last executing test programs:

14m2.643440229s ago: executing program 3 (id=4):
socket$kcm(0x2b, 0x1, 0x0)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0)
sendto(r0, 0x0, 0x0, 0x24008861, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086602, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
socket(0x80000000000000a, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

14m2.396918724s ago: executing program 3 (id=6):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x2}, 0x10}, 0x94)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000140)={0x8, 0xa, 0x98b80, 0x5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='global_dirty_state\x00', r0, 0x0, 0x80}, 0x18)
epoll_pwait2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

14m2.320942807s ago: executing program 3 (id=7):
r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000001c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000300)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, r3, r2, 0x5, 0x9, 0x6, 0x7, {0x3f000000, 0xfffd, 0x9782, 0x1, 0xb4, 0x7fff, 0x0, 0x3, 0x8, 0x4000, 0xfffc, 0xa911, 0x1000, 0x1000, "40bb886fa9dca35c5ce36ce7ca8ca6d55c697c4b6abe916ae363ab4b8be78d45"}})

14m2.188938316s ago: executing program 3 (id=8):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r4 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
dup(r4)
mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x8080e2e8)

14m0.924320406s ago: executing program 3 (id=9):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_robust_list(0x0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5})
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x3c}], 0x1}, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10)
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r3, 0x0, &(0x7f0000000280)="b9", 0x1, 0x121})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, r3, 0x8, 0x80000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000a9d000/0x1000)=nil, 0x1000, 0x7fff})

13m45.657865861s ago: executing program 32 (id=9):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a300f0000000900010073797a30000000002c0003800800014000000000180003811400010076657468315f746f5f626f6e640000000800024000000010140000001000011f00000000000000000000000a38b8eeaece959b74049c80e99e49bfeadb7cb789e356b0f6adff741e7851c7719027d220b58261c89000b501d305895227f119fe5aaf660dce7243420a363eb24efefd01a6726c60c19bcdbe06fdd07ac82e602158a557c4767536f95ed52076928783144ae9140824518cb0bf0446de30f61b796e90e4c21abcdfba27bab886f0d26941a5"], 0xf8}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
get_robust_list(0x0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r3, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5})
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x3c}], 0x1}, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10)
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r3, 0x0, &(0x7f0000000280)="b9", 0x1, 0x121})
ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, r3, 0x8, 0x80000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000a9d000/0x1000)=nil, 0x1000, 0x7fff})

8m45.096304033s ago: executing program 0 (id=985):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r2, 0x0, 0x0)
lseek(r2, 0x401, 0x0)

8m42.936799453s ago: executing program 0 (id=992):
socket(0x10, 0x80002, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00) (async)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}}, 0x64000) (async)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1c}}, 0x64000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x10)
landlock_create_ruleset(&(0x7f00000000c0)={0x855, 0x1}, 0x18, 0x4) (async)
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x855, 0x1}, 0x18, 0x4)
landlock_restrict_self(r3, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) (async)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
landlock_restrict_self(r6, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)

8m42.661455059s ago: executing program 0 (id=994):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}})
io_uring_enter(r1, 0x47f9, 0x3f, 0x0, 0x0, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/153, 0x99}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000280)}], 0x3, &(0x7f0000000d40)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000740)=""/180, 0xb4}, &(0x7f0000000800), 0x2d}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x8}, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x4, 0xbe8, 0x8, 0x367, 0x7fff, 0x1, 0xe}}, @mask_cswp={0x58, 0x114, 0x9, {{0xf27, 0xa}, &(0x7f0000000700)=0xc9, &(0x7f00000003c0)=0x1, 0x2, 0x4, 0x1aa8f1f9, 0x28, 0xc, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x4}, &(0x7f0000000400)=0x7ff, &(0x7f0000000440)=0xfffffffffffffccd, 0xe, 0x5, 0x80, 0x4, 0x4a, 0x3}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x4}, &(0x7f0000000280)=0x1480000, &(0x7f0000000a00)=0xffffffffffffff01, 0x8, 0x3, 0x8, 0x7fffffff, 0x4, 0x100000000}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0xe911a160}, &(0x7f0000000480)=0x3, &(0x7f00000004c0)=0x6, 0xcac, 0x3, 0x8, 0x14, 0x1a, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/142, 0x8e}, &(0x7f00000005c0), 0x9}}, @fadd={0x58, 0x114, 0x6, {{0xffff7fff, 0xebe2}, &(0x7f0000000600)=0x2, &(0x7f0000000640)=0x3a3, 0x7, 0x8, 0x68b, 0xfffffffffffffffb, 0x1, 0x9}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0xffffff5d}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000000680)=0xffff, &(0x7f00000006c0)=0x8000000000000000, 0x4, 0x9, 0xa224, 0x7, 0x22, 0x6af}}], 0x2e0, 0x8000}, 0x10)

8m42.596523105s ago: executing program 0 (id=995):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x301802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0xc6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000180)=0x1)
close(r4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)

8m41.021795019s ago: executing program 0 (id=1000):
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x16f40f, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[])
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r2 = socket$inet_sctp(0x2, 0x4296f684bf61a77, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x4}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x172442, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x10001, 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)

8m38.024407905s ago: executing program 0 (id=1009):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x238600, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x468e, 0x6, 0x0, 0x1, 0x2, 0x5})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
memfd_secret(0x0)
ptrace$peekuser(0x3, r2, 0x1)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)

8m22.760085361s ago: executing program 33 (id=1009):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x238600, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x468e, 0x6, 0x0, 0x1, 0x2, 0x5})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x634e9f9427bbb997, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
munlock(&(0x7f0000002000/0x4000)=nil, 0x4000)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
memfd_secret(0x0)
ptrace$peekuser(0x3, r2, 0x1)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)

13.950836809s ago: executing program 1 (id=2317):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)

12.933799673s ago: executing program 1 (id=2318):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000000c0), &(0x7f0000000080)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x20)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58)

12.176776649s ago: executing program 1 (id=2321):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000060000000060a010400000000000000000100000608000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c000240000000da132b48010800034000000fff0c0001400000000000000008140000001100010000000000000000000000000a"], 0xd4}}, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r4=>0x0})
r5 = eventfd2(0x6, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{<r6=>0x0, 0x6, 0x7f, 0xd8, 0x10001, 0x4, 0x1, 0x8, 0x0, 0x164, 0x3, 0x1, 0x4, 0x0, 0x8001}, 0x20, [0x0, 0x0, 0x0, 0x0]})
r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x80800)
ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f00000000c0)={0x0, 0x9})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000340)={0x0, r6, "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", "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"})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="1f000000000000002c0012800b00010069703667726500001c00028014000700fe8000000000000000000000000000aa0400120008000a00", @ANYRES32=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

10.641301929s ago: executing program 4 (id=2324):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0xa0a, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xfd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000880}, 0x20040040)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x600000c1}, 0x2000c080)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300)=0x2, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=<r8=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
r9 = getpgrp(0xffffffffffffffff)
sched_setscheduler(r9, 0x3, &(0x7f0000000540)=0x6)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=<r13=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60054400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044820)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan3\x00', <r15=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4011)
r16 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r16, 0x0, 0x1d, 0xdb, &(0x7f0000000940)="f1a3b208ed204b21c62056d2f8f657bdf808907c40143e665164f85385", &(0x7f0000000980)=""/219, 0x10001, 0x0, 0x8b, 0x1000, &(0x7f0000000a80)="7ba8b794a5a8b238794045da5c6014d2afee9484aef527c6b0e8472dbede995e5f5f9778e3160346aa603120a3a98ca50c0c152971f62bb207a47d20a513cd28e5464bedeb41065d8ce59a0e23595c7afbf637190fb04d5be87b4eba988b999b746e6fca17785e493d009d0e68d5b44ec0fbfee2a89bee282e3421b168c29c25c30d04f83fd140aebc0b82", &(0x7f0000000b40)="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", 0x0, 0x0, 0x10}, 0x50)
getpid()
r17 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r17, 0xc0d05605, &(0x7f0000001c00)={0x3, @pix={0x81, 0x3, 0x38415261, 0x7, 0xd, 0xfffffffe, 0x8, 0x5, 0x1, 0x8, 0x2, 0x6}})
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001d40)=@add_del={0x2, &(0x7f0000001d00)='veth0_to_hsr\x00'})
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048091}, 0x800)

10.085057479s ago: executing program 5 (id=2327):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

9.749441629s ago: executing program 4 (id=2328):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101801)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x0, 0x80010, r2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000004c0))
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100)="17d72030", 0x4)

9.735074878s ago: executing program 2 (id=2329):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0)

9.046066642s ago: executing program 5 (id=2331):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000700000000000220000000a0001007770616e3000000005"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x44)

8.761955793s ago: executing program 2 (id=2332):
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3})
socket$inet_icmp(0x2, 0x2, 0x1)
gettid()
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x15)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c", 0x53}], 0x1)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

8.2052824s ago: executing program 5 (id=2334):
syz_open_dev$sg(0x0, 0x5, 0x8002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a00000000000000000a0000060900020073797a31000000000900010073797a31000000000900010073797a3100000000140000001100010000000000000000000100000a"], 0x60}, 0x1, 0x0, 0x0, 0x4040840}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
poll(0x0, 0x0, 0x10)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32], 0x27)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10)
r7 = syz_open_dev$video4linux(&(0x7f0000000400), 0xfffffffffffffffe, 0x82c1)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r7, 0xc0085666, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r8)

7.797074635s ago: executing program 4 (id=2335):
fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)='sysfs\x00', 0x6, 0x1)
fsopen(&(0x7f0000001900)='sysfs\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r3, 0x1)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x18)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r4, 0x0, 0x0, 0xa1a)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x24000081, &(0x7f00000001c0)={0xa, 0x4e20, 0xd, @loopback, 0x5}, 0x1c)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000000)=ANY=[])
pipe(&(0x7f0000000040))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, 0x0, 0x4000)
fanotify_init(0x200, 0x0)
unshare(0x68040200)
clock_gettime(0x0, &(0x7f0000000240)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r7, r8+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x10]}, 0x8})

7.618053796s ago: executing program 1 (id=2336):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c", 0x78}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdb", 0xa7}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cd", 0xe0}, {0x0}, {0x0}, {&(0x7f0000000340)="e0e8dd926a24dae19da3664054cbff430fcc53c2eb8a95cee99300"/36, 0x24}, {&(0x7f0000000a00)="5f4d72fed8d9a17035a2c4d171357b0e111382fe1884faf5a73aa494e4fac9231a718b2b3f13030d489f8442b26418bd07ad33cb602aec34710e815f76a883f6405e4fc188f953376c435fcd1469357411cff697fa2d2349", 0x58}, {&(0x7f0000000fc0)="09a2e1ee027661083e999e9ca6d50149a8f570299ce7e69670ddc2b032f442d775eae50f685af3e5b2c2e68757fed20964aeca6102540c836b277bc6b631bda10aaa806a296c6a50776091df6044e542d53a5a", 0x53}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)="87de7d61eb6f3b1c95fe3ba09739170d4d8908f0e70f2fdf4e8c2494af4d4e35e7952933072aee57fab90cb3652bf7841850a0", 0x33}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e", 0x49}], 0x2, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x164, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x13f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @val={0x25, 0x3, {0x0, 0xa, 0x8}}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x51, "d603975e745cf0818ddf6d630340422b5efe14e9cb1adb7c07146829be39ac24aa70b63265f5d01e584ea220662ae06b9f29b8c0db55b8973efcc8e2131746af14a7d9eec224a2ecee11fec779abcc890c"}, {0xdd, 0x7c, "844485144ae31589b65f2b2495e4a044244c614b4546e50d85069c3aaede2f341775ec7e4c686a3910b4c4de14babb923cc2c888ce1c1bf2c37c73917ee9b073d0966153f3f38618f91c68279e45ea37ea7da95c8d10bfb68cbe7dbeaea77e1155e7ba64a002b943b33c2f80bcbb7bacac5c6b44c78c1a8c8b8edaba"}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.569956022s ago: executing program 1 (id=2337):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x5, 0x0, 0xff}, 0x50)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
modify_ldt$write2(0x11, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000280)=""/51, 0xfffffffffffffffe)
r2 = fcntl$getown(r1, 0x9)
lseek(0xffffffffffffffff, 0xbc, 0x3)
r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="648c161d50613501828c89d5dd59fada754faf2d34dcc27d57e7bb10afd14eeefb21626ee3e5a72b4c608a08c970f04bfa3efc4be0083bb9728bb33e65bba04e474f2b59f682591a9a7410926acc70d0d7", 0x51}, {&(0x7f0000000a00)="8838558583c3076e8c683d190bbb9cf72ad2a5ee2fd419af2c04eafbb431290c77d90521bf940b65ac4d15688b246cf4b8d98f948820573497bc6f02b26c9f1b78c67c159bcb514e5d6079e6a2139bd813ffeddd01db9dcb578205cb233b0cfefbcb5f5e3e8d3921ffca06549e7015fe1e0ab10afb85fa46046e622fd8736bea57432ba01ffd383e9feacc00d1739c82f367775d62cbc5ecd7ef0ec86c1027ba8a24805cfc81daf44707401e5eda4ad28a53d2778c613ead53c4defff7b5b4f6b97eb4c7bc4c", 0xc6}, {&(0x7f0000000b00)="dbc202e291af3c844c28ceb2711a50d0cc5c041359d86c4cc564c83ed180390e380ebbdc773d1be19d5f3f5385b7025f15bafad0bd8cd61219916c7d299152aab6d901ebb4f02f3956c02a88e3b64e8ca8eb53bb35cefb14cb1dd638e66ef1ba69b581beb831702e71e665df296e8ccd5a289ba74dddf821271e63d04454578af4ebfddd974c1390db7f2bac8db687d608e4b4e488769d9d1129f1d542059f3ab415cb34181bc15c21af13ed7c0eba543557cd7c2a169443769433dfc1afb38fda3993cecde0c1b0ae3d05c6eb5c71b2", 0xd0}, {&(0x7f0000000c00)="4a78ccb44e4d468fb374b4d199bd0241345eb6f8a7870e4c9dc81d65014a6bb920a6f2c366207adce5601d0baf552bcdbe1f113db483e9c0aa0ca4c5d8120df1f456462ed3b6b500258db56fbe53f460c2963924e1c31a32f8dd28950ad96b1aa2cd7c923404f3b1df2cdee49bad661f87e7dbdd38481a13f807ff6faca5904e509b", 0x82}, {&(0x7f0000000180)="fbd3171244f36520db97e775", 0xc}, {&(0x7f0000000cc0)="e0bcf76a37c2ee3762abb5b0bfba041178692a59f09368d4486da970ead3a7d47a7b42b8d8e1d7bf24fbc4c3bead5ed44be56103efb3fc42ef1321f070807fa170430059c6eff231a325b0c9fd5e25929b61426fa8f9e1ba086a9ee3f1e81fce6dd20a1d5436f6466fffddecff6ee858872dc4d9d0183abad22bfb8d95e551e0b33b2a486b513f0c549f88257d405cb2c307e54cd9d7ea1c30079e0a2936a511ce172b7661dfa72279128403412a096881", 0xb1}, {&(0x7f0000000340)="bde34a43afa412de", 0x8}], 0x7, &(0x7f0000001480)=[@rights={{0x1c, 0x1, 0x1, [r4, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x20000040}}, {{&(0x7f0000001500)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000083c0)="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", 0x1000}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e91b000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4000804}}, {{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001800)="868ffe5ee8853d1b", 0x8}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000040000400100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20008040}}], 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110)

7.208654634s ago: executing program 1 (id=2338):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000000c0), &(0x7f0000000080)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x20)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58)

7.193785397s ago: executing program 2 (id=2339):
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async)
r2 = socket(0x2, 0x3, 0xff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(0x0, r8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x1fe, r9, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x142, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="1d80bb5e4bab", {0xf, 0xff9}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x0, @default, 0x4008, @void, @val={0x1, 0x3, [{0x6c, 0x1}, {0x24}, {0x74}]}, @void, @val={0x4, 0x6, {0x6, 0x7, 0x8, 0x38}}, @val={0x6, 0x2, 0xd8}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0xaa}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3f, 0x29}}, @val={0x76, 0x6, {0x10, 0xf8, 0x15, 0x8}}, [{0xdd, 0xed, "fed1103de6270e58f0891e2b419c5f3b16c3f56d18e0def673d69ad859dd4d685a159f5a25045f2d612e2ba530a9d0a35c27fe7ac4be0138811bf54d321333434236c8f6ab64056bced028318627798ea3e972e27bec4d237c4ae4d84482831aef44d64082a8ad198aa26722af9344b4c3f32150d632c887ad8c8e3e060278b31f43fad66d3e32d384d063e1c7fa102fe00b5ce33130d183499f155dc98952dcc51af7038fd062fa7c56599757117dc6d05916d99e9e9f7124f493ba27d18822f7a7216724c044048c60ceca4a3a9d847d4f05dcee2e21720caa0b41406c74fa484736b07f823ae42456a530f6"}]}}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xf1}, @broadcast, @device_b, @initial, {0x4, 0xb}, @value=@ver_80211n={0x0, 0xf, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2c, @val={0x8c, 0x18, {0x5c8, "6090c4a29a39", @long="46f3066dff4f4f9c3d5c0d459c5c9237"}}}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x41054}, 0x48851) (async)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, 0x0, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000)
connect$ax25(r1, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140), 0x8)

5.537248652s ago: executing program 2 (id=2341):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x4, 0x2, 0x87, 0xffffffff, 0x2})
epoll_create1(0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)

5.141723658s ago: executing program 5 (id=2343):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d345000905010210000000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0002000400006ef1938edd08cb3d5b224096694997085ebef2b94be8e2aa750517a46647e9574f15483bfdfcb3d411ceeb2c88ff7665f17a218a7a2a38c62c4bfa5b08e41f9199acbfa50d724b4f2a14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="200a00010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$snapshot(0xffffffffffffffff, &(0x7f0000000080)=""/43, 0x2b)
syz_io_uring_setup(0x7562, 0x0, &(0x7f0000000180), 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

4.388129608s ago: executing program 6 (id=2344):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x3, 0xc9}}}, 0x6)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000)

4.109374789s ago: executing program 6 (id=2345):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100140}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, 0x17, 0x100, 0x70bd28, 0x25dfdbfc, {0x13}, [@nested={0x151, 0x52, 0x0, 0x1, [@generic="d7fa36eaef683319239449e44fd938cfea5c80d04c110d0def99570330a560dd6c239876b8470f9d7c7aa1a69c64bc948be900b175bd097544f491cb1831ec56f93e08491bd618dc50e60a0827d2cad3c18001d5ed2869e1ecd3", @typed={0x8, 0xb9, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x11f}, @typed={0x10, 0x140, 0x0, 0x0, @str='/dev/nullb0\x00'}, @generic="385ea741ab815b4bdc780f039ca8d4821160e4dc58af82df34dbb174d12c21cc007adfe373519e4dbe73680d145068c01771f8c93b02ff3464b825ec8a4cb36cb0ea82a03d90cb1d38f72af1baf3e352e6cabc234c5a6b44c39cacd26ff955cb6913e949fb15038433e2e273b1a3fa7acab7051ae60340f283940975fa17ae7970a405650e998ab5366d95b0c27a3de4521b294147794996cae651f16a859446e3cac79919705ebe180eae00abc4ec2789bc4f734073f277deed97f25060da2603058c966336e93e334e7598f16659d21010394cd8f314"]}]}, 0x168}, 0x1, 0x0, 0x0, 0x24004081}, 0x4008000)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000000500)={r2, r2, r1}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0)

3.77134388s ago: executing program 2 (id=2346):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000)
io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/softlockup_count', 0x149a82, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x20040000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

3.366758707s ago: executing program 6 (id=2347):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c", 0x78}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdb", 0xa7}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355fafb3d0fe1dcbc744e366516154e083505f2ddd013015f5da1f357ad404550837d418b63c7c6bf810b844d564dda44776f4bc92dbf5ca734271891781a39acf0c10870355e79f7192f7a1c6486b778eacec8660cc5ce5747f42a97458e21e11ee5e564fa74dc7c67ba4737600b1099c34cd", 0xe0}, {0x0}, {0x0}, {&(0x7f0000000340)="e0e8dd926a24dae19da3664054cbff430fcc53c2eb8a95cee99300"/36, 0x24}, {&(0x7f0000000a00)="5f4d72fed8d9a17035a2c4d171357b0e111382fe1884faf5a73aa494e4fac9231a718b2b3f13030d489f8442b26418bd07ad33cb602aec34710e815f76a883f6405e4fc188f953376c435fcd1469357411cff697fa2d2349", 0x58}, {&(0x7f0000000fc0)="09a2e1ee027661083e999e9ca6d50149a8f570299ce7e69670ddc2b032f442d775eae50f685af3e5b2c2e68757fed20964aeca6102540c836b277bc6b631bda10aaa806a296c6a50776091df6044e542d53a5a", 0x53}], 0x6, &(0x7f00000010c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)="87de7d61eb6f3b1c95fe3ba09739170d4d8908f0e70f2fdf4e8c2494af4d4e35e7952933072aee57fab90cb3652bf7841850a0", 0x33}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e", 0x49}], 0x2, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x6, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x164, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x13f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @val={0x25, 0x3, {0x0, 0xa, 0x8}}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x51, "d603975e745cf0818ddf6d630340422b5efe14e9cb1adb7c07146829be39ac24aa70b63265f5d01e584ea220662ae06b9f29b8c0db55b8973efcc8e2131746af14a7d9eec224a2ecee11fec779abcc890c"}, {0xdd, 0x7c, "844485144ae31589b65f2b2495e4a044244c614b4546e50d85069c3aaede2f341775ec7e4c686a3910b4c4de14babb923cc2c888ce1c1bf2c37c73917ee9b073d0966153f3f38618f91c68279e45ea37ea7da95c8d10bfb68cbe7dbeaea77e1155e7ba64a002b943b33c2f80bcbb7bacac5c6b44c78c1a8c8b8edaba"}]}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.180336875s ago: executing program 4 (id=2348):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x5, 0x0, 0xff}, 0x50)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
modify_ldt$write2(0x11, 0x0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000280)=""/51, 0xfffffffffffffffe)
r2 = fcntl$getown(r1, 0x9)
lseek(0xffffffffffffffff, 0xbc, 0x3)
r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="648c161d50613501828c89d5dd59fada754faf2d34dcc27d57e7bb10afd14eeefb21626ee3e5a72b4c608a08c970f04bfa3efc4be0083bb9728bb33e65bba04e474f2b59f682591a9a7410926acc70d0d7", 0x51}, {&(0x7f0000000a00)="8838558583c3076e8c683d190bbb9cf72ad2a5ee2fd419af2c04eafbb431290c77d90521bf940b65ac4d15688b246cf4b8d98f948820573497bc6f02b26c9f1b78c67c159bcb514e5d6079e6a2139bd813ffeddd01db9dcb578205cb233b0cfefbcb5f5e3e8d3921ffca06549e7015fe1e0ab10afb85fa46046e622fd8736bea57432ba01ffd383e9feacc00d1739c82f367775d62cbc5ecd7ef0ec86c1027ba8a24805cfc81daf44707401e5eda4ad28a53d2778c613ead53c4defff7b5b4f6b97eb4c7bc4c", 0xc6}, {&(0x7f0000000b00)="dbc202e291af3c844c28ceb2711a50d0cc5c041359d86c4cc564c83ed180390e380ebbdc773d1be19d5f3f5385b7025f15bafad0bd8cd61219916c7d299152aab6d901ebb4f02f3956c02a88e3b64e8ca8eb53bb35cefb14cb1dd638e66ef1ba69b581beb831702e71e665df296e8ccd5a289ba74dddf821271e63d04454578af4ebfddd974c1390db7f2bac8db687d608e4b4e488769d9d1129f1d542059f3ab415cb34181bc15c21af13ed7c0eba543557cd7c2a169443769433dfc1afb38fda3993cecde0c1b0ae3d05c6eb5c71b2", 0xd0}, {&(0x7f0000000c00)="4a78ccb44e4d468fb374b4d199bd0241345eb6f8a7870e4c9dc81d65014a6bb920a6f2c366207adce5601d0baf552bcdbe1f113db483e9c0aa0ca4c5d8120df1f456462ed3b6b500258db56fbe53f460c2963924e1c31a32f8dd28950ad96b1aa2cd7c923404f3b1df2cdee49bad661f87e7dbdd38481a13f807ff6faca5904e509b", 0x82}, {&(0x7f0000000180)="fbd3171244f36520db97e775", 0xc}, {&(0x7f0000000cc0)="e0bcf76a37c2ee3762abb5b0bfba041178692a59f09368d4486da970ead3a7d47a7b42b8d8e1d7bf24fbc4c3bead5ed44be56103efb3fc42ef1321f070807fa170430059c6eff231a325b0c9fd5e25929b61426fa8f9e1ba086a9ee3f1e81fce6dd20a1d5436f6466fffddecff6ee858872dc4d9d0183abad22bfb8d95e551e0b33b2a486b513f0c549f88257d405cb2c307e54cd9d7ea1c30079e0a2936a511ce172b7661dfa72279128403412a096881", 0xb1}, {&(0x7f0000000340)="bde34a43afa412de", 0x8}], 0x7, &(0x7f0000001480)=[@rights={{0x1c, 0x1, 0x1, [r4, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x80, 0x20000040}}, {{&(0x7f0000001500)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000083c0)="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", 0x1000}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e91b000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4000804}}, {{&(0x7f0000001780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001800)="868ffe5ee8853d1b", 0x8}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="1c000000040000400100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20008040}}], 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110)

2.069690599s ago: executing program 6 (id=2349):
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3})
socket$inet_icmp(0x2, 0x2, 0x1)
gettid()
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x15)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f", 0x56}], 0x1)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

1.289229222s ago: executing program 4 (id=2350):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xffffffff973d4f4d, 0x80c, 0xfff, 0x5, 0xffeffffa, 0x0, 0x0, 0x14, 0x10000101}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1)

1.260071459s ago: executing program 6 (id=2351):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000200)="360f01700566b9800000c00f326635000800000f300f2168660f3a418a87939866b9470900000f32140af3e0c3f30f01e8b881008ed8f080b0000074", 0x3c}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.180743484s ago: executing program 5 (id=2352):
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3})
socket$inet_icmp(0x2, 0x2, 0x1)
gettid()
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x15)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x3)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)

1.151343562s ago: executing program 2 (id=2353):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x890)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x4000010)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x6, 0x8280, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @local}}}})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

272.393423ms ago: executing program 4 (id=2354):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETSF(r2, 0x5404, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
pipe(0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r7 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
close(r6)
socket(0x10, 0x803, 0x0)

271.44163ms ago: executing program 5 (id=2355):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x7, 0x4, 0x2, 0x87, 0xffffffff, 0x2})
epoll_create1(0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)

0s ago: executing program 6 (id=2356):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x200000c4)
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x200007, 0x12)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_vlan\x00', 0x2}, 0x18) (fail_nth: 1)

kernel console output (not intermixed with test programs):

PU: 0 UID: 0 PID: 13167 Comm: syz.5.1744 Not tainted syzkaller #0 PREEMPT(full) 
[  679.925545][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  679.925555][T13167] Call Trace:
[  679.925561][T13167]  <TASK>
[  679.925568][T13167]  dump_stack_lvl+0x16c/0x1f0
[  679.925596][T13167]  should_fail_ex+0x512/0x640
[  679.925622][T13167]  ? fs_reclaim_acquire+0xae/0x150
[  679.925647][T13167]  should_failslab+0xc2/0x120
[  679.925670][T13167]  __kmalloc_noprof+0xeb/0x910
[  679.925695][T13167]  ? tomoyo_encode2+0x100/0x3e0
[  679.925726][T13167]  ? tomoyo_encode2+0x100/0x3e0
[  679.925748][T13167]  tomoyo_encode2+0x100/0x3e0
[  679.925774][T13167]  tomoyo_encode+0x29/0x50
[  679.925796][T13167]  tomoyo_realpath_from_path+0x18f/0x6e0
[  679.925827][T13167]  tomoyo_path_number_perm+0x245/0x580
[  679.925846][T13167]  ? tomoyo_path_number_perm+0x237/0x580
[  679.925869][T13167]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  679.925891][T13167]  ? find_held_lock+0x2b/0x80
[  679.925939][T13167]  ? find_held_lock+0x2b/0x80
[  679.925962][T13167]  ? hook_file_ioctl_common+0x144/0x410
[  679.925984][T13167]  ? __fget_files+0x20e/0x3c0
[  679.926012][T13167]  security_file_ioctl+0x9b/0x240
[  679.926037][T13167]  __x64_sys_ioctl+0xb7/0x210
[  679.926058][T13167]  do_syscall_64+0xcd/0xf80
[  679.926082][T13167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.926099][T13167] RIP: 0033:0x7fa73878f749
[  679.926113][T13167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  679.926128][T13167] RSP: 002b:00007fa739547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  679.926144][T13167] RAX: ffffffffffffffda RBX: 00007fa7389e5fa0 RCX: 00007fa73878f749
[  679.926154][T13167] RDX: 00000000000a759f RSI: 0000000000009204 RDI: 0000000000000005
[  679.926163][T13167] RBP: 00007fa739547090 R08: 0000000000000000 R09: 0000000000000000
[  679.926173][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.926181][T13167] R13: 00007fa7389e6038 R14: 00007fa7389e5fa0 R15: 00007ffe6e9e1638
[  679.926205][T13167]  </TASK>
[  679.927282][T13167] ERROR: Out of memory at tomoyo_realpath_from_path.
[  680.218481][ T5930] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  680.459875][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  680.519382][ T5930] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  680.598052][ T5930] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  680.677599][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  680.780310][ T5930] usb 5-1: config 1 has no interface number 0
[  680.855032][ T5930] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  680.998057][ T5930] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  681.747217][   T30] audit: type=1400 audit(1768694438.994:590): avc:  denied  { getopt } for  pid=13174 comm="syz.6.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  681.783238][ T5930] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  681.847175][ T3525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  681.966572][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.241263][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  682.395472][ T5930] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  683.812195][ T5926] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  684.138934][ T5926] usb 5-1: USB disconnect, device number 42
[  684.149023][T13182] ceph: No mds server is up or the cluster is laggy
[  684.197190][ T5926] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  684.812222][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  684.820937][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.061936][T13207] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1756'.
[  685.517203][ T6332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  685.801103][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  686.554203][   T30] audit: type=1400 audit(1768694444.394:591): avc:  denied  { read } for  pid=13213 comm="syz.5.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  687.128565][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  688.274058][T13238] xt_hashlimit: size too large, truncated to 1048576
[  688.528010][ T5922] libceph: connect (1)[c::]:6789 error -101
[  688.540903][ T5922] libceph: mon0 (1)[c::]:6789 connect error
[  688.752910][T13250] misc userio: Invalid payload size
[  689.358469][ T5922] libceph: connect (1)[c::]:6789 error -101
[  689.374702][ T5922] libceph: mon0 (1)[c::]:6789 connect error
[  689.452523][   T30] audit: type=1800 audit(1768694447.314:592): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1766" name="nullb0" dev="tmpfs" ino=655 res=0 errno=0
[  689.607560][T13242] ceph: No mds server is up or the cluster is laggy
[  692.503866][ T4511] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  695.457504][ T5926] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  695.581598][T13289] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  695.588232][T13289] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  695.596007][T13289] vhci_hcd vhci_hcd.0: Device attached
[  695.909414][ T5866] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  696.006390][ T5926] usb 7-1: device not accepting address 19, error -71
[  696.345818][T13290] vhci_hcd: connection reset by peer
[  696.390318][  T188] vhci_hcd vhci_hcd.4: stop threads
[  696.447128][  T188] vhci_hcd vhci_hcd.4: release socket
[  696.529167][  T188] vhci_hcd vhci_hcd.4: disconnect device
[  697.007317][ T5894] libceph: connect (1)[c::]:6789 error -101
[  697.015140][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  697.276101][ T5926] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  697.830983][ T5894] libceph: connect (1)[c::]:6789 error -101
[  697.969012][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  698.048190][ T5926] usb 7-1: Using ep0 maxpacket: 32
[  698.058777][ T5926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  698.084413][ T5926] usb 7-1: config 0 has no interfaces?
[  698.100101][ T5926] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  698.117880][ T5926] usb 7-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  698.136514][ T5926] usb 7-1: Product: syz
[  698.147831][ T5926] usb 7-1: Manufacturer: syz
[  698.158748][ T5926] usb 7-1: SerialNumber: syz
[  698.172693][ T5926] usb 7-1: config 0 descriptor??
[  698.218357][ T5867] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  698.249882][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  698.787329][ T5926] libceph: connect (1)[c::]:6789 error -101
[  698.793498][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  698.803256][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  698.829561][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  698.861245][ T5867] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  698.875590][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.896188][ T5867] usb 5-1: config 0 descriptor??
[  698.989136][T13302] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  699.561261][T13296] ceph: No mds server is up or the cluster is laggy
[  699.740916][ T5867] usbhid 5-1:0.0: can't add hid device: -71
[  700.056689][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  700.069193][ T5867] usb 5-1: USB disconnect, device number 43
[  700.555969][ T5926] usb 7-1: USB disconnect, device number 20
[  700.845476][T13328] xt_hashlimit: size too large, truncated to 1048576
[  701.850480][ T5866] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  702.559478][T13338] lo speed is unknown, defaulting to 1000
[  702.694148][   T30] audit: type=1400 audit(1768694460.534:593): avc:  denied  { create } for  pid=13340 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  702.868312][ T5874] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  703.397913][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.438234][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  703.460159][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  703.480885][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  703.518170][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  703.614220][ T5874] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  703.631597][T13359] FAULT_INJECTION: forcing a failure.
[  703.631597][T13359] name failslab, interval 1, probability 0, space 0, times 0
[  703.644608][T13359] CPU: 1 UID: 0 PID: 13359 Comm: syz.5.1789 Not tainted syzkaller #0 PREEMPT(full) 
[  703.644629][T13359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  703.644638][T13359] Call Trace:
[  703.644643][T13359]  <TASK>
[  703.644650][T13359]  dump_stack_lvl+0x16c/0x1f0
[  703.644677][T13359]  should_fail_ex+0x512/0x640
[  703.644701][T13359]  ? kmem_cache_alloc_noprof+0x62/0x770
[  703.644720][T13359]  should_failslab+0xc2/0x120
[  703.644742][T13359]  kmem_cache_alloc_noprof+0x83/0x770
[  703.644757][T13359]  ? getname_flags.part.0+0x4c/0x550
[  703.644778][T13359]  ? getname_flags.part.0+0x4c/0x550
[  703.644793][T13359]  getname_flags.part.0+0x4c/0x550
[  703.644811][T13359]  getname_uflags+0x98/0xf0
[  703.644836][T13359]  __x64_sys_execveat+0xc4/0x120
[  703.644857][T13359]  do_syscall_64+0xcd/0xf80
[  703.644879][T13359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.644894][T13359] RIP: 0033:0x7fa73878f749
[  703.644907][T13359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.644922][T13359] RSP: 002b:00007fa739547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  703.644938][T13359] RAX: ffffffffffffffda RBX: 00007fa7389e5fa0 RCX: 00007fa73878f749
[  703.644948][T13359] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  703.644957][T13359] RBP: 00007fa739547090 R08: 0000000000001000 R09: 0000000000000000
[  703.644967][T13359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.644975][T13359] R13: 00007fa7389e6038 R14: 00007fa7389e5fa0 R15: 00007ffe6e9e1638
[  703.644997][T13359]  </TASK>
[  703.654761][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.832994][ T5874] usb 3-1: Product: syz
[  703.837279][ T5874] usb 3-1: Manufacturer: syz
[  703.842079][ T5874] usb 3-1: SerialNumber: syz
[  703.849174][ T5874] usb 3-1: config 0 descriptor??
[  703.856529][ T5874] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  703.865277][ T5874] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  703.877583][ T5874] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  704.749470][T13356] ceph: No mds server is up or the cluster is laggy
[  706.039277][ T5874] usb 3-1: USB disconnect, device number 45
[  706.066578][ T5874] garmin_gps 3-1:0.0: device disconnected
[  707.621294][T13383] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1793'.
[  709.744624][ T4123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  709.788507][T13391] ceph: No mds server is up or the cluster is laggy
[  710.059780][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'.
[  710.076881][   T30] audit: type=1400 audit(1768694467.914:594): avc:  denied  { setopt } for  pid=13405 comm="syz.6.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  710.108429][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'.
[  710.151865][   T30] audit: type=1400 audit(1768694468.014:595): avc:  denied  { bind } for  pid=13405 comm="syz.6.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  710.212520][   T30] audit: type=1400 audit(1768694468.014:596): avc:  denied  { setopt } for  pid=13407 comm="syz.4.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  710.267844][ T5874] libceph: connect (1)[c::]:6789 error -101
[  710.274097][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  710.603048][ T5874] libceph: connect (1)[c::]:6789 error -101
[  710.627169][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  711.159711][ T5874] libceph: connect (1)[c::]:6789 error -101
[  711.258533][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  711.276552][T13411] ceph: No mds server is up or the cluster is laggy
[  711.608465][   T30] audit: type=1800 audit(1768694469.454:597): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1806" name="nullb0" dev="tmpfs" ino=655 res=0 errno=0
[  712.870833][T13438] lo speed is unknown, defaulting to 1000
[  713.005843][ T5874] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  713.570198][ T5874] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.586070][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  713.609574][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  713.630641][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  713.650414][ T5874] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  713.745821][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.764116][ T5874] usb 5-1: Product: syz
[  713.774227][ T5874] usb 5-1: Manufacturer: syz
[  713.784379][ T5874] usb 5-1: SerialNumber: syz
[  713.795704][ T5874] usb 5-1: config 0 descriptor??
[  713.997951][ T5874] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  714.006641][ T5874] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  714.971712][ T5874] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  715.390372][ T5812] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  715.517970][ T5874] usb 5-1: USB disconnect, device number 44
[  715.536206][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  715.562668][ T5874] garmin_gps 5-1:0.0: device disconnected
[  715.738464][ T5922] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  715.792261][ T5874] libceph: connect (1)[c::]:6789 error -101
[  715.810560][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  715.841580][ T5874] libceph: connect (1)[c::]:6789 error -101
[  715.856675][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  715.991352][ T5922] usb 3-1: Using ep0 maxpacket: 32
[  716.441076][T11379] libceph: connect (1)[c::]:6789 error -101
[  716.447672][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  716.619794][ T5922] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c
[  716.629026][T13468] ceph: No mds server is up or the cluster is laggy
[  716.638672][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.662813][ T5922] usb 3-1: Product: syz
[  716.667022][ T5922] usb 3-1: Manufacturer: syz
[  716.673896][ T5922] usb 3-1: SerialNumber: syz
[  716.689043][ T5922] usb 3-1: config 0 descriptor??
[  716.717017][ T5922] cdc_mbim 3-1:0.0: CDC Union missing and no IAD found
[  716.735644][ T5922] cdc_mbim 3-1:0.0: bind() failure
[  716.756568][ T5922] option 3-1:0.0: GSM modem (1-port) converter detected
[  716.868273][ T5866] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  716.911855][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1798'.
[  716.959836][ T5922] libceph: connect (1)[c::]:6789 error -101
[  716.977934][   T24] libceph: connect (1)[c::]:6789 error -101
[  716.979242][ T5922] libceph: mon0 (1)[c::]:6789 connect error
[  716.985315][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  717.323154][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  717.324449][   T24] libceph: connect (1)[c::]:6789 error -101
[  717.334100][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  717.430114][T13503] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  717.436717][T13503] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  717.445560][T13503] vhci_hcd vhci_hcd.0: Device attached
[  717.487835][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  717.732572][ T5926] usb 41-1: new high-speed USB device number 3 using vhci_hcd
[  717.836967][T13504] vhci_hcd: connection reset by peer
[  717.874504][   T13] vhci_hcd vhci_hcd.4: stop threads
[  717.905926][   T13] vhci_hcd vhci_hcd.4: release socket
[  717.911476][T13494] ceph: No mds server is up or the cluster is laggy
[  718.060306][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  718.321968][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  718.331430][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.342269][ T5866] usb 6-1: config 0 descriptor??
[  718.354828][T13477] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  719.186793][ T5867] libceph: connect (1)[c::]:6789 error -101
[  719.193297][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  719.241812][T13466] ceph: No mds server is up or the cluster is laggy
[  719.248864][ T5867] libceph: connect (1)[c::]:6789 error -101
[  719.254954][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  719.273781][T11379] usb 3-1: USB disconnect, device number 46
[  719.281803][T11379] option 3-1:0.0: device disconnected
[  720.650498][ T5866] usbhid 6-1:0.0: can't add hid device: -71
[  720.656493][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  720.678519][ T5866] usb 6-1: USB disconnect, device number 34
[  721.290210][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  721.951047][T13537] afs: Unknown parameter '}sn·Ÿ³Ë÷Ëæ]òWŒ1vP)ˆ‹ºƒ71'
[  721.971846][T13537] netlink: 'syz.2.1831': attribute type 2 has an invalid length.
[  722.244434][T13541] lo speed is unknown, defaulting to 1000
[  722.628349][   T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  723.278889][ T7335] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  723.302247][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.585097][ T5926] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  723.603534][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  723.639203][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  723.650558][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  723.736346][ T7335] usb 3-1: Using ep0 maxpacket: 32
[  723.759932][ T7335] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  723.789585][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  723.806519][ T7335] usb 3-1: config 0 has an invalid interface descriptor of length 5, skipping
[  723.816633][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.828487][ T7335] usb 3-1: config 0 has no interface number 0
[  723.834628][ T7335] usb 3-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=56.54
[  723.848860][   T24] usb 5-1: Product: syz
[  723.860958][   T24] usb 5-1: Manufacturer: syz
[  723.865577][   T24] usb 5-1: SerialNumber: syz
[  723.879933][ T7335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.892645][   T24] usb 5-1: config 0 descriptor??
[  723.899524][ T7335] usb 3-1: config 0 descriptor??
[  723.916052][   T24] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  723.927866][   T24] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  723.940212][   T24] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  724.121186][T13547] overlayfs: overlapping lowerdir path
[  725.630085][ T5926] usb 5-1: USB disconnect, device number 45
[  725.644806][ T5926] garmin_gps 5-1:0.0: device disconnected
[  725.770983][ T7335] usb 3-1: string descriptor 0 read error: -71
[  725.918599][ T7335] usb 3-1: bad CDC descriptors
[  726.885608][ T7335] cdc_acm 3-1:0.69: Zero length descriptor references
[  727.684739][ T4511] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  727.814929][ T7335] cdc_acm 3-1:0.69: probe with driver cdc_acm failed with error -22
[  727.828955][ T7335] usb 3-1: USB disconnect, device number 47
[  728.808471][   T30] audit: type=1400 audit(1768694486.674:598): avc:  denied  { listen } for  pid=13590 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  728.838672][   T30] audit: type=1400 audit(1768694486.674:599): avc:  denied  { accept } for  pid=13590 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  729.079994][ T5812] Bluetooth: hci3: unexpected event for opcode 0x0000
[  729.299262][T13601] misc userio: Invalid payload size
[  731.368204][   T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  731.552499][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  731.693728][   T24] usb 3-1: config 1 has no interface number 1
[  731.708286][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  731.726765][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  731.736847][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.746150][   T24] usb 3-1: Product: syz
[  731.753493][   T24] usb 3-1: Manufacturer: syz
[  731.764953][   T24] usb 3-1: SerialNumber: syz
[  732.258521][   T24] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  732.276676][   T24] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  732.293274][   T24] usb 3-1: failed to enable PITCH for EP 0x82
[  732.362803][   T24] usb 3-1: USB disconnect, device number 48
[  732.598608][T13629] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1851'.
[  733.130874][ T5812] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  733.140267][ T5812] Bluetooth: hci3: Injecting HCI hardware error event
[  733.153071][ T5824] Bluetooth: hci3: hardware error 0x00
[  733.452046][ T3418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  734.339090][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'.
[  734.561775][T13656] lo speed is unknown, defaulting to 1000
[  735.388347][ T5824] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  735.495456][T13662] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1848'.
[  736.370672][T13670] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  736.377290][T13670] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  736.385259][T13670] vhci_hcd vhci_hcd.0: Device attached
[  736.688278][ T5894] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  736.951365][T13671] vhci_hcd: connection reset by peer
[  737.017332][   T12] vhci_hcd vhci_hcd.2: stop threads
[  737.054113][   T12] vhci_hcd vhci_hcd.2: release socket
[  737.109080][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  737.132428][T13677] FAULT_INJECTION: forcing a failure.
[  737.132428][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  737.481228][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.4.1862 Not tainted syzkaller #0 PREEMPT(full) 
[  737.481251][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  737.481261][T13677] Call Trace:
[  737.481267][T13677]  <TASK>
[  737.481273][T13677]  dump_stack_lvl+0x16c/0x1f0
[  737.481300][T13677]  should_fail_ex+0x512/0x640
[  737.481328][T13677]  _copy_to_user+0x32/0xd0
[  737.481354][T13677]  simple_read_from_buffer+0xcb/0x170
[  737.481379][T13677]  proc_fail_nth_read+0x197/0x240
[  737.481398][T13677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  737.481417][T13677]  ? rw_verify_area+0xcf/0x6c0
[  737.481432][T13677]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  737.481443][T13677]  vfs_read+0x1e4/0xcf0
[  737.481456][T13677]  ? __pfx___mutex_lock+0x10/0x10
[  737.481473][T13677]  ? __pfx_vfs_read+0x10/0x10
[  737.481488][T13677]  ? __fget_files+0x20e/0x3c0
[  737.481506][T13677]  ksys_read+0x12a/0x250
[  737.481518][T13677]  ? __pfx_ksys_read+0x10/0x10
[  737.481530][T13677]  ? fdget+0x187/0x210
[  737.481545][T13677]  do_syscall_64+0xcd/0xf80
[  737.481561][T13677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.481571][T13677] RIP: 0033:0x7f901618e15c
[  737.481580][T13677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  737.481590][T13677] RSP: 002b:00007f901708e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  737.481599][T13677] RAX: ffffffffffffffda RBX: 00007f90163e6090 RCX: 00007f901618e15c
[  737.481606][T13677] RDX: 000000000000000f RSI: 00007f901708e0a0 RDI: 0000000000000005
[  737.481612][T13677] RBP: 00007f901708e090 R08: 0000000000000000 R09: 0000000000000000
[  737.481617][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.481623][T13677] R13: 00007f90163e6128 R14: 00007f90163e6090 R15: 00007ffdc42a9698
[  737.481636][T13677]  </TASK>
[  739.547768][ T1087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  740.532543][ T5866] libceph: connect (1)[c::]:6789 error -101
[  740.542113][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  740.816126][ T5866] libceph: connect (1)[c::]:6789 error -101
[  740.845491][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  740.919929][T13730] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1874'.
[  741.592389][ T5867] libceph: connect (1)[c::]:6789 error -101
[  741.599226][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  741.661460][T13719] ceph: No mds server is up or the cluster is laggy
[  741.834431][T13737] xt_hashlimit: size too large, truncated to 1048576
[  741.844190][ T5894] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  743.429484][   T30] audit: type=1400 audit(1768694501.284:600): avc:  denied  { read write } for  pid=13734 comm="syz.6.1877" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  743.461911][   T30] audit: type=1400 audit(1768694501.294:601): avc:  denied  { open } for  pid=13734 comm="syz.6.1877" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  743.525471][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1878'.
[  744.049287][T13786] FAULT_INJECTION: forcing a failure.
[  744.049287][T13786] name failslab, interval 1, probability 0, space 0, times 0
[  744.080994][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.5.1889 Not tainted syzkaller #0 PREEMPT(full) 
[  744.081016][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  744.081025][T13786] Call Trace:
[  744.081031][T13786]  <TASK>
[  744.081037][T13786]  dump_stack_lvl+0x16c/0x1f0
[  744.081065][T13786]  should_fail_ex+0x512/0x640
[  744.081088][T13786]  ? fs_reclaim_acquire+0xae/0x150
[  744.081112][T13786]  should_failslab+0xc2/0x120
[  744.081133][T13786]  __kmalloc_noprof+0xeb/0x910
[  744.081159][T13786]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  744.081187][T13786]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  744.081208][T13786]  tomoyo_realpath_from_path+0xc2/0x6e0
[  744.081232][T13786]  ? tomoyo_profile+0x47/0x60
[  744.081249][T13786]  tomoyo_path_number_perm+0x245/0x580
[  744.081267][T13786]  ? tomoyo_path_number_perm+0x237/0x580
[  744.081287][T13786]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  744.081309][T13786]  ? find_held_lock+0x2b/0x80
[  744.081356][T13786]  ? find_held_lock+0x2b/0x80
[  744.081379][T13786]  ? hook_file_ioctl_common+0x144/0x410
[  744.081400][T13786]  ? __fget_files+0x20e/0x3c0
[  744.081427][T13786]  security_file_ioctl+0x9b/0x240
[  744.081450][T13786]  __x64_sys_ioctl+0xb7/0x210
[  744.081472][T13786]  do_syscall_64+0xcd/0xf80
[  744.081495][T13786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  744.081511][T13786] RIP: 0033:0x7fa73878f749
[  744.081525][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  744.081538][T13786] RSP: 002b:00007fa7369f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  744.081553][T13786] RAX: ffffffffffffffda RBX: 00007fa7389e6090 RCX: 00007fa73878f749
[  744.081562][T13786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  744.081571][T13786] RBP: 00007fa7369f6090 R08: 0000000000000000 R09: 0000000000000000
[  744.081580][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.081589][T13786] R13: 00007fa7389e6128 R14: 00007fa7389e6090 R15: 00007ffe6e9e1638
[  744.081612][T13786]  </TASK>
[  744.081618][T13786] ERROR: Out of memory at tomoyo_realpath_from_path.
[  744.479967][T13800] netlink: 'syz.2.1892': attribute type 2 has an invalid length.
[  744.784174][   T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  744.837394][T13781] ceph: No mds server is up or the cluster is laggy
[  744.856390][ T5867] libceph: connect (1)[c::]:6789 error -101
[  744.863658][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  745.139704][ T5867] libceph: connect (1)[c::]:6789 error -101
[  745.159570][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  745.782395][ T5894] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[  745.869665][ T5867] libceph: connect (1)[c::]:6789 error -101
[  745.877422][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  745.969495][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'.
[  746.250426][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  746.256743][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  746.312391][ T5894] usb 5-1: No LPM exit latency info found, disabling LPM.
[  746.324553][ T5894] usb 5-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  746.332307][T11379] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  746.363000][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0
[  746.384278][ T5894] usb 5-1: string descriptor 0 read error: -22
[  746.396763][ T5894] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  746.415559][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.619059][T11379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  747.148386][T13839] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1902'.
[  747.197294][ T5894] usbhid 5-1:1.0: can't add hid device: -71
[  747.203318][ T5894] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  747.211331][T11379] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  747.213141][ T5894] usb 5-1: USB disconnect, device number 46
[  747.335048][T11379] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  747.360097][T11379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.393206][T11379] usb 6-1: config 0 descriptor??
[  747.401146][T13812] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  748.139274][T13857] lo speed is unknown, defaulting to 1000
[  748.223425][ T5867] libceph: connect (1)[c::]:6789 error -101
[  748.231625][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  748.253450][ T5867] libceph: connect (1)[c::]:6789 error -101
[  748.279373][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  748.578766][ T5867] libceph: connect (1)[c::]:6789 error -101
[  748.642119][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  749.257823][ T5867] libceph: connect (1)[c::]:6789 error -101
[  749.304081][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  749.378773][ T7335] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  749.673434][ T7335] usb 5-1: Using ep0 maxpacket: 32
[  749.680309][ T7335] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  749.689073][ T7335] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  749.697673][ T7335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  749.716676][ T7335] usb 5-1: config 1 has no interface number 0
[  749.723022][ T7335] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  749.745587][ T7335] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  750.112985][T13808] ceph: No mds server is up or the cluster is laggy
[  750.119733][ T7335] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  750.128809][ T7335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.143459][ T7335] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  750.152313][ T4150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  750.207813][T11379] usbhid 6-1:0.0: can't add hid device: -71
[  750.217702][T11379] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  750.233740][T11379] usb 6-1: USB disconnect, device number 35
[  750.502606][ T7335] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  750.793756][T13897] lo speed is unknown, defaulting to 1000
[  750.930487][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1916'.
[  751.558258][ T5894] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  751.680905][T11379] usb 5-1: USB disconnect, device number 47
[  751.715929][T11379] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  755.848617][ T6064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  756.130341][T13950] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1931'.
[  756.939653][T13956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1932'.
[  757.038408][T11379] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  757.188228][T11379] usb 3-1: Using ep0 maxpacket: 32
[  757.208723][T11379] usb 3-1: config 0 has an invalid interface number: 136 but max is 0
[  757.218474][T11379] usb 3-1: config 0 has no interface number 0
[  757.478084][T11379] usb 3-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb
[  757.494539][T11379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.511010][T11379] usb 3-1: Product: syz
[  757.519597][T11379] usb 3-1: Manufacturer: syz
[  757.531838][T11379] usb 3-1: SerialNumber: syz
[  757.550934][T11379] usb 3-1: config 0 descriptor??
[  757.567646][T11379] gspca_main: nw80x-2.14.0 probing 06a5:d001
[  757.777490][   T30] audit: type=1400 audit(1768694515.634:602): avc:  denied  { append } for  pid=13952 comm="syz.2.1933" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  757.984542][   T30] audit: type=1400 audit(1768694515.844:603): avc:  denied  { append } for  pid=13970 comm="syz.5.1938" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  757.984594][T13971] random: crng reseeded on system resumption
[  758.103873][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1934'.
[  758.478975][T11379] gspca_nw80x: reg_r err -110
[  758.483758][T11379] nw80x 3-1:0.136: probe with driver nw80x failed with error -110
[  758.557139][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'.
[  758.586424][T13954] nbd: must specify an index to disconnect
[  758.646769][ T5922] usb 3-1: USB disconnect, device number 49
[  758.923861][T13990] xt_hashlimit: size too large, truncated to 1048576
[  759.408366][ T5894] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  759.572339][T14009] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1944'.
[  759.882785][T14014] lo speed is unknown, defaulting to 1000
[  760.348338][ T5894] usb 7-1: Using ep0 maxpacket: 32
[  760.359285][ T5894] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  760.367643][ T5894] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  760.417489][ T5894] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  760.502812][ T5894] usb 7-1: config 1 has no interface number 0
[  760.560229][ T5894] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  760.577215][ T5921] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  760.671598][ T5894] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  760.768049][ T5894] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  760.788667][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.809989][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  760.833701][ T5894] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  760.848248][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  760.868227][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  760.986874][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  761.011144][ T5921] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  761.302672][T14031] lo speed is unknown, defaulting to 1000
[  761.378683][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.387542][ T5894] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[  761.396881][ T5921] usb 3-1: Product: syz
[  761.403677][ T5921] usb 3-1: Manufacturer: syz
[  761.441273][ T5921] usb 3-1: SerialNumber: syz
[  761.454560][ T5921] usb 3-1: config 0 descriptor??
[  761.500532][ T5921] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  761.529232][ T5921] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  761.568482][ T5921] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  761.598300][ T5894] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  761.653583][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  761.820091][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  761.859815][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  761.877220][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  761.909865][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  761.924710][ T5921] usb 7-1: USB disconnect, device number 21
[  761.933447][ T5921] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  761.952933][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  761.967540][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.990233][ T5894] usb 5-1: Product: syz
[  761.994484][ T5894] usb 5-1: Manufacturer: syz
[  761.999844][ T5894] usb 5-1: SerialNumber: syz
[  762.021441][ T5894] usb 5-1: config 0 descriptor??
[  762.036794][ T5894] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  762.052504][ T5894] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  762.077297][ T5894] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8
[  762.869043][ T5921] usb 3-1: USB disconnect, device number 50
[  762.876115][ T5921] garmin_gps 3-1:0.0: device disconnected
[  763.811028][T14074] lo speed is unknown, defaulting to 1000
[  763.935892][T14073] Process accounting resumed
[  763.959673][T11379] usb 5-1: USB disconnect, device number 48
[  763.967150][T11379] garmin_gps 5-1:0.0: device disconnected
[  764.422528][T14086] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1956'.
[  765.076662][T14100] netlink: 'syz.4.1958': attribute type 1 has an invalid length.
[  766.000166][T14108] syzkaller0: entered promiscuous mode
[  766.005669][T14108] syzkaller0: entered allmulticast mode
[  766.759849][T14133] lo speed is unknown, defaulting to 1000
[  767.124395][T11379] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  767.226991][ T5894] libceph: connect (1)[c::]:6789 error -101
[  767.260048][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  767.289758][T11379] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.323683][T11379] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  767.343868][T11379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  767.356011][T11379] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  767.385301][ T3418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  767.390030][T11379] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  767.548258][ T5894] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  767.638961][ T5921] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  767.658182][T11379] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.689534][   T48] libceph: connect (1)[c::]:6789 error -101
[  767.695528][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  767.706669][T11379] usb 7-1: Product: syz
[  767.728155][T11379] usb 7-1: Manufacturer: syz
[  767.759100][T11379] usb 7-1: SerialNumber: syz
[  767.780678][ T5894] usb 5-1: Using ep0 maxpacket: 32
[  767.793737][ T5894] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  767.802659][T11379] usb 7-1: config 0 descriptor??
[  767.822390][ T5894] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  767.832871][T11379] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected
[  767.840498][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  767.871697][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  767.884631][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  767.902001][ T5894] usb 5-1: config 1 has no interface number 0
[  767.902360][T11379] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  767.913202][ T5921] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  767.937773][ T5894] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  767.949289][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.966297][T11379] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  767.975998][ T5894] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  767.996869][ T5921] usb 6-1: config 0 descriptor??
[  768.007907][ T5894] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  768.019767][T14147] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  768.026957][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.170122][ T5894] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  768.248866][   T48] libceph: connect (1)[c::]:6789 error -101
[  768.383375][T14141] ceph: No mds server is up or the cluster is laggy
[  768.392319][ T5894] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  768.401305][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  768.459166][ T5921] usbhid 6-1:0.0: can't add hid device: -71
[  768.466229][ T5921] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  768.507140][ T5921] usb 6-1: USB disconnect, device number 36
[  768.522097][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1966'.
[  768.816471][T11379] usb 5-1: USB disconnect, device number 49
[  768.823872][T11379] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  768.953012][T14176] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1969'.
[  769.441571][ T5894] usb 7-1: USB disconnect, device number 22
[  769.456656][ T5894] garmin_gps 7-1:0.0: device disconnected
[  769.585224][T14183] FAULT_INJECTION: forcing a failure.
[  769.585224][T14183] name failslab, interval 1, probability 0, space 0, times 0
[  769.610705][T14183] CPU: 1 UID: 0 PID: 14183 Comm: syz.5.1972 Not tainted syzkaller #0 PREEMPT(full) 
[  769.610723][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  769.610728][T14183] Call Trace:
[  769.610732][T14183]  <TASK>
[  769.610736][T14183]  dump_stack_lvl+0x16c/0x1f0
[  769.610755][T14183]  should_fail_ex+0x512/0x640
[  769.610771][T14183]  ? fs_reclaim_acquire+0xae/0x150
[  769.610787][T14183]  should_failslab+0xc2/0x120
[  769.610801][T14183]  __kmalloc_noprof+0xeb/0x910
[  769.610818][T14183]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  769.610836][T14183]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  769.610850][T14183]  tomoyo_realpath_from_path+0xc2/0x6e0
[  769.610866][T14183]  ? tomoyo_profile+0x47/0x60
[  769.610876][T14183]  tomoyo_path_number_perm+0x245/0x580
[  769.610888][T14183]  ? tomoyo_path_number_perm+0x237/0x580
[  769.610904][T14183]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  769.610917][T14183]  ? find_held_lock+0x2b/0x80
[  769.610945][T14183]  ? find_held_lock+0x2b/0x80
[  769.610959][T14183]  ? hook_file_ioctl_common+0x144/0x410
[  769.610973][T14183]  ? __fget_files+0x20e/0x3c0
[  769.610990][T14183]  security_file_ioctl+0x9b/0x240
[  769.611005][T14183]  __x64_sys_ioctl+0xb7/0x210
[  769.611018][T14183]  do_syscall_64+0xcd/0xf80
[  769.611034][T14183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.611044][T14183] RIP: 0033:0x7fa73878f749
[  769.611062][T14183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  769.611072][T14183] RSP: 002b:00007fa7369f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  769.611082][T14183] RAX: ffffffffffffffda RBX: 00007fa7389e6090 RCX: 00007fa73878f749
[  769.611088][T14183] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  769.611094][T14183] RBP: 00007fa7369f6090 R08: 0000000000000000 R09: 0000000000000000
[  769.611100][T14183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.611106][T14183] R13: 00007fa7389e6128 R14: 00007fa7389e6090 R15: 00007ffe6e9e1638
[  769.611119][T14183]  </TASK>
[  769.611160][T14183] ERROR: Out of memory at tomoyo_realpath_from_path.
[  770.002861][T14183] kvm: emulating exchange as write
[  770.213271][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'.
[  771.339735][ T5866] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  771.668814][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1978'.
[  771.754130][ T5866] usb 6-1: config 0 interface 0 has no altsetting 0
[  772.038990][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  772.078198][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.106093][ T5866] usb 6-1: config 0 descriptor??
[  772.422951][T14229] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1981'.
[  772.539130][T14230] xt_hashlimit: size too large, truncated to 1048576
[  773.395538][T14239] lo speed is unknown, defaulting to 1000
[  773.452706][ T5866] video4linux radio48: keene_cmd_main failed (-110)
[  773.462877][ T6344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  773.476373][ T5866] radio-keene 6-1:0.0: V4L2 device registered as radio48
[  773.484844][ T5866] usb 6-1: USB disconnect, device number 37
[  773.728181][   T48] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  774.031029][   T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.138222][   T48] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  774.153857][   T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  774.166024][   T48] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  774.184000][   T48] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  774.195575][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.204838][   T48] usb 5-1: Product: syz
[  774.209300][   T48] usb 5-1: Manufacturer: syz
[  774.215028][   T48] usb 5-1: SerialNumber: syz
[  774.224592][   T48] usb 5-1: config 0 descriptor??
[  774.276837][   T48] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  774.467647][   T48] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  774.611555][   T48] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  775.500583][   T48] libceph: connect (1)[c::]:6789 error -101
[  775.507835][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  775.778631][   T48] usb 5-1: USB disconnect, device number 50
[  775.786960][   T48] garmin_gps 5-1:0.0: device disconnected
[  775.794082][ T5894] libceph: connect (1)[c::]:6789 error -101
[  775.801885][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  776.158228][ T5866] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  776.275710][T14293] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1994'.
[  776.323897][   T48] libceph: connect (1)[c::]:6789 error -101
[  776.335626][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  776.352845][T11379] libceph: connect (1)[c::]:6789 error -101
[  776.634031][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  776.961962][T11379] libceph: connect (1)[c::]:6789 error -101
[  776.978243][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  777.053016][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  777.071111][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  777.121213][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  777.162117][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.186177][T14286] ceph: No mds server is up or the cluster is laggy
[  777.221623][ T5866] usb 3-1: config 0 descriptor??
[  777.307825][T14278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  778.238545][ T5894] libceph: connect (1)[c::]:6789 error -101
[  778.244634][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  778.420770][T14274] ceph: No mds server is up or the cluster is laggy
[  778.772436][ T5866] usbhid 3-1:0.0: can't add hid device: -71
[  778.778938][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  778.926010][ T3939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  779.189032][ T5866] usb 3-1: USB disconnect, device number 51
[  780.841602][T14336] lo speed is unknown, defaulting to 1000
[  780.888276][ T5894] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  780.989720][T14341] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2006'.
[  781.090455][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  781.138555][   T48] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  781.230883][ T5894] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  781.275727][ T5894] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  781.322745][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.601953][   T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  781.618762][ T5894] usb 5-1: config 0 descriptor??
[  781.696973][ T5894] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  781.724043][   T48] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  781.735192][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  781.748599][ T5894] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  781.761537][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  781.782788][   T48] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  781.893723][ T5894] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  782.048262][ T5894] usb 5-1: media controller created
[  782.060329][   T48] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  782.069893][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  782.078242][   T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.087069][   T48] usb 7-1: Product: syz
[  782.101110][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  782.114466][   T48] usb 7-1: Manufacturer: syz
[  782.122980][ T5894] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  782.130143][   T48] usb 7-1: SerialNumber: syz
[  782.154955][   T48] usb 7-1: config 0 descriptor??
[  782.165368][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25
[  782.193490][   T48] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected
[  782.205424][ T5894] dvb-usb: schedule remote query interval to 150 msecs.
[  782.220519][   T48] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  782.234357][ T5894] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  782.246943][   T48] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  782.390279][   T48] dvb-usb: bulk message failed: -22 (1/0)
[  782.405769][   T48] dvb-usb: error while querying for an remote control event.
[  782.453771][T14322] dibusb: i2c wr: len=8192 is too big!
[  782.453771][T14322] 
[  782.578492][   T48] dvb-usb: bulk message failed: -22 (1/0)
[  782.593031][   T48] dvb-usb: error while querying for an remote control event.
[  782.600646][   T30] audit: type=1400 audit(1768694540.454:604): avc:  denied  { mounton } for  pid=14321 comm="syz.4.2002" path="/proc/1445/cgroup" dev="proc" ino=48072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  782.908823][   T48] dvb-usb: bulk message failed: -22 (1/0)
[  782.923451][   T48] dvb-usb: error while querying for an remote control event.
[  782.972774][   T48] usb 5-1: USB disconnect, device number 51
[  783.020996][   T48] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  783.748707][T11379] usb 7-1: USB disconnect, device number 23
[  783.756347][T11379] garmin_gps 7-1:0.0: device disconnected
[  784.648993][ T6064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  784.882104][T14380] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2018'.
[  785.895619][T14377] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11)
[  785.902221][T14377] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  785.909885][T14377] vhci_hcd vhci_hcd.0: Device attached
[  786.037342][T14381] syzkaller0: entered promiscuous mode
[  786.088964][T14381] syzkaller0: entered allmulticast mode
[  786.179723][ T5866] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  786.266310][T14398] vhci_hcd: connection reset by peer
[  786.271908][ T4511] vhci_hcd vhci_hcd.6: stop threads
[  786.277232][ T4511] vhci_hcd vhci_hcd.6: release socket
[  786.439280][ T4511] vhci_hcd vhci_hcd.6: disconnect device
[  787.378184][ T5874] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  787.550930][ T5874] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  787.578192][ T5874] usb 6-1: config 1 has no interface number 1
[  787.614818][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  787.750609][ T5874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  787.842343][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.042477][ T5874] usb 6-1: Product: syz
[  788.050718][ T5874] usb 6-1: Manufacturer: syz
[  788.055333][ T5874] usb 6-1: SerialNumber: syz
[  788.284404][T11379] libceph: connect (1)[c::]:6789 error -101
[  788.298333][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  788.560647][T11379] libceph: connect (1)[c::]:6789 error -101
[  788.566795][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  788.581226][ T5874] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[  788.594615][ T5874] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[  788.798605][ T7335] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  788.799730][ T5874] usb 6-1: failed to enable PITCH for EP 0x82
[  788.886445][ T5874] usb 6-1: USB disconnect, device number 38
[  788.965916][ T7335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  789.109279][ T5874] libceph: connect (1)[c::]:6789 error -101
[  789.248237][ T7335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  789.268540][ T7335] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  789.283009][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  789.283639][ T7335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.313335][ T7335] usb 3-1: config 0 descriptor??
[  789.357543][T14424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  789.578466][T14421] ceph: No mds server is up or the cluster is laggy
[  789.720198][ T7335] usbhid 3-1:0.0: can't add hid device: -71
[  789.726188][ T7335] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  789.861521][ T7335] usb 3-1: USB disconnect, device number 52
[  790.409226][ T6344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  790.839855][T14442] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2033'.
[  791.745499][ T5866] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  792.115320][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2038'.
[  794.233686][ T5926] libceph: connect (1)[c::]:6789 error -101
[  794.242819][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  794.598591][ T5926] libceph: connect (1)[c::]:6789 error -101
[  794.641487][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  795.236733][T14491] lo speed is unknown, defaulting to 1000
[  795.336358][ T7335] libceph: connect (1)[c::]:6789 error -101
[  795.342571][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  795.388846][T14477] ceph: No mds server is up or the cluster is laggy
[  795.509117][ T5866] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  795.682297][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.727407][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  795.748170][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  795.761831][   T30] audit: type=1400 audit(1768694553.634:605): avc:  denied  { listen } for  pid=14498 comm="syz.5.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  795.795106][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  795.831905][   T30] audit: type=1400 audit(1768694553.654:606): avc:  denied  { accept } for  pid=14498 comm="syz.5.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  795.840153][ T5866] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  795.927753][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.956306][ T5866] usb 3-1: Product: syz
[  795.968138][ T5866] usb 3-1: Manufacturer: syz
[  795.976567][ T5866] usb 3-1: SerialNumber: syz
[  796.001430][ T5866] usb 3-1: config 0 descriptor??
[  796.172582][ T5866] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  796.181308][ T5866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  796.192044][ T5866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  797.562843][T14525] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2048'.
[  797.833003][ T7335] usb 3-1: USB disconnect, device number 53
[  797.972880][ T7335] garmin_gps 3-1:0.0: device disconnected
[  798.130831][ T5894] libceph: connect (1)[c::]:6789 error -101
[  798.136915][ T5894] libceph: mon0 (1)[c::]:6789 connect error
[  798.638236][ T5866] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  798.769840][ T7335] libceph: connect (1)[c::]:6789 error -101
[  798.784766][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  798.822484][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  798.854328][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  798.897004][ T5866] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  798.925000][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.969303][T11379] libceph: connect (1)[c::]:6789 error -101
[  798.981996][ T5866] usb 5-1: config 0 descriptor??
[  798.985796][ T7335] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  798.987102][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  799.005393][T14543] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  799.965173][T11379] libceph: connect (1)[c::]:6789 error -101
[  799.968604][ T5921] libceph: connect (1)[c::]:6789 error -101
[  799.980405][ T5921] libceph: mon0 (1)[c::]:6789 connect error
[  799.984145][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  800.180831][T14554] ceph: No mds server is up or the cluster is laggy
[  800.188179][ T7335] usb 7-1: Using ep0 maxpacket: 32
[  800.203971][ T7335] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  800.230942][ T7335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.279955][ T7335] usb 7-1: config 0 descriptor??
[  800.396732][T14560] xt_hashlimit: size too large, truncated to 1048576
[  800.546410][ T7335] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  800.561271][ T7335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  800.629281][ T7335] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  800.655288][ T7335] usb 7-1: media controller created
[  800.696035][ T7335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  800.767838][T14530] ceph: No mds server is up or the cluster is laggy
[  800.948158][ T5866] usbhid 5-1:0.0: can't add hid device: -71
[  800.957615][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  800.988706][ T5866] usb 5-1: USB disconnect, device number 52
[  801.588175][ T7335] stb0899_attach: Driver disabled by Kconfig
[  801.852938][ T7335] az6027: no front-end attached
[  801.852938][ T7335] 
[  801.899696][ T7335] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  801.932292][T14575] FAULT_INJECTION: forcing a failure.
[  801.932292][T14575] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  802.002021][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.6.2057 Not tainted syzkaller #0 PREEMPT(full) 
[  802.002039][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  802.002046][T14575] Call Trace:
[  802.002049][T14575]  <TASK>
[  802.002053][T14575]  dump_stack_lvl+0x16c/0x1f0
[  802.002073][T14575]  should_fail_ex+0x512/0x640
[  802.002092][T14575]  _copy_to_user+0x32/0xd0
[  802.002109][T14575]  simple_read_from_buffer+0xcb/0x170
[  802.002124][T14575]  proc_fail_nth_read+0x197/0x240
[  802.002136][T14575]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  802.002148][T14575]  ? rw_verify_area+0xcf/0x6c0
[  802.002159][T14575]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  802.002169][T14575]  vfs_read+0x1e4/0xcf0
[  802.002182][T14575]  ? __pfx___mutex_lock+0x10/0x10
[  802.002198][T14575]  ? __pfx_vfs_read+0x10/0x10
[  802.002214][T14575]  ? __fget_files+0x20e/0x3c0
[  802.002232][T14575]  ksys_read+0x12a/0x250
[  802.002244][T14575]  ? __pfx_ksys_read+0x10/0x10
[  802.002257][T14575]  ? fdget+0x187/0x210
[  802.002272][T14575]  do_syscall_64+0xcd/0xf80
[  802.002288][T14575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.002298][T14575] RIP: 0033:0x7f7523b8e15c
[  802.002307][T14575] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  802.002316][T14575] RSP: 002b:00007f7524a05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  802.002326][T14575] RAX: ffffffffffffffda RBX: 00007f7523de6090 RCX: 00007f7523b8e15c
[  802.002333][T14575] RDX: 000000000000000f RSI: 00007f7524a050a0 RDI: 0000000000000004
[  802.002338][T14575] RBP: 00007f7524a05090 R08: 0000000000000000 R09: 0000000000000000
[  802.002345][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  802.002354][T14575] R13: 00007f7523de6128 R14: 00007f7523de6090 R15: 00007ffd807fa138
[  802.002377][T14575]  </TASK>
[  802.194424][ T7335] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26
[  802.349057][ T7335] dvb-usb: schedule remote query interval to 400 msecs.
[  802.356024][ T7335] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  802.428332][ T7335] usb 7-1: USB disconnect, device number 24
[  802.887619][T14582] lo speed is unknown, defaulting to 1000
[  803.632461][ T7335] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  804.965201][ T5866] libceph: connect (1)[c::]:6789 error -101
[  804.976900][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  805.977588][ T5866] libceph: connect (1)[c::]:6789 error -101
[  805.985941][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  806.193171][T14603] ceph: No mds server is up or the cluster is laggy
[  807.069722][T14625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2067'.
[  807.749709][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  807.760895][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  808.291778][   T30] audit: type=1400 audit(1768694566.154:607): avc:  denied  { mounton } for  pid=14635 comm="syz.4.2076" path="/396/file0" dev="proc" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1
[  808.643147][   T30] audit: type=1400 audit(1768694566.504:608): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  808.968286][ T5926] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  809.208909][ T5926] usb 7-1: Using ep0 maxpacket: 16
[  809.226341][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.258172][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  809.670355][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  809.708606][ T5926] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  809.737726][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.798510][ T5926] usb 7-1: config 0 descriptor??
[  810.168483][ T5874] libceph: connect (1)[c::]:6789 error -101
[  810.468350][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  810.468442][T14665] lo speed is unknown, defaulting to 1000
[  810.736217][ T5874] libceph: connect (1)[c::]:6789 error -101
[  810.798437][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  810.804989][T14650] ceph: No mds server is up or the cluster is laggy
[  810.899990][ T5921] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  810.968943][ T5874] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  811.062619][ T5926] usbhid 7-1:0.0: can't add hid device: -71
[  811.090325][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  811.159652][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  811.178786][ T5926] usb 7-1: USB disconnect, device number 25
[  811.179658][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.189442][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  811.197272][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  811.299850][T14679] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2086'.
[  811.315390][ T5921] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  811.328809][T11379] libceph: connect (1)[c::]:6789 error -101
[  811.344463][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.348293][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  811.363396][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  811.408641][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  811.599568][ T5874] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  811.609086][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.617131][ T5874] usb 3-1: Product: syz
[  811.621518][ T5874] usb 3-1: Manufacturer: syz
[  811.628703][ T5874] usb 3-1: SerialNumber: syz
[  811.635366][ T5874] usb 3-1: config 0 descriptor??
[  811.640948][ T5921] usb 6-1: config 0 descriptor??
[  811.656741][ T5874] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  811.669291][ T5874] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  811.688790][ T5874] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  811.689177][T14668] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  812.482768][T14659] ceph: No mds server is up or the cluster is laggy
[  813.043784][ T5921] usbhid 6-1:0.0: can't add hid device: -71
[  813.067176][ T5921] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  813.092046][ T5921] usb 6-1: USB disconnect, device number 39
[  813.393497][ T5926] usb 3-1: USB disconnect, device number 54
[  813.401831][ T5926] garmin_gps 3-1:0.0: device disconnected
[  813.457039][   T30] audit: type=1400 audit(1768694571.314:609): avc:  denied  { setopt } for  pid=14694 comm="syz.6.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  813.477047][T14695] FAULT_INJECTION: forcing a failure.
[  813.477047][T14695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  813.538279][T14695] CPU: 1 UID: 0 PID: 14695 Comm: syz.6.2092 Not tainted syzkaller #0 PREEMPT(full) 
[  813.538303][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  813.538312][T14695] Call Trace:
[  813.538318][T14695]  <TASK>
[  813.538324][T14695]  dump_stack_lvl+0x16c/0x1f0
[  813.538351][T14695]  should_fail_ex+0x512/0x640
[  813.538379][T14695]  _copy_from_user+0x2e/0xd0
[  813.538405][T14695]  copy_msghdr_from_user+0x98/0x160
[  813.538425][T14695]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  813.538454][T14695]  ___sys_sendmsg+0xfe/0x1d0
[  813.538473][T14695]  ? __pfx____sys_sendmsg+0x10/0x10
[  813.538520][T14695]  __sys_sendmsg+0x16d/0x220
[  813.538539][T14695]  ? __pfx___sys_sendmsg+0x10/0x10
[  813.538571][T14695]  do_syscall_64+0xcd/0xf80
[  813.538594][T14695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.538616][T14695] RIP: 0033:0x7f7523b8f749
[  813.538629][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.538644][T14695] RSP: 002b:00007f7524a26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  813.538659][T14695] RAX: ffffffffffffffda RBX: 00007f7523de5fa0 RCX: 00007f7523b8f749
[  813.538668][T14695] RDX: 00000000040080c0 RSI: 0000200000000180 RDI: 0000000000000004
[  813.538677][T14695] RBP: 00007f7524a26090 R08: 0000000000000000 R09: 0000000000000000
[  813.538686][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.538694][T14695] R13: 00007f7523de6038 R14: 00007f7523de5fa0 R15: 00007ffd807fa138
[  813.538714][T14695]  </TASK>
[  814.109104][T14703] overlay: ./file0 is not a directory
[  814.561636][T11379] libceph: connect (1)[c::]:6789 error -101
[  814.567712][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  815.466062][T11379] libceph: connect (1)[c::]:6789 error -101
[  815.473568][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  815.486129][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  815.803708][T14707] ceph: No mds server is up or the cluster is laggy
[  817.202731][T14743] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2101'.
[  817.346970][   T30] audit: type=1800 audit(1768694575.124:610): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2102" name="nullb0" dev="tmpfs" ino=655 res=0 errno=0
[  817.829822][T14750] binder: 14746:14750 ioctl c100565c 0 returned -22
[  819.105441][T14751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  819.112050][T14751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  819.138476][T14751] vhci_hcd vhci_hcd.0: Device attached
[  819.184049][T14751] syzkaller0: entered promiscuous mode
[  819.189611][T14751] syzkaller0: entered allmulticast mode
[  819.477704][T14762] vhci_hcd: connection closed
[  819.478355][ T5874] usb 37-1: new high-speed USB device number 4 using vhci_hcd
[  819.544621][ T4150] vhci_hcd vhci_hcd.2: stop threads
[  819.646960][ T4150] vhci_hcd vhci_hcd.2: release socket
[  819.769924][ T4150] vhci_hcd vhci_hcd.2: disconnect device
[  820.568480][ T7335] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  820.930296][T14775] 9pnet_fd: Insufficient options for proto=fd
[  821.112502][ T7335] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  821.125444][ T7335] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  821.135720][ T6344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  821.159158][ T7335] usb 5-1: config 1 interface 0 has no altsetting 0
[  821.177075][ T7335] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  821.188525][ T7335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.204871][ T7335] usb 5-1: Product: syz
[  821.222723][ T7335] usb 5-1: Manufacturer: syz
[  821.234714][ T7335] usb 5-1: SerialNumber: syz
[  821.251199][T14768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  821.274999][T14768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  822.231462][T14768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.248521][T14768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.390590][ T7335] rtl8150 5-1:1.0: couldn't reset the device
[  822.490522][ T7335] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  822.503875][   T48] libceph: connect (1)[c::]:6789 error -101
[  822.512746][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  822.761169][ T7335] usb 5-1: USB disconnect, device number 53
[  822.844018][   T48] libceph: connect (1)[c::]:6789 error -101
[  822.848208][T11379] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  822.863335][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  823.148869][T11379] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  823.182964][T11379] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  823.206429][T11379] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  823.236176][T11379] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.277326][T11379] usb 6-1: config 0 descriptor??
[  823.287222][T14806] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  823.488421][ T5926] libceph: connect (1)[c::]:6789 error -101
[  823.494886][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  823.962547][T14800] ceph: No mds server is up or the cluster is laggy
[  824.761055][ T5874] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  824.797402][T11379] usbhid 6-1:0.0: can't add hid device: -71
[  824.860683][ T5867] libceph: connect (1)[c::]:6789 error -101
[  824.870663][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  824.988414][T11379] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  825.078902][T11379] usb 6-1: USB disconnect, device number 40
[  825.442029][ T5867] libceph: connect (1)[c::]:6789 error -101
[  825.448034][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  825.681571][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  826.027838][ T5866] libceph: connect (1)[c::]:6789 error -101
[  826.034175][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  826.759708][T14822] ceph: No mds server is up or the cluster is laggy
[  826.899331][ T6064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  827.745570][T14864] netlink: 'syz.6.2123': attribute type 10 has an invalid length.
[  827.854517][T14864] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2123'.
[  827.995352][T14864] batadv0: entered promiscuous mode
[  828.287441][T14864] batadv0: entered allmulticast mode
[  828.333385][ T5874] libceph: connect (1)[c::]:6789 error -101
[  828.339543][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  828.653820][ T5874] libceph: connect (1)[c::]:6789 error -101
[  828.660669][T14864] bridge0: port 3(batadv0) entered blocking state
[  828.670131][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  828.730287][T14864] bridge0: port 3(batadv0) entered disabled state
[  828.801119][T14864] bridge0: port 3(batadv0) entered blocking state
[  828.807661][T14864] bridge0: port 3(batadv0) entered forwarding state
[  829.372075][ T5926] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  829.382848][T14869] ceph: No mds server is up or the cluster is laggy
[  829.391603][ T6064] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  829.401165][ T6064] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  829.403999][ T5874] libceph: connect (1)[c::]:6789 error -101
[  829.416623][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  829.529476][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  829.553954][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  829.586068][ T5926] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  829.683659][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.864331][ T5926] usb 6-1: config 0 descriptor??
[  829.876666][T14879] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  829.969587][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'.
[  830.647295][T14874] ceph: No mds server is up or the cluster is laggy
[  830.660749][   T30] audit: type=1400 audit(1768694588.524:611): avc:  denied  { ioctl } for  pid=14895 comm="syz.4.2137" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  830.773648][ T5926] usbhid 6-1:0.0: can't add hid device: -71
[  830.808247][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  830.844364][ T5926] usb 6-1: USB disconnect, device number 41
[  831.980640][ T5926] libceph: connect (1)[c::]:6789 error -101
[  832.015218][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  832.602745][ T7335] libceph: connect (1)[c::]:6789 error -101
[  832.628713][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  832.658688][ T3418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  832.814054][T14913] ceph: No mds server is up or the cluster is laggy
[  832.832249][T14927] FAULT_INJECTION: forcing a failure.
[  832.832249][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.947530][T14927] CPU: 1 UID: 0 PID: 14927 Comm: syz.5.2144 Not tainted syzkaller #0 PREEMPT(full) 
[  832.947557][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  832.947566][T14927] Call Trace:
[  832.947572][T14927]  <TASK>
[  832.947578][T14927]  dump_stack_lvl+0x16c/0x1f0
[  832.947599][T14927]  should_fail_ex+0x512/0x640
[  832.947618][T14927]  _copy_to_user+0x32/0xd0
[  832.947635][T14927]  simple_read_from_buffer+0xcb/0x170
[  832.947652][T14927]  proc_fail_nth_read+0x197/0x240
[  832.947663][T14927]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  832.947675][T14927]  ? rw_verify_area+0xcf/0x6c0
[  832.947686][T14927]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  832.947697][T14927]  vfs_read+0x1e4/0xcf0
[  832.947710][T14927]  ? __pfx___mutex_lock+0x10/0x10
[  832.947726][T14927]  ? __pfx_vfs_read+0x10/0x10
[  832.947742][T14927]  ? __fget_files+0x20e/0x3c0
[  832.947761][T14927]  ksys_read+0x12a/0x250
[  832.947773][T14927]  ? __pfx_ksys_read+0x10/0x10
[  832.947789][T14927]  do_syscall_64+0xcd/0xf80
[  832.947806][T14927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.947816][T14927] RIP: 0033:0x7fa73878e15c
[  832.947825][T14927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  832.947835][T14927] RSP: 002b:00007fa7369f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  832.947845][T14927] RAX: ffffffffffffffda RBX: 00007fa7389e6090 RCX: 00007fa73878e15c
[  832.947852][T14927] RDX: 000000000000000f RSI: 00007fa7369f60a0 RDI: 0000000000000005
[  832.947858][T14927] RBP: 00007fa7369f6090 R08: 0000000000000000 R09: 0000000000000000
[  832.947863][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.947869][T14927] R13: 00007fa7389e6128 R14: 00007fa7389e6090 R15: 00007ffe6e9e1638
[  832.947882][T14927]  </TASK>
[  834.318476][T14936] block device autoloading is deprecated and will be removed.
[  834.431641][T14947] syzkaller0: entered promiscuous mode
[  834.442629][T14947] syzkaller0: entered allmulticast mode
[  835.076923][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'.
[  838.137115][T14985] lo speed is unknown, defaulting to 1000
[  838.422373][ T3418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  838.676916][ T7335] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  838.869802][ T7335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  838.916811][ T7335] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  839.581378][ T7335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  839.741848][ T7335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  839.781106][ T7335] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  839.833639][ T7335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.856349][ T7335] usb 5-1: Product: syz
[  839.974962][ T7335] usb 5-1: Manufacturer: syz
[  840.013854][ T7335] usb 5-1: SerialNumber: syz
[  840.030967][ T7335] usb 5-1: config 0 descriptor??
[  840.049104][T15006] afs: Unknown parameter '}sn·Ÿ³Ë÷Ëæ]òWŒ1vP)ˆ‹ºƒ71'
[  840.160976][T15006] netlink: 'syz.6.2163': attribute type 2 has an invalid length.
[  840.243217][ T7335] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  840.265433][ T7335] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  840.334503][ T7335] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  840.449900][ T5866] libceph: connect (1)[c::]:6789 error -101
[  840.470064][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  840.568549][ T5921] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  840.728863][ T5921] usb 7-1: Using ep0 maxpacket: 32
[  840.739245][ T5866] libceph: connect (1)[c::]:6789 error -101
[  840.746376][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  840.832415][ T5921] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  840.875786][ T5921] usb 7-1: config 0 has an invalid interface descriptor of length 5, skipping
[  841.009737][ T5921] usb 7-1: config 0 has no interface number 0
[  841.044746][ T5921] usb 7-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=56.54
[  841.075605][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.115345][ T5921] usb 7-1: config 0 descriptor??
[  841.278553][ T5867] libceph: connect (1)[c::]:6789 error -101
[  841.284692][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  841.315718][ T7335] usb 5-1: USB disconnect, device number 54
[  841.326650][ T7335] garmin_gps 5-1:0.0: device disconnected
[  841.362433][T15009] overlayfs: overlapping lowerdir path
[  841.597441][T15030] xt_hashlimit: size too large, truncated to 1048576
[  842.149913][ T5926] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  842.189891][ T5926] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  842.656138][T15047] netlink: 'syz.1.2171': attribute type 29 has an invalid length.
[  842.953480][ T5866] libceph: connect (1)[c::]:6789 error -101
[  842.960218][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  843.102514][ T5921] usb 7-1: string descriptor 0 read error: -71
[  843.215497][ T5921] usb 7-1: bad CDC descriptors
[  843.254781][ T5921] cdc_acm 7-1:0.69: Zero length descriptor references
[  843.268296][ T5921] cdc_acm 7-1:0.69: probe with driver cdc_acm failed with error -22
[  843.296204][ T5866] libceph: connect (1)[c::]:6789 error -101
[  843.299574][ T5921] usb 7-1: USB disconnect, device number 26
[  843.316432][T15010] ceph: No mds server is up or the cluster is laggy
[  843.501508][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  843.528805][ T6344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  843.768440][ T5866] libceph: connect (1)[c::]:6789 error -101
[  843.784665][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  844.004795][T15050] ceph: No mds server is up or the cluster is laggy
[  846.699168][T15091] xt_hashlimit: size too large, truncated to 1048576
[  847.069426][T15102] afs: Unknown parameter '}sn·Ÿ³Ë÷Ëæ]òWŒ1vP)ˆ‹ºƒ71'
[  847.086516][T15102] netlink: 'syz.1.2182': attribute type 2 has an invalid length.
[  847.117347][T15102] overlayfs: failed to clone lowerpath
[  848.669074][ T3525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  849.472825][T15124] misc userio: Invalid payload size
[  849.953351][T15128] syzkaller0: entered promiscuous mode
[  849.959029][T15128] syzkaller0: entered allmulticast mode
[  851.107797][T15147] ceph: No mds server is up or the cluster is laggy
[  851.378755][T15165] FAULT_INJECTION: forcing a failure.
[  851.378755][T15165] name failslab, interval 1, probability 0, space 0, times 0
[  851.438143][T15165] CPU: 1 UID: 0 PID: 15165 Comm: syz.5.2197 Not tainted syzkaller #0 PREEMPT(full) 
[  851.438166][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  851.438176][T15165] Call Trace:
[  851.438182][T15165]  <TASK>
[  851.438188][T15165]  dump_stack_lvl+0x16c/0x1f0
[  851.438215][T15165]  should_fail_ex+0x512/0x640
[  851.438240][T15165]  ? fs_reclaim_acquire+0xae/0x150
[  851.438264][T15165]  should_failslab+0xc2/0x120
[  851.438286][T15165]  __kmalloc_noprof+0xeb/0x910
[  851.438310][T15165]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  851.438345][T15165]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  851.438368][T15165]  tomoyo_realpath_from_path+0xc2/0x6e0
[  851.438393][T15165]  ? tomoyo_profile+0x47/0x60
[  851.438411][T15165]  tomoyo_path_number_perm+0x245/0x580
[  851.438430][T15165]  ? tomoyo_path_number_perm+0x237/0x580
[  851.438455][T15165]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  851.438476][T15165]  ? find_held_lock+0x2b/0x80
[  851.438519][T15165]  ? find_held_lock+0x2b/0x80
[  851.438540][T15165]  ? hook_file_ioctl_common+0x144/0x410
[  851.438559][T15165]  ? __fget_files+0x20e/0x3c0
[  851.438585][T15165]  security_file_ioctl+0x9b/0x240
[  851.438607][T15165]  __x64_sys_ioctl+0xb7/0x210
[  851.438628][T15165]  do_syscall_64+0xcd/0xf80
[  851.438650][T15165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  851.438666][T15165] RIP: 0033:0x7fa73878f749
[  851.438679][T15165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  851.438694][T15165] RSP: 002b:00007fa739547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  851.438709][T15165] RAX: ffffffffffffffda RBX: 00007fa7389e5fa0 RCX: 00007fa73878f749
[  851.438720][T15165] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003
[  851.438729][T15165] RBP: 00007fa739547090 R08: 0000000000000000 R09: 0000000000000000
[  851.438739][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  851.438748][T15165] R13: 00007fa7389e6038 R14: 00007fa7389e5fa0 R15: 00007ffe6e9e1638
[  851.438772][T15165]  </TASK>
[  851.443374][T15165] ERROR: Out of memory at tomoyo_realpath_from_path.
[  851.918339][ T7335] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  852.109483][ T7335] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  852.118589][ T7335] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  852.130646][ T7335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  852.141787][ T7335] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  852.151220][ T7335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.159934][ T7335] usb 5-1: Product: syz
[  852.164099][ T7335] usb 5-1: Manufacturer: syz
[  852.171428][ T7335] usb 5-1: SerialNumber: syz
[  853.534445][T15192] FAULT_INJECTION: forcing a failure.
[  853.534445][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  853.584667][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.2.2205 Not tainted syzkaller #0 PREEMPT(full) 
[  853.584690][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  853.584700][T15192] Call Trace:
[  853.584706][T15192]  <TASK>
[  853.584712][T15192]  dump_stack_lvl+0x16c/0x1f0
[  853.584742][T15192]  should_fail_ex+0x512/0x640
[  853.584769][T15192]  _copy_to_user+0x32/0xd0
[  853.584795][T15192]  simple_read_from_buffer+0xcb/0x170
[  853.584819][T15192]  proc_fail_nth_read+0x197/0x240
[  853.584837][T15192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  853.584856][T15192]  ? rw_verify_area+0xcf/0x6c0
[  853.584874][T15192]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  853.584892][T15192]  vfs_read+0x1e4/0xcf0
[  853.584911][T15192]  ? __pfx___mutex_lock+0x10/0x10
[  853.584934][T15192]  ? __pfx_vfs_read+0x10/0x10
[  853.584958][T15192]  ? __fget_files+0x20e/0x3c0
[  853.584989][T15192]  ksys_read+0x12a/0x250
[  853.585008][T15192]  ? __pfx_ksys_read+0x10/0x10
[  853.585036][T15192]  do_syscall_64+0xcd/0xf80
[  853.585060][T15192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.585077][T15192] RIP: 0033:0x7f0a7058e15c
[  853.585090][T15192] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  853.585106][T15192] RSP: 002b:00007f0a713b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  853.585123][T15192] RAX: ffffffffffffffda RBX: 00007f0a707e6090 RCX: 00007f0a7058e15c
[  853.585134][T15192] RDX: 000000000000000f RSI: 00007f0a713b80a0 RDI: 0000000000000005
[  853.585143][T15192] RBP: 00007f0a713b8090 R08: 0000000000000000 R09: 0000000000000000
[  853.585152][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.585161][T15192] R13: 00007f0a707e6128 R14: 00007f0a707e6090 R15: 00007ffcc4f67df8
[  853.585192][T15192]  </TASK>
[  853.588524][ T7335] usb 5-1: 0:2 : does not exist
[  854.276828][ T7335] usb 5-1: USB disconnect, device number 55
[  854.314719][T14991] udevd[14991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  854.412017][T10232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  854.768366][ T7335] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  854.781577][ T5926] libceph: connect (1)[c::]:6789 error -101
[  854.787983][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  854.802776][ T5926] libceph: connect (1)[c::]:6789 error -101
[  855.762039][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  855.919673][ T7335] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  855.938190][T15204] ceph: No mds server is up or the cluster is laggy
[  855.976793][ T7335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  856.108712][ T7335] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  856.117773][ T7335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.574149][ T7335] usb 6-1: Product: syz
[  856.578442][ T7335] usb 6-1: Manufacturer: syz
[  856.583859][ T7335] usb 6-1: SerialNumber: syz
[  857.253173][T15222] netlink: 'syz.6.2215': attribute type 1 has an invalid length.
[  857.488533][T15230] misc userio: Invalid payload size
[  857.818711][ T7335] usb 6-1: 0:2 : does not exist
[  857.824030][T15222] 8021q: adding VLAN 0 to HW filter on device bond1
[  857.943432][ T7335] usb 6-1: USB disconnect, device number 42
[  858.384600][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'.
[  859.045080][T15243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2220'.
[  860.082815][ T5926] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  860.177264][T10916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  860.611089][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  860.617785][ T5926] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  860.627034][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.157121][ T5926] usb 6-1: config 0 descriptor??
[  861.179571][ T5926] gspca_main: sunplus-2.14.0 probing 041e:400b
[  861.688967][ T5926] gspca_sunplus: reg_w_riv err -110
[  861.694389][ T5926] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[  862.307694][   T30] audit: type=1400 audit(1768694619.814:612): avc:  denied  { write } for  pid=15255 comm="syz.5.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  862.525997][ T5867] libceph: connect (1)[c::]:6789 error -101
[  862.672745][ T5867] libceph: mon0 (1)[c::]:6789 connect error
[  862.748625][ T5926] usb 6-1: USB disconnect, device number 43
[  862.888617][ T7335] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  862.971549][ T5866] libceph: connect (1)[c::]:6789 error -101
[  862.977971][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  863.104681][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2233'.
[  863.418645][ T7335] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  863.438294][ T7335] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  863.458315][ T7335] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  863.468179][ T7335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.488833][ T7335] usb 7-1: config 0 descriptor??
[  863.498431][T15291] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  863.505872][ T5866] libceph: connect (1)[c::]:6789 error -101
[  863.515816][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  864.928627][T11379] libceph: connect (1)[c::]:6789 error -101
[  864.934705][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  864.960376][T15276] ceph: No mds server is up or the cluster is laggy
[  865.637619][T15316] FAULT_INJECTION: forcing a failure.
[  865.637619][T15316] name failslab, interval 1, probability 0, space 0, times 0
[  865.651627][T15316] CPU: 0 UID: 0 PID: 15316 Comm: syz.2.2237 Not tainted syzkaller #0 PREEMPT(full) 
[  865.651652][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  865.651662][T15316] Call Trace:
[  865.651669][T15316]  <TASK>
[  865.651675][T15316]  dump_stack_lvl+0x16c/0x1f0
[  865.651702][T15316]  should_fail_ex+0x512/0x640
[  865.651728][T15316]  ? kmem_cache_alloc_noprof+0x62/0x770
[  865.651747][T15316]  should_failslab+0xc2/0x120
[  865.651767][T15316]  kmem_cache_alloc_noprof+0x83/0x770
[  865.651783][T15316]  ? getname_flags.part.0+0x4c/0x550
[  865.651802][T15316]  ? getname_flags.part.0+0x4c/0x550
[  865.651817][T15316]  getname_flags.part.0+0x4c/0x550
[  865.651836][T15316]  getname_flags+0x93/0xf0
[  865.651856][T15316]  do_sys_openat2+0xb9/0x290
[  865.651872][T15316]  ? __pfx_do_sys_openat2+0x10/0x10
[  865.651889][T15316]  ? __fget_files+0x20e/0x3c0
[  865.651918][T15316]  __x64_sys_open+0x153/0x1e0
[  865.651933][T15316]  ? __pfx___x64_sys_open+0x10/0x10
[  865.651953][T15316]  ? rcu_is_watching+0x12/0xc0
[  865.651972][T15316]  do_syscall_64+0xcd/0xf80
[  865.651996][T15316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  865.652012][T15316] RIP: 0033:0x7f0a7058f749
[  865.652026][T15316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  865.652043][T15316] RSP: 002b:00007f0a713d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  865.652060][T15316] RAX: ffffffffffffffda RBX: 00007f0a707e5fa0 RCX: 00007f0a7058f749
[  865.652071][T15316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  865.652081][T15316] RBP: 00007f0a713d9090 R08: 0000000000000000 R09: 0000000000000000
[  865.652090][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  865.652100][T15316] R13: 00007f0a707e6038 R14: 00007f0a707e5fa0 R15: 00007ffcc4f67df8
[  865.652124][T15316]  </TASK>
[  865.932953][ T3525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  865.980825][ T7335] usbhid 7-1:0.0: can't add hid device: -71
[  865.986771][ T7335] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  866.451162][ T7335] usb 7-1: USB disconnect, device number 27
[  867.969662][ T5926] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  868.359904][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.452117][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'.
[  868.814686][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  868.839119][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  868.851274][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  868.886167][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  868.919318][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.961717][ T5926] usb 3-1: Product: syz
[  868.974062][ T5926] usb 3-1: Manufacturer: syz
[  868.998886][ T5926] usb 3-1: SerialNumber: syz
[  869.045960][ T5926] usb 3-1: config 0 descriptor??
[  869.145814][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  869.152499][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  869.202373][ T5926] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  869.413260][ T5926] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  869.452404][ T5926] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  869.538200][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2249'.
[  870.611187][ T7335] usb 3-1: USB disconnect, device number 55
[  870.655855][ T7335] garmin_gps 3-1:0.0: device disconnected
[  871.688751][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  871.938451][   T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  872.341384][   T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  872.362740][   T24] usb 7-1: config 1 has no interface number 1
[  872.374353][   T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  872.394739][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  872.404980][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.413718][   T24] usb 7-1: Product: syz
[  872.675610][   T24] usb 7-1: Manufacturer: syz
[  872.685101][   T24] usb 7-1: SerialNumber: syz
[  872.723697][T11379] libceph: connect (1)[c::]:6789 error -101
[  872.729823][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  873.078576][ T7335] libceph: connect (1)[c::]:6789 error -101
[  873.085920][T11379] libceph: connect (1)[c::]:6789 error -101
[  873.108330][T11379] libceph: mon0 (1)[c::]:6789 connect error
[  873.118883][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  873.177813][   T24] usb 7-1: found format II with max.bitrate = 26774, frame size=2
[  873.196674][   T24] usb 7-1: found format II with max.bitrate = 26774, frame size=2
[  873.226747][   T24] usb 7-1: failed to enable PITCH for EP 0x82
[  873.398726][ T7335] libceph: connect (1)[c::]:6789 error -101
[  873.404720][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  873.418237][   T24] usb 7-1: USB disconnect, device number 28
[  873.852189][ T5866] libceph: connect (1)[c::]:6789 error -101
[  873.859816][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  873.918252][T11379] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  873.941987][T15013] udevd[15013]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  874.608646][ T7335] libceph: connect (1)[c::]:6789 error -101
[  874.615800][ T7335] libceph: mon0 (1)[c::]:6789 connect error
[  874.672740][T11379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  874.702005][T11379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  874.775409][T11379] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  874.838262][T11379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.957606][ T5866] libceph: connect (1)[c::]:6789 error -101
[  874.973696][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[  875.000692][T11379] usb 3-1: config 0 descriptor??
[  875.186454][T15414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  876.866423][   T24] libceph: connect (1)[c::]:6789 error -101
[  876.878409][T15400] ceph: No mds server is up or the cluster is laggy
[  876.879006][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  877.069344][ T5874] libceph: connect (1)[c::]:6789 error -101
[  877.143867][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  877.175195][T15444] syzkaller0: entered promiscuous mode
[  877.180712][T15444] syzkaller0: entered allmulticast mode
[  877.196333][   T48] libceph: connect (1)[c::]:6789 error -101
[  877.206226][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  877.854422][T10916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  877.857921][   T48] libceph: connect (1)[c::]:6789 error -101
[  877.871326][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  877.880302][ T5874] libceph: connect (1)[c::]:6789 error -101
[  877.886399][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  877.948723][T15403] ceph: No mds server is up or the cluster is laggy
[  878.388481][ T5930] libceph: connect (1)[c::]:6789 error -101
[  878.397740][ T5930] libceph: mon0 (1)[c::]:6789 connect error
[  878.901133][T11379] usbhid 3-1:0.0: can't add hid device: -71
[  878.916182][T11379] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  878.955725][T11379] usb 3-1: USB disconnect, device number 56
[  880.204289][T15466] lo speed is unknown, defaulting to 1000
[  880.358174][ T5930] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  880.560521][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  880.632185][ T5874] libceph: connect (1)[c::]:6789 error -101
[  880.648781][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  880.680712][T11379] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  880.738131][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  880.823279][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  881.000655][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  881.001045][ T5874] libceph: connect (1)[c::]:6789 error -101
[  881.022674][ T5930] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  881.047250][T11379] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  881.049146][T15481] afs: Unknown parameter '}sn·Ÿ³Ë÷Ëæ]òWŒ1vP)ˆ‹ºƒ71'
[  881.068121][T11379] usb 3-1: config 1 has no interface number 1
[  881.068195][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.083910][ T5930] usb 5-1: Product: syz
[  881.089766][ T5930] usb 5-1: Manufacturer: syz
[  881.094555][ T5930] usb 5-1: SerialNumber: syz
[  881.094639][T11379] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  881.102863][ T5930] usb 5-1: config 0 descriptor??
[  881.122912][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  881.158136][ T5926] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  881.167687][ T5930] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  881.188850][T15481] netlink: 'syz.1.2273': attribute type 2 has an invalid length.
[  881.209025][T11379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  881.230330][T15481] overlayfs: failed to clone lowerpath
[  881.239841][T11379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.281739][ T5930] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  881.302093][T11379] usb 3-1: Product: syz
[  881.306273][T11379] usb 3-1: Manufacturer: syz
[  881.312499][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  881.333587][T11379] usb 3-1: SerialNumber: syz
[  881.342596][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  881.374436][ T5930] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  881.417870][ T5926] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  881.430951][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.462768][ T5926] usb 7-1: config 0 descriptor??
[  881.477332][T15479] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  881.698513][ T5874] libceph: connect (1)[c::]:6789 error -101
[  881.714786][T15486] random: crng reseeded on system resumption
[  881.779417][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  882.008868][T11379] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  882.043695][T11379] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  882.089809][T11379] usb 3-1: failed to enable PITCH for EP 0x82
[  882.152283][T11379] usb 3-1: USB disconnect, device number 57
[  882.189030][T15475] ceph: No mds server is up or the cluster is laggy
[  882.288036][T15013] udevd[15013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  882.349469][ T5926] usbhid 7-1:0.0: can't add hid device: -71
[  882.382999][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  882.451776][ T5926] usb 7-1: USB disconnect, device number 29
[  882.604165][ T5867] usb 5-1: USB disconnect, device number 56
[  882.611801][ T5867] garmin_gps 5-1:0.0: device disconnected
[  883.261312][ T6060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  883.522271][ T5926] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  884.259313][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.348313][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  884.359148][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  884.376930][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  884.394508][ T5926] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  884.498263][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.506542][ T5926] usb 3-1: Product: syz
[  884.511046][ T5926] usb 3-1: Manufacturer: syz
[  884.518256][ T5926] usb 3-1: SerialNumber: syz
[  884.544760][ T5926] usb 3-1: config 0 descriptor??
[  884.624882][T15525] FAULT_INJECTION: forcing a failure.
[  884.624882][T15525] name failslab, interval 1, probability 0, space 0, times 0
[  884.637569][T15525] CPU: 1 UID: 0 PID: 15525 Comm: syz.6.2290 Not tainted syzkaller #0 PREEMPT(full) 
[  884.637593][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  884.637604][T15525] Call Trace:
[  884.637611][T15525]  <TASK>
[  884.637619][T15525]  dump_stack_lvl+0x16c/0x1f0
[  884.637647][T15525]  should_fail_ex+0x512/0x640
[  884.637674][T15525]  ? kmem_cache_alloc_noprof+0x62/0x770
[  884.637695][T15525]  should_failslab+0xc2/0x120
[  884.637718][T15525]  kmem_cache_alloc_noprof+0x83/0x770
[  884.637735][T15525]  ? getname_flags.part.0+0x4c/0x550
[  884.637757][T15525]  ? getname_flags.part.0+0x4c/0x550
[  884.637774][T15525]  getname_flags.part.0+0x4c/0x550
[  884.637794][T15525]  getname_flags+0x93/0xf0
[  884.637815][T15525]  user_path_at+0x24/0x60
[  884.637837][T15525]  inotify_find_inode+0x2e/0x160
[  884.637860][T15525]  __x64_sys_inotify_add_watch+0x20e/0x370
[  884.637883][T15525]  ? __pfx___x64_sys_inotify_add_watch+0x10/0x10
[  884.637904][T15525]  ? rcu_is_watching+0x12/0xc0
[  884.637927][T15525]  do_syscall_64+0xcd/0xf80
[  884.637952][T15525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.637969][T15525] RIP: 0033:0x7f7523b8f749
[  884.637984][T15525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  884.638001][T15525] RSP: 002b:00007f75249e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[  884.638018][T15525] RAX: ffffffffffffffda RBX: 00007f7523de6180 RCX: 00007f7523b8f749
[  884.638029][T15525] RDX: 0000000060000726 RSI: 0000200000000240 RDI: 0000000000000008
[  884.638039][T15525] RBP: 00007f75249e4090 R08: 0000000000000000 R09: 0000000000000000
[  884.638050][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.638059][T15525] R13: 00007f7523de6218 R14: 00007f7523de6180 R15: 00007ffd807fa138
[  884.638086][T15525]  </TASK>
[  884.895613][ T5926] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected
[  884.910922][ T5926] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  884.922084][ T5926] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  885.828853][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2292'.
[  885.847850][   T30] audit: type=1400 audit(1768694643.664:613): avc:  denied  { connect } for  pid=15527 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  886.167824][ T5874] usb 3-1: USB disconnect, device number 58
[  886.178593][ T5874] garmin_gps 3-1:0.0: device disconnected
[  887.527789][T15560] lo speed is unknown, defaulting to 1000
[  888.133908][T11379] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  888.727142][T11379] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  888.742068][T11379] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  888.754455][T11379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  888.765601][T11379] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  888.783722][T11379] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  888.913527][T11379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.984398][   T64] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  889.331990][T11379] usb 5-1: Product: syz
[  889.336196][T11379] usb 5-1: Manufacturer: syz
[  889.341335][T11379] usb 5-1: SerialNumber: syz
[  889.394756][T11379] usb 5-1: config 0 descriptor??
[  889.454966][T11379] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  889.505372][T11379] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  889.516475][   T30] audit: type=1400 audit(1768694647.384:614): avc:  denied  { read write } for  pid=15587 comm="syz.5.2303" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  889.564775][T11379] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  889.593791][   T30] audit: type=1400 audit(1768694647.414:615): avc:  denied  { open } for  pid=15587 comm="syz.5.2303" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  889.628832][T15589] FAULT_INJECTION: forcing a failure.
[  889.628832][T15589] name failslab, interval 1, probability 0, space 0, times 0
[  889.727055][T15589] CPU: 0 UID: 0 PID: 15589 Comm: syz.5.2303 Not tainted syzkaller #0 PREEMPT(full) 
[  889.727072][T15589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  889.727079][T15589] Call Trace:
[  889.727083][T15589]  <TASK>
[  889.727087][T15589]  dump_stack_lvl+0x16c/0x1f0
[  889.727107][T15589]  should_fail_ex+0x512/0x640
[  889.727125][T15589]  ? __kmalloc_cache_noprof+0x5f/0x800
[  889.727136][T15589]  ? __pfx_vga_arb_read+0x10/0x10
[  889.727148][T15589]  should_failslab+0xc2/0x120
[  889.727162][T15589]  ? __pfx_vga_arb_read+0x10/0x10
[  889.727173][T15589]  __kmalloc_cache_noprof+0x80/0x800
[  889.727183][T15589]  ? vga_arb_read+0x7a/0x5e0
[  889.727194][T15589]  ? selinux_file_permission+0x126/0x660
[  889.727210][T15589]  ? __pfx_vga_arb_read+0x10/0x10
[  889.727221][T15589]  ? vga_arb_read+0x7a/0x5e0
[  889.727231][T15589]  ? bpf_lsm_file_permission+0x9/0x10
[  889.727242][T15589]  vga_arb_read+0x7a/0x5e0
[  889.727253][T15589]  ? rw_verify_area+0xcf/0x6c0
[  889.727266][T15589]  ? __pfx_vga_arb_read+0x10/0x10
[  889.727276][T15589]  vfs_readv+0x5c1/0x8b0
[  889.727291][T15589]  ? __pfx_vfs_readv+0x10/0x10
[  889.727303][T15589]  ? find_held_lock+0x2b/0x80
[  889.727326][T15589]  ? __fget_files+0x20e/0x3c0
[  889.727344][T15589]  ? do_preadv+0x1a6/0x270
[  889.727355][T15589]  do_preadv+0x1a6/0x270
[  889.727367][T15589]  ? __pfx_do_preadv+0x10/0x10
[  889.727382][T15589]  do_syscall_64+0xcd/0xf80
[  889.727398][T15589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.727409][T15589] RIP: 0033:0x7fa73878f749
[  889.727417][T15589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.727428][T15589] RSP: 002b:00007fa739547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  889.727438][T15589] RAX: ffffffffffffffda RBX: 00007fa7389e5fa0 RCX: 00007fa73878f749
[  889.727445][T15589] RDX: 0000000000000001 RSI: 0000200000004300 RDI: 0000000000000003
[  889.727451][T15589] RBP: 00007fa739547090 R08: 0000000000000800 R09: 0000000000000000
[  889.727457][T15589] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  889.727462][T15589] R13: 00007fa7389e6038 R14: 00007fa7389e5fa0 R15: 00007ffe6e9e1638
[  889.727475][T15589]  </TASK>
[  891.099230][ T5926] usb 5-1: USB disconnect, device number 57
[  891.106760][ T5926] garmin_gps 5-1:0.0: device disconnected
[  892.019571][T15611] overlayfs: failed to clone upperpath
[  892.999515][ T5824] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  894.029767][T15629] 9p: Bad value for 'rfdno'
[  895.127457][   T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  897.710144][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2320'.
[  897.790466][T15666] 9p: Bad value for 'wfdno'
[  899.857031][   T30] audit: type=1400 audit(1768694657.664:616): avc:  denied  { setopt } for  pid=15692 comm="syz.6.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  900.488481][ T4150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  901.252788][   T30] audit: type=1400 audit(1768694659.114:617): avc:  denied  { shutdown } for  pid=15709 comm="syz.4.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  902.699733][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  902.708733][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  902.717019][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  902.724378][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  902.731729][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  903.351769][T15566] libceph: connect (1)[c::]:6789 error -101
[  903.380633][T15566] libceph: mon0 (1)[c::]:6789 connect error
[  903.725738][ T5926] libceph: connect (1)[c::]:6789 error -101
[  903.734102][ T5926] libceph: mon0 (1)[c::]:6789 connect error
[  904.038240][ T5867] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  904.147538][T15738] ceph: No mds server is up or the cluster is laggy
[  904.263767][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  904.278167][ T5867] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  904.303852][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  904.334389][T15730] lo speed is unknown, defaulting to 1000
[  904.418749][ T5867] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  904.450826][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.482652][ T5867] usb 6-1: Product: syz
[  904.486806][ T5867] usb 6-1: Manufacturer: syz
[  904.748453][ T5867] usb 6-1: SerialNumber: syz
[  904.780546][ T5867] usb 6-1: config 0 descriptor??
[  904.818207][ T5812] Bluetooth: hci0: command tx timeout
[  904.848380][T15747] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  905.046114][ T5867] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22
[  905.243800][T15731] lo speed is unknown, defaulting to 1000
[  906.248385][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  906.912026][ T5812] Bluetooth: hci0: command tx timeout
[  907.217748][T15731] chnl_net:caif_netlink_parms(): no params data found
[  907.335668][ T5867] usb 6-1: USB disconnect, device number 44
[  907.377620][T15779] FAULT_INJECTION: forcing a failure.
[  907.377620][T15779] name failslab, interval 1, probability 0, space 0, times 0
[  907.502428][T15784] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2352'.
[  907.532504][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.4.2350 Not tainted syzkaller #0 PREEMPT(full) 
[  907.532527][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  907.532536][T15779] Call Trace:
[  907.532543][T15779]  <TASK>
[  907.532550][T15779]  dump_stack_lvl+0x16c/0x1f0
[  907.532578][T15779]  should_fail_ex+0x512/0x640
[  907.532603][T15779]  ? fs_reclaim_acquire+0xae/0x150
[  907.532628][T15779]  should_failslab+0xc2/0x120
[  907.532651][T15779]  __kmalloc_noprof+0xeb/0x910
[  907.532678][T15779]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  907.532707][T15779]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[  907.532730][T15779]  tomoyo_realpath_from_path+0xc2/0x6e0
[  907.532756][T15779]  ? tomoyo_profile+0x47/0x60
[  907.532774][T15779]  tomoyo_path_number_perm+0x245/0x580
[  907.532794][T15779]  ? tomoyo_path_number_perm+0x237/0x580
[  907.532817][T15779]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  907.532839][T15779]  ? find_held_lock+0x2b/0x80
[  907.532886][T15779]  ? find_held_lock+0x2b/0x80
[  907.532909][T15779]  ? hook_file_ioctl_common+0x144/0x410
[  907.532932][T15779]  ? __fget_files+0x20e/0x3c0
[  907.532960][T15779]  security_file_ioctl+0x9b/0x240
[  907.532985][T15779]  __x64_sys_ioctl+0xb7/0x210
[  907.533006][T15779]  do_syscall_64+0xcd/0xf80
[  907.533037][T15779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  907.533054][T15779] RIP: 0033:0x7f901618f749
[  907.533068][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  907.533084][T15779] RSP: 002b:00007f901708e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  907.533100][T15779] RAX: ffffffffffffffda RBX: 00007f90163e6090 RCX: 00007f901618f749
[  907.533111][T15779] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  907.533121][T15779] RBP: 00007f901708e090 R08: 0000000000000000 R09: 0000000000000000
[  907.533131][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  907.533141][T15779] R13: 00007f90163e6128 R14: 00007f90163e6090 R15: 00007ffdc42a9698
[  907.533166][T15779]  </TASK>
[  907.533173][T15779] ERROR: Out of memory at tomoyo_realpath_from_path.
[  908.137012][T15731] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.147521][T15731] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.177883][T15731] bridge_slave_0: entered allmulticast mode
[  908.187007][T15731] bridge_slave_0: entered promiscuous mode
[  908.213200][T15731] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.279282][T15731] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.286468][T15731] bridge_slave_1: entered allmulticast mode
[  908.317033][T15731] bridge_slave_1: entered promiscuous mode
[  908.508927][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  908.538711][ T5866] libceph: connect (1)[c::]:6789 error -101
[  908.540068][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.558463][ T5866] libceph: mon0 (1)[c::]:6789 connect error
[ 1013.598052][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1013.605014][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P15803/1:b..l P15793/1:b..l
[ 1013.614586][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=58129, q=248 ncpus=2)
[ 1013.622278][    C1] task:syz.5.2352      state:R  running task     stack:24040 pid:15793 tgid:15793 ppid:6124   task_flags:0x400640 flags:0x00080000
[ 1013.636570][    C1] Call Trace:
[ 1013.639836][    C1]  <TASK>
[ 1013.642742][    C1]  ? __schedule+0x10b9/0x6150
[ 1013.647397][    C1]  __schedule+0x1139/0x6150
[ 1013.651879][    C1]  ? do_fault+0x9fb/0x1ad0
[ 1013.656275][    C1]  ? __pfx___schedule+0x10/0x10
[ 1013.661099][    C1]  ? mark_held_locks+0x49/0x80
[ 1013.665833][    C1]  preempt_schedule_irq+0x51/0x90
[ 1013.670828][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1013.675388][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1013.680124][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1013.685574][    C1] RIP: 0010:lock_acquire+0x62/0x330
[ 1013.690740][    C1] Code: e3 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 52 c1 ee 0e 0f 82 74 02 00 00 8b 35 ea f1 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 69 e3 18 12 0f 85 ad 02 00 00 48 83 c4
[ 1013.710313][    C1] RSP: 0018:ffffc90004a6ee20 EFLAGS: 00000206
[ 1013.716356][    C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000747ed0a7
[ 1013.724305][    C1] RDX: 0000000000000000 RSI: ffffffff8daa967a RDI: ffffffff8bf2b580
[ 1013.732257][    C1] RBP: 0000000000000002 R08: 00000000f9a44957 R09: 000000007f9a4495
[ 1013.740196][    C1] R10: 0000000000000002 R11: ffff88802f11aff0 R12: 0000000000000000
[ 1013.748135][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1013.756080][    C1]  ? follow_page_pte+0x5cf/0x1390
[ 1013.761074][    C1]  count_memcg_events_mm.constprop.0+0x40/0x2a0
[ 1013.767282][    C1]  ? count_memcg_events_mm.constprop.0+0x2f/0x2a0
[ 1013.773664][    C1]  handle_mm_fault+0x5f9/0xad0
[ 1013.778400][    C1]  __get_user_pages+0x54e/0x3590
[ 1013.783314][    C1]  ? __pfx___get_user_pages+0x10/0x10
[ 1013.788656][    C1]  ? __kernel_write_iter+0x5a5/0xb10
[ 1013.793922][    C1]  get_dump_page+0x257/0x3d0
[ 1013.798484][    C1]  ? __pfx_get_dump_page+0x10/0x10
[ 1013.803565][    C1]  ? dump_user_range+0x756/0xb70
[ 1013.808476][    C1]  dump_user_range+0x195/0xb70
[ 1013.813214][    C1]  ? __pfx_dump_user_range+0x10/0x10
[ 1013.818474][    C1]  ? elf_coredump_extra_notes_write+0x46f/0x500
[ 1013.824684][    C1]  elf_core_dump+0x29c3/0x3c10
[ 1013.829432][    C1]  ? __pfx_elf_core_dump+0x10/0x10
[ 1013.834508][    C1]  ? __schedule+0x3bbb/0x6150
[ 1013.839166][    C1]  ? trace_sched_exit_tp+0xd1/0x110
[ 1013.844331][    C1]  ? __schedule+0x114c/0x6150
[ 1013.848978][    C1]  ? 0xffffffffff600000
[ 1013.853126][    C1]  ? vfs_coredump+0x2b85/0x55e0
[ 1013.857948][    C1]  vfs_coredump+0x2b85/0x55e0
[ 1013.862600][    C1]  ? __pfx_vfs_coredump+0x10/0x10
[ 1013.867596][    C1]  ? __lock_acquire+0x436/0x2890
[ 1013.872504][    C1]  ? __lock_acquire+0x436/0x2890
[ 1013.877409][    C1]  ? lock_acquire+0x179/0x330
[ 1013.882058][    C1]  ? lock_acquire+0x179/0x330
[ 1013.886712][    C1]  ? arch_stack_walk+0xa6/0x100
[ 1013.891562][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1013.896314][    C1]  ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0
[ 1013.902550][    C1]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 1013.909123][    C1]  ? __lock_acquire+0x436/0x2890
[ 1013.914048][    C1]  ? kvm_sched_clock_read+0x11/0x20
[ 1013.919216][    C1]  ? sched_clock+0x38/0x60
[ 1013.923602][    C1]  ? sched_clock_cpu+0x6c/0x530
[ 1013.928427][    C1]  ? find_held_lock+0x2b/0x80
[ 1013.933088][    C1]  ? __schedule+0x3bbb/0x6150
[ 1013.937749][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1013.942479][    C1]  ? trace_sched_exit_tp+0xd1/0x110
[ 1013.947647][    C1]  ? __schedule+0x114c/0x6150
[ 1013.952301][    C1]  ? __pfx___schedule+0x10/0x10
[ 1013.957126][    C1]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1013.962743][    C1]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1013.968704][    C1]  get_signal+0x22e1/0x26d0
[ 1013.973206][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1013.978074][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1013.983596][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1013.989735][    C1]  ? __bad_area_nosemaphore+0x350/0x690
[ 1013.995252][    C1]  irqentry_exit+0x38a/0x8c0
[ 1013.999816][    C1]  asm_exc_page_fault+0x26/0x30
[ 1014.004649][    C1] RIP: 0033:0x7fa73864f6b7
[ 1014.009043][    C1] RSP: 002b:00007fa7369d71a0 EFLAGS: 00010206
[ 1014.015091][    C1] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa73878f749
[ 1014.023032][    C1] RDX: 00007fa7369d71c0 RSI: 00007fa7369d72f0 RDI: 000000000000000b
[ 1014.030973][    C1] RBP: 00007fa738813f91 R08: 0000000000000000 R09: 0000000000000000
[ 1014.038913][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1014.046853][    C1] R13: 00007fa7389e6128 R14: 00007fa7389e6090 R15: 00007ffe6e9e1638
[ 1014.054800][    C1]  </TASK>
[ 1014.057803][    C1] task:syz-executor    state:R  running task     stack:28888 pid:15803 tgid:15803 ppid:10166  task_flags:0x400040 flags:0x00080000
[ 1014.071242][    C1] Call Trace:
[ 1014.074492][    C1]  <TASK>
[ 1014.077393][    C1]  ? __schedule+0x10b9/0x6150
[ 1014.082040][    C1]  __schedule+0x1139/0x6150
[ 1014.086533][    C1]  ? __pfx___schedule+0x10/0x10
[ 1014.091371][    C1]  ? mark_held_locks+0x49/0x80
[ 1014.096117][    C1]  preempt_schedule_irq+0x51/0x90
[ 1014.101113][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1014.105679][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1014.111626][    C1] RIP: 0010:lock_release+0x183/0x2d0
[ 1014.116882][    C1] Code: 0f c1 05 28 30 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 bd e8 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41
[ 1014.136458][    C1] RSP: 0018:ffffc90004cef820 EFLAGS: 00000206
[ 1014.142491][    C1] RAX: f16088c26bc86300 RBX: ffffffff8e3c96a0 RCX: ffffc90004cef82c
[ 1014.150443][    C1] RDX: 0000000000000002 RSI: ffffffff8daa967a RDI: ffffffff8bf2b580
[ 1014.158382][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000cd186aa9
[ 1014.166320][    C1] R10: 0000000000000002 R11: 0000000000014153 R12: ffffffff816cca34
[ 1014.174260][    C1] R13: 0000000000000206 R14: ffff8880823ea4c0 R15: 0000000000000003
[ 1014.182214][    C1]  ? unwind_next_frame+0x3f4/0x20b0
[ 1014.187394][    C1]  unwind_next_frame+0x3f9/0x20b0
[ 1014.192389][    C1]  ? __x64_sys_symlinkat+0x93/0xc0
[ 1014.197477][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1014.203599][    C1]  arch_stack_walk+0x94/0x100
[ 1014.208252][    C1]  ? do_syscall_64+0xcd/0xf80
[ 1014.212903][    C1]  stack_trace_save+0x8e/0xc0
[ 1014.217548][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1014.222900][    C1]  ? mas_alloc_cyclic+0x562/0x1d30
[ 1014.227981][    C1]  kasan_save_stack+0x33/0x60
[ 1014.232637][    C1]  ? kasan_save_stack+0x33/0x60
[ 1014.237456][    C1]  ? kasan_save_track+0x14/0x30
[ 1014.242275][    C1]  ? __kasan_kmalloc+0xaa/0xb0
[ 1014.247009][    C1]  ? __kmalloc_node_track_caller_noprof+0x353/0x930
[ 1014.253564][    C1]  ? kmemdup_noprof+0x29/0x60
[ 1014.258220][    C1]  ? shmem_symlink+0x256/0x960
[ 1014.262948][    C1]  ? vfs_symlink+0x4b5/0x800
[ 1014.267505][    C1]  ? do_symlinkat+0x353/0x4b0
[ 1014.272151][    C1]  ? __x64_sys_symlinkat+0x93/0xc0
[ 1014.277249][    C1]  kasan_save_track+0x14/0x30
[ 1014.281896][    C1]  __kasan_kmalloc+0xaa/0xb0
[ 1014.286455][    C1]  __kmalloc_node_track_caller_noprof+0x353/0x930
[ 1014.292840][    C1]  ? simple_offset_add+0xca/0x180
[ 1014.297835][    C1]  ? simple_offset_add+0xfe/0x180
[ 1014.302832][    C1]  ? shmem_symlink+0x256/0x960
[ 1014.307567][    C1]  ? kmemdup_noprof+0x29/0x60
[ 1014.312212][    C1]  kmemdup_noprof+0x29/0x60
[ 1014.316696][    C1]  shmem_symlink+0x256/0x960
[ 1014.321255][    C1]  ? __pfx_shmem_symlink+0x10/0x10
[ 1014.326341][    C1]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1014.331774][    C1]  ? security_inode_permission+0xbf/0x260
[ 1014.337467][    C1]  vfs_symlink+0x4b5/0x800
[ 1014.341854][    C1]  do_symlinkat+0x353/0x4b0
[ 1014.346331][    C1]  ? __pfx_do_symlinkat+0x10/0x10
[ 1014.351333][    C1]  ? getname_flags.part.0+0x1c5/0x550
[ 1014.356677][    C1]  __x64_sys_symlinkat+0x93/0xc0
[ 1014.361586][    C1]  do_syscall_64+0xcd/0xf80
[ 1014.366060][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1014.371920][    C1] RIP: 0033:0x7f7523b8ecc7
[ 1014.376304][    C1] RSP: 002b:00007ffd807fa4b8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a
[ 1014.384681][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7523b8ecc7
[ 1014.392626][    C1] RDX: 00007f7523c158e4 RSI: 00000000ffffff9c RDI: 00007ffd807fa550
[ 1014.400566][    C1] RBP: 00007ffd807fa4fc R08: 0000000000000013 R09: 00007ffd807fa207
[ 1014.408508][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f4
[ 1014.416447][    C1] R13: 00000000000927c0 R14: 00000000000ddddb R15: 00007ffd807fa550
[ 1014.424395][    C1]  </TASK>
[ 1014.427386][    C1] rcu: rcu_preempt kthread starved for 10576 jiffies! g58129 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1014.438554][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1014.448490][    C1] rcu: RCU grace-period kthread stack dump:
[ 1014.454344][    C1] task:rcu_preempt     state:R  running task     stack:28440 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1014.467794][    C1] Call Trace:
[ 1014.471042][    C1]  <TASK>
[ 1014.473946][    C1]  ? __schedule+0x10b9/0x6150
[ 1014.478595][    C1]  __schedule+0x1139/0x6150
[ 1014.483068][    C1]  ? __lock_acquire+0x436/0x2890
[ 1014.487979][    C1]  ? __mod_timer+0x8f2/0xd30
[ 1014.492543][    C1]  ? __pfx___schedule+0x10/0x10
[ 1014.497365][    C1]  ? find_held_lock+0x2b/0x80
[ 1014.502016][    C1]  ? schedule+0x2d7/0x3a0
[ 1014.506317][    C1]  schedule+0xe7/0x3a0
[ 1014.510358][    C1]  schedule_timeout+0x123/0x290
[ 1014.515181][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1014.520530][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1014.525797][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1014.531575][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1014.537005][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1014.541744][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1014.547010][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1014.552181][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1014.557092][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1014.561914][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1014.567693][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1014.572364][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1014.577532][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1014.582264][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1014.587442][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1014.592437][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1014.597607][    C1]  kthread+0x3c5/0x780
[ 1014.601651][    C1]  ? __pfx_kthread+0x10/0x10
[ 1014.606232][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1014.610965][    C1]  ? __pfx_kthread+0x10/0x10
[ 1014.615525][    C1]  ret_from_fork+0x983/0xb10
[ 1014.620085][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1014.625167][    C1]  ? __switch_to+0x7af/0x10d0
[ 1014.629815][    C1]  ? __pfx_kthread+0x10/0x10
[ 1014.634377][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1014.639120][    C1]  </TASK>
[ 1014.642109][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1014.648399][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1014.653580][    C0] NMI backtrace for cpu 0
[ 1014.653590][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1014.653605][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1014.653612][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1014.653632][    C0] Code: 26 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 99 11 00 fb f4 <e9> cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1014.653643][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[ 1014.653654][    C0] RAX: 00000000039678df RBX: 0000000000000000 RCX: ffffffff8b78c6d9
[ 1014.653662][    C0] RDX: 0000000000000000 RSI: ffffffff8dacf709 RDI: ffffffff8bf2b580
[ 1014.653670][    C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d
[ 1014.653678][    C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000
[ 1014.653686][    C0] R13: ffffffff8e097b40 R14: ffffffff9088cdd0 R15: 0000000000000000
[ 1014.653694][    C0] FS:  0000000000000000(0000) GS:ffff8881248f1000(0000) knlGS:0000000000000000
[ 1014.653708][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1014.653716][    C0] CR2: 000000110c409997 CR3: 00000000885c8000 CR4: 00000000003526f0
[ 1014.653724][    C0] Call Trace:
[ 1014.653730][    C0]  <TASK>
[ 1014.653735][    C0]  default_idle+0x13/0x20
[ 1014.653745][    C0]  default_idle_call+0x6c/0xb0
[ 1014.653757][    C0]  do_idle+0x38d/0x510
[ 1014.653775][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1014.653794][    C0]  cpu_startup_entry+0x4f/0x60
[ 1014.653812][    C0]  rest_init+0x16b/0x2b0
[ 1014.653823][    C0]  ? acpi_subsystem_init+0x133/0x180
[ 1014.653839][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1014.653854][    C0]  start_kernel+0x3ef/0x4d0
[ 1014.653868][    C0]  x86_64_start_reservations+0x18/0x30
[ 1014.653881][    C0]  x86_64_start_kernel+0x130/0x190
[ 1014.653895][    C0]  common_startup_64+0x13e/0x148
[ 1014.653914][    C0]  </TASK>