last executing test programs:

3m48.878790411s ago: executing program 4 (id=1541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
gettid()
prlimit64(0x0, 0x8, &(0x7f0000000200)={0x8, 0xd5}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)

3m46.506783263s ago: executing program 4 (id=1550):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x11b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="10b37259d4f5866fd11a74d7b91327259939ba9e082e60ee7c4b441de0df37b8212d510f92e39a9a978352ba1d8dbf151c93329f4e1c8c4e07e9015a3fc66f41e891918930314a93f47801000015eb073da2180cde5f901a43743d831001c1f68df1000000000000"], 0x7c}}, 0x8000)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000002000009"], 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x40010)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local})
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x5040)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f00000000c0))
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$rose(r2, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80)
connect$rose(r2, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x7)
chdir(&(0x7f0000000140)='./bus\x00')

3m45.263134542s ago: executing program 4 (id=1554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
getpgid(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = accept$alg(r4, 0x0, 0x0)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000b00)={{r0}, r9, 0x16, @inherit={0x88, &(0x7f0000000480)={0x1, 0x8, 0x1, 0x9, {0x0, 0x7, 0xa, 0x84cb, 0x2}, [0x6, 0xd, 0x5, 0x9, 0x536d, 0xfffffffffffffffa, 0x7, 0xfb7]}}, @name="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"})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
socket$inet(0x2, 0xa, 0xa)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
socket$netlink(0x10, 0x3, 0xa)
getsockopt$sock_int(r10, 0x1, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

