  431.046773][    C1] NMI backtrace for cpu 1
[  431.046788][    C1] CPU: 1 UID: 0 PID: 9943 Comm: dhcpcd-run-hook Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  431.046804][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  431.046812][    C1] RIP: 0010:lock_acquire+0x10a/0x350
[  431.046838][    C1] Code: 85 4f ff ff ff e8 76 fb 93 ff e9 45 ff ff ff 48 8b 74 24 68 48 89 df e8 a4 51 8a 00 8b 0d 42 7b 0f 0f 85 c9 0f 84 b1 00 00 00 <65> 8b 05 77 87 33 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 f7 45 33
[  431.046851][    C1] RSP: 0018:ffffc90003caf570 EFLAGS: 00000202
[  431.046863][    C1] RAX: 0000000000000001 RBX: ffffffff8e5c4d80 RCX: 0000000000000001
[  431.046871][    C1] RDX: 0000000000000000 RSI: ffffffff816ab8c1 RDI: fffffbfff1cb89b0
[  431.046880][    C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  431.046888][    C1] R10: 0000000000000000 R11: 0000000000007c40 R12: 0000000000000000
[  431.046896][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  431.046904][    C1] FS:  0000000000000000(0000) GS:ffff888124865000(0000) knlGS:0000000000000000
[  431.046917][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  431.046925][    C1] CR2: 00007ffcc84b63e8 CR3: 000000005aa97000 CR4: 00000000003526f0
[  431.046934][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  431.046941][    C1] DR3: 00000000000000a8 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  431.046950][    C1] Call Trace:
[  431.046954][    C1]  <TASK>
[  431.046960][    C1]  ? unwind_next_frame+0x3f4/0x20a0
[  431.046978][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  431.046993][    C1]  unwind_next_frame+0xd1/0x20a0
[  431.047008][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  431.047023][    C1]  ? do_group_exit+0xd3/0x2a0
[  431.047039][    C1]  ? unwind_get_return_address+0x59/0xa0
[  431.047055][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  431.047069][    C1]  arch_stack_walk+0x94/0x100
[  431.047088][    C1]  ? do_group_exit+0xd3/0x2a0
[  431.047104][    C1]  stack_trace_save+0x8e/0xc0
[  431.047117][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  431.047132][    C1]  ? kasan_save_stack+0x42/0x60
[  431.047145][    C1]  ? kasan_save_stack+0x33/0x60
[  431.047158][    C1]  kasan_save_stack+0x33/0x60
[  431.047171][    C1]  ? kasan_save_stack+0x33/0x60
[  431.047183][    C1]  ? kasan_record_aux_stack+0xa7/0xc0
[  431.047200][    C1]  ? kmem_cache_free+0x15a/0x4d0
[  431.047213][    C1]  ? __put_anon_vma+0x114/0x3a0
[  431.047224][    C1]  ? unlink_anon_vmas+0x58a/0x820
[  431.047236][    C1]  ? free_pgtables+0x2d4/0x810
[  431.047251][    C1]  ? exit_mmap+0x3fb/0xb90
[  431.047267][    C1]  ? __mmput+0x12a/0x410
[  431.047279][    C1]  ? mmput+0x62/0x70
[  431.047289][    C1]  ? do_exit+0x7bc/0x2bd0
[  431.047302][    C1]  ? do_group_exit+0xd3/0x2a0
[  431.047333][    C1]  kasan_record_aux_stack+0xa7/0xc0
[  431.047351][    C1]  kmem_cache_free+0x15a/0x4d0
[  431.047363][    C1]  ? __pfx___might_resched+0x10/0x10
[  431.047375][    C1]  ? __put_anon_vma+0x114/0x3a0
[  431.047390][    C1]  __put_anon_vma+0x114/0x3a0
[  431.047402][    C1]  unlink_anon_vmas+0x58a/0x820
[  431.047416][    C1]  free_pgtables+0x2d4/0x810
[  431.047434][    C1]  ? __pfx_free_pgtables+0x10/0x10
[  431.047449][    C1]  ? mas_next_slot+0x12d3/0x21b0
[  431.047470][    C1]  ? __pfx_down_write+0x10/0x10
[  431.047490][    C1]  exit_mmap+0x3fb/0xb90
[  431.047508][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  431.047535][    C1]  __mmput+0x12a/0x410
[  431.047547][    C1]  mmput+0x62/0x70
[  431.047558][    C1]  do_exit+0x7bc/0x2bd0
[  431.047572][    C1]  ? do_raw_spin_lock+0x12c/0x2b0
[  431.047590][    C1]  ? __pfx_do_exit+0x10/0x10
[  431.047604][    C1]  ? rcu_is_watching+0x12/0xc0
[  431.047619][    C1]  do_group_exit+0xd3/0x2a0
[  431.047633][    C1]  __x64_sys_exit_group+0x3e/0x50
[  431.047647][    C1]  x64_sys_call+0x1530/0x1730
[  431.047660][    C1]  do_syscall_64+0xcd/0x4c0
[  431.047676][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.047690][    C1] RIP: 0033:0x7fa662d3a6c5
[  431.047700][    C1] Code: Unable to access opcode bytes at 0x7fa662d3a69b.
[  431.047705][    C1] RSP: 002b:00007ffcc84b62f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[  431.047718][    C1] RAX: ffffffffffffffda RBX: 00007ffcc84b6604 RCX: 00007fa662d3a6c5
[  431.047726][    C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[  431.047734][    C1] RBP: 0000000000000003 R08: 00007ffcc84b63f0 R09: 0000000000000002
[  431.047741][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  431.047749][    C1] R13: 00007ffcc84b6630 R14: 00007fa662f4a000 R15: 0000564dd68f2d98
[  431.047763][    C1]  </TASK>
[  431.048905][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  431.491035][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) 
[  431.502477][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  431.512528][   T31] Call Trace:
[  431.515790][   T31]  <TASK>
[  431.518707][   T31]  dump_stack_lvl+0x3d/0x1f0
[  431.523293][   T31]  panic+0x71c/0x800
[  431.527177][   T31]  ? __pfx_panic+0x10/0x10
[  431.531578][   T31]  ? irqentry_exit+0x3b/0x90
[  431.536174][   T31]  ? watchdog+0xdda/0x12c0
[  431.540588][   T31]  ? watchdog+0xdcd/0x12c0
[  431.544996][   T31]  watchdog+0xdeb/0x12c0
[  431.549235][   T31]  ? __pfx_watchdog+0x10/0x10
[  431.553902][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  431.559092][   T31]  ? __kthread_parkme+0x19e/0x250
[  431.564122][   T31]  ? __pfx_watchdog+0x10/0x10
[  431.568791][   T31]  kthread+0x3c5/0x780
[  431.572850][   T31]  ? __pfx_kthread+0x10/0x10
[  431.577432][   T31]  ? rcu_is_watching+0x12/0xc0
[  431.582183][   T31]  ? __pfx_kthread+0x10/0x10
[  431.586761][   T31]  ret_from_fork+0x5d7/0x6f0
[  431.591337][   T31]  ? __pfx_kthread+0x10/0x10
[  431.595915][   T31]  ret_from_fork_asm+0x1a/0x30
[  431.600673][   T31]  </TASK>
[  431.603864][   T31] Kernel Offset: disabled
[  431.608165][   T31] Rebooting in 86400 seconds..