3m44.017238431s ago: executing program 4 (id=1559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x560, &(0x7f00000011c0)={{0x12, 0x1, 0x310, 0x8f, 0x40, 0x13, 0x10, 0x1385, 0x5f02, 0xcc7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54e, 0x3, 0x2, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0xcf, 0x8, 0x8, 0x1c, 0x45, 0x64, 0x0, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0xbc, 0x7c, 0x40}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xb, 0x7, 0x24}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0xa3, 0xff}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x5, 0x9, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x5}, @generic={0x31, 0x23, "65f9c8b26ea4ae66b64ec86f33def77eccf11012c5960c5b7ce4fdc7f746ab52ff69b6332e99d1f3e8eb3c36c9df6b"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x64, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd24}]}}]}}, {{0x9, 0x4, 0x1b, 0x5, 0x9, 0x1, 0x1, 0xa1, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "2ed5"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x7, 0xf}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x1, 0x7f, 0x1, 0x0, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0xfa}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "2be179a6"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x4, 0xb}, {0x6, 0x24, 0x1a, 0x0, 0x25}, [@country_functional={0xa, 0x24, 0x7, 0x5, 0x59de, [0x0, 0x6]}, @mbim_extended={0x8, 0x24, 0x1c, 0xf000, 0x1, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x7}, @obex={0x5, 0x24, 0x15, 0x2}, @acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0xf, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x6b, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x6}]}}, {{0x9, 0x5, 0x7, 0x18, 0x8, 0x4, 0x80, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0xe, 0xee, 0xb0}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0xc, 0x9, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x5}, @generic={0xe1, 0x9, "a0a51d29d4aa48157ff6dc8ec39f0819d030ae500c56f57de801a8bf0a693d7e06b5e929179a0d32a9be9990ffcbb4239820aedbbe5ce7893d95c14381d8e49321ee4e6f0e03ba9b5e7c118e32afa16b65cf78f07105ec30d349a4c90cbaeb2be31a9d506a32cbc669ed3d84f2d7cc189a7188b1ebbf3a6484b2e503992e4faf3017b36416abc7fc93426f0542edd2eed7feccbfc713c1a4951e080001bc6276fdca21d955560a5502522f9b7353c76bdc63ae5d87884f22d951bbb359637773bf28a16b38961e03d33aa1eca9da23fed8eac49b832b9b53d5c48564205271"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x4, 0x9, 0x9}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x7, 0x0, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x14, 0xff00}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x3, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xb72}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x82, 0x36, 0x2, [@generic={0x14, 0xd, "e8913e7656af68a74e675eb99d7d5e151661"}]}}]}}, {{0x9, 0x4, 0x7b, 0x2, 0x8, 0x98, 0x5e, 0xe3, 0x20, [@generic={0xd4, 0x3, "aa733f8078867f64d6edeb125a6264e0283982c1763752cb0d4d2ff84f4efbe6909e5c6494124a9b82f9851fadd02066f418bbaa5365b397b395820fe7bf7264e296208c9d64ff738839e3b12edcde4f4c4e7421188c82da323854e85dd2fb4979912633aa6f2ba16c0249699b44caba1853b58cd1ecf3df6353b44fd8e7d5ff98d91e2b448c9165ceec380ff89ae66d750ed4ea27756d21936565109dc8027e4e378b89dbdd07346730ff63f4f99f96781438858b1b9f19b5cc5337e3d759b54c1367533d592c38f83d03da804ccc7ea40f"}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x1, 0x8, 0x10, "1ddf4e"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd, 0x4, 0x9, 0x1, ':R3%+'}, @as_header={0x7, 0x24, 0x1, 0x4, 0xa, 0x1003}]}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0x0, 0x3, 0x7}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x5, 0x95, 0x7}}, {{0x9, 0x5, 0x0, 0xd, 0x8, 0x8, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x1, 0x7, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0xff, 0x42, [@generic={0x89, 0x21, "82b68b8fb4524387d3d5bfcbb98d0a01f8070f06b7ab80dd8c0542fbdc61b2b1165c850bce04f7bc2ecb9a39f59614734cd41db37c8d7fd7d6f5a5a3558124366e422dcd10bd8e0c43da635ab7ba6550fb8e1b5a7d810ba4d39a6843410c80f7b46b25c52484d402da8d70a4309efadb828d6c1753a8161dd4103a2ab73a961a74365357a69100"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x8, 0x6, 0x4}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x6, 0x8, 0xa, [@generic={0xe1, 0x22, "d203f50ede92605c4bf9ebb2da8b431ae9f075a457ab21c5167413f1cdf6861778cbc32aa54fc1c100104b76f521236908818475e7ffed58cd3f4766838e7eb6941ad25fc135509f9358141b597cec623c22ba4234d98d7831766628a26c1dbc1ea68f83903267ea8d8e1e90ed3bce68ecb6ce62134d2e1b9f8febedd27fcfc563ae2faaf1b6bcd5628f9b7a260b14980e580f59076a0ee0f4625519198c396c333db51514c35f31280b6bc88968f02dd954ae9a8e847fc99d451276cc1d91a45d2c4e287faca1af490d9ed435321a2cf524cf3ee307e832511e1899671ab6"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x0, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x19}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x201, 0x71, 0x0, 0x3a, 0xff, 0x5}, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="0506000000edb1f020"], 0x9, [{0x6e, &(0x7f0000001780)=@string={0x6e, 0x3, "2c16efd8d775094811245bd0881684ffd24d1f1e88080a62173d6aeda90a21a7857a9adf49816f26af26b83a3b02c2c3d78bdd66058957191b2b2f784f9b6ce417db12957410d9fb715cd1c50c17f9397fb0f175751048859176978d60ad5ba5eee8902498f3157263c5f259"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x436}}, {0xe3, &(0x7f0000001840)=@string={0xe3, 0x3, "8b3b6ce5f3c0276fd0872af59d6d392ee0397317e9265b09335af44f89d66d478a92de1494eff8913f072ec2ecb7ad37a7828adc44e51146fe5facb1dfb4a49a5b80990e52b103efab110208dc80f2350788dd8b2a75c120a815b9ea16f594b48751a30d4b6d90d09961fc0aee853c27c9291847c7f89dc701889d9de185499609e528ca2afd4cc72f4cf560ffed2ede778585f1bedd21f16d3583c2119deeea1d39de1ae1e801e2482a789ce1e0881855d90c5e8d56b28ca51c6d7a883717c1b68c32b536f1d01c942299c02e0599e16b3474a71bdb8cbd26264cb4a00da5863f"}}, {0xca, &(0x7f0000001cc0)=@string={0xca, 0x3, "2abe88bd10e35960039f66167eb265f54c632a070136be403882015f3645c21e0017aafec3a73ad63368b9066177f98bcf7f7f298f95037d619b83f953ff51555a98be486fb8aebbff78b3521c4604c1c94c40da95b242b555f2491d4ea86de9433e9426df59538efdb2382fb6cc297ea627bfe9f40af10fd1114da0f0f742600eb3d2b5920f60a91302cd7761bf02022027592baeb9dca39f539a52c5e73b3ae6c149fb2dbb2707aa76d872a6d98943a6cef5752264e7065f665f3cfea46a3f0db1318051c827e0"}}, {0x3a, &(0x7f0000002140)=ANY=[@ANYBLOB="3a037f3665c3fb7ee0885b184c01cfeca1b5f3e71a7ac821aaeacef5978f251cf493eb2ffa2b2e3362c12ba413906c00d1af38df1cd31de93c162f773628897d7fb3d7e546a5f0b0f290b67848d539c43a3050c67c246324ce9cf3108b150aff4f019c6d7eda722f7b5dc7d4a4ef3ad4016e0eb5eb8907df22098927e0326b59facb11d1be6219ef51978c0def"]}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x81d}}, {0x79, &(0x7f0000001b00)=@string={0x79, 0x3, "6b626a66b7a3806c5c7017f4e9a5a1e08040b05e3128187080c4e0c4ef35db29adc32e4d83e435dac794f7b4975b3c240a13565d0de0cb180b694f93186f39e42ebf03840a2ae9a9a6b21d6f3b296aba4b35cbc7560f0fa846d663960f86a3e02a2cac88eda414a98c50ee77aeeade92772a3eb14ac0b8"}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0xc0c}}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$peekuser(0x3, r1, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001940)=<r2=>0x0)
ptrace$peeksig(0x4209, r2, &(0x7f0000001980)={0x10000, 0x1, 0x7}, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}, {}])
r3 = socket$inet6(0xa, 0x805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x21)
fcntl$setsig(r4, 0xa, 0x11)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff)
getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000019c0)=0xfec)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x0, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x28040680)
r10 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r10, 0x13)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r11, 0x80104d12, 0x0)

3m41.747755402s ago: executing program 4 (id=1571):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b})
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6)

3m39.550355276s ago: executing program 4 (id=1577):
r0 = syz_io_uring_setup(0x73e3, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x10, 0x3aa}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x40202, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, r4, &(0x7f0000000200)={0x400200, 0x19, 0x1f}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456})
io_uring_enter(r0, 0x47ba, 0x0, 0x3, 0x0, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$kcm(0x28, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x541b, 0x0) (async)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) (async)
sendmmsg$inet6(r5, &(0x7f0000001f00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}}], 0x1, 0x20080018)

3m38.867939322s ago: executing program 32 (id=1577):
r0 = syz_io_uring_setup(0x73e3, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x10, 0x3aa}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x40202, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, r4, &(0x7f0000000200)={0x400200, 0x19, 0x1f}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456})
io_uring_enter(r0, 0x47ba, 0x0, 0x3, 0x0, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$kcm(0x28, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x541b, 0x0) (async)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) (async)
sendmmsg$inet6(r5, &(0x7f0000001f00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}}], 0x1, 0x20080018)

9.410458377s ago: executing program 1 (id=2411):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = open(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x178)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './cgroup\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000140)='zonefs\x00', 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58)

8.302842922s ago: executing program 1 (id=2413):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6(0x10, 0x3, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x404}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r9=>0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r9, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x4, 0x0, @broadcast, @multicast1}}}})

7.671131812s ago: executing program 2 (id=2414):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3c3ac0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x400000003d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x100000, 0x10000, 0x3, 0x0, 0x0, [{0x6, 0x59, 0x9, '\x00', 0xe2}, {0x6, 0xab, 0xfa, '\x00', 0x7}, {0x80, 0x1, 0x7f, '\x00', 0x8}, {0x3, 0xb0, 0x2, '\x00', 0x3}, {0x7, 0xfc, 0x5, '\x00', 0x36}, {0xe, 0x9, 0x2, '\x00', 0x9}, {0x7a, 0x3, 0x7, '\x00', 0x7}, {0xff, 0x40, 0x9, '\x00', 0x5}, {0xf7}, {0xf5, 0x4, 0xbc, '\x00', 0x80}, {0xd1, 0x7, 0x7, '\x00', 0xf7}, {0x5, 0x2, 0x16, '\x00', 0x4}, {0x79, 0x43, 0x5, '\x00', 0x4}, {0x9, 0x6, 0xff, '\x00', 0xf8}, {0x9, 0x0, 0xb, '\x00', 0x90}, {0x5, 0x0, 0x0, '\x00', 0x2}, {0x2, 0xea, 0x2}, {0x3, 0x0, 0xca, '\x00', 0x1}, {0x75, 0xb2, 0x4a, '\x00', 0xff}, {0x1, 0x2, 0x7, '\x00', 0x78}, {0x17, 0x9, 0x1, '\x00', 0x81}, {0x4, 0xf1, 0x9, '\x00', 0x7f}, {0x7, 0xfd, 0x0, '\x00', 0x35}, {0x40, 0x3, 0x8, '\x00', 0x17}]}})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r3, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES16=r4, @ANYRES8=r3, @ANYRESHEX=r4], 0xfffffffffffffe88)
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0)
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x9, 0x12, 0x0, 0x2, 0x7aa, 0x8, 0xb31a, 0xfffffffe}, 0x0)
recvmsg$unix(r6, &(0x7f0000000540)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000400)=""/99, 0x63}], 0x1, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x12002)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e25, 0x2, @mcast2, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462429add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c)
setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r8, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
shutdown(r8, 0x1)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x1, 0x6, @random="8e39743fe8b2"}, 0x10)

6.976681171s ago: executing program 1 (id=2416):
socket(0x10, 0x803, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket(0x28, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x980)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)

6.668835541s ago: executing program 2 (id=2420):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
r5 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x2, 0x0, 0x2000000, 0xfffffffc, 0x101, 0xb063}})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x78, r6})
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000))

6.564161603s ago: executing program 0 (id=2421):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x87b5d1b97e854cb8, &(0x7f0000000400)=ANY=[@ANYBLOB='fd<', @ANYRES8=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f00000002c0)='\x96_\x8c\x81\xcb\x91\xb4\x13\x8a9\xab\xf1\xdd\xd8\x9b~3\x17\x19e5\x7f\xf3\x10\xb7\xb5\x89tL\xc1B]\xd7\x9e\x86')
chdir(&(0x7f0000000700)='./file1\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @local})
connect$netlink(0xffffffffffffffff, &(0x7f0000000200)=@unspec, 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4400, 0x101)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
ioctl(r5, 0x8b2a, &(0x7f0000000040))
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r8=>r1, {r1}}, './file0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x420, 0x420, 0xd0, 0x0, 0x0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0xbd], 0x1, 0x0, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@local, 0x2, 0x3b, 0x9}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'lo\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x0, 0x7, 0x4, 0x5}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x200, 0x8000, 0x2, 0x0, 0x0, "dd37dff8b6e2669268e47bd87db010bb279bb03323dd751ecad5fa798404ad5c9fba7e310acfdb52791c9c9c78aded3083ee52ea1c151fdd477bf67c519f3993"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x40, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

5.80706187s ago: executing program 5 (id=2422):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004003f00088900000100000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"], 0x50)

5.806546286s ago: executing program 5 (id=2423):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x10}, @remote, @remote, 0x7, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2})
syz_emit_ethernet(0x72, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00'})
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r5, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @private0, 0x8}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
write$evdev(0xffffffffffffffff, &(0x7f0000000500)=[{{}, 0x63ab1c3bb09a3998, 0xfff, 0x1}, {{}, 0x5, 0x792, 0x6}, {{}, 0xa, 0xfff1, 0x489f}, {{}, 0x5, 0x288, 0x3}, {{}, 0x3, 0x6, 0xffffffff}, {{0x77359400}, 0x12, 0x2, 0xfffffffa}], 0x90)
close_range(r7, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

5.576611043s ago: executing program 2 (id=2424):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000030f000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5)
dup(r4)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(0xffffffffffffffff, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

5.571708386s ago: executing program 0 (id=2425):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x6c}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRES32, @ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="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", @ANYRESHEX, @ANYRES8, @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000180)=0xe)
ioctl$TIOCVHANGUP(r10, 0x5437, 0x0)
readv(r9, &(0x7f0000000000)=[{0x0}], 0x1)

4.879921513s ago: executing program 3 (id=2426):
socket$kcm(0xa, 0x5, 0x0) (async)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @mcast2, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x20008000) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x20008000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) (async)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000c77000/0x2000)=nil, 0x2000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) (async)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
socket(0x840000000002, 0x3, 0xff) (async)
socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000000240), 0x0, 0x20008080)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
eventfd(0x80000001) (async)
eventfd(0x80000001)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x100, 0xfffffffffffffffa}})

4.549467726s ago: executing program 0 (id=2427):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000d40)="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", 0x124}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7e920f73", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f0000000a40)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xfd4d}, {&(0x7f0000004c80)="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", 0xc72}], 0x7}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)="bd846854d6e31b308d7a37ae52bc3b01ffdcdfa5a0d8a6b16f05527fcba5e6fd8819a7fb2805b1bcb71e9b138f7e7309043784d8f37b074f7b4aabd15d8e2ee010dff946f750783940bba43728e5c34dff2e391e16f8abeefc80d261b567fc237c9ab25bf9ddd17daa74fcdb1e1f2f53d1", 0x71}, {&(0x7f0000000380)="b3ce4947845c63a6dca01f134443769d3b7c2c2056c46737724754640f16e42840cba8e0dfd2247e37e9ebf852d2b3550e8405ae8b34e9", 0x37}], 0x2, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x228}}], 0x2, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)

4.316460686s ago: executing program 0 (id=2428):
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={r4, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0xbf, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f00000024c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000002500)}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x18, 0xc, &(0x7f0000002780)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000200850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="6a3ae0950f39f5b69c8daa4914431a1d59cf5c43"}}}}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x5, 0xbb1}, 0xc)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3, 0x1, 0x1, "82fa6b5535fa2b2688d709851eea68bd341949276f2fcc3d2dc76575b739fd12", 0x30314752})

4.155464063s ago: executing program 5 (id=2429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600f0ffffffffff", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

4.142030184s ago: executing program 3 (id=2430):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'bridge_slave_0\x00', &(0x7f0000000400)=@ethtool_rx_ntuple={0x35, {0x10, @ah_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x4}, @sctp_ip4_spec={@local, @remote, 0x4e22, 0x4e22, 0xfa}, 0x7, 0xfff8, 0x9, 0x5, 0xffffffffffffffff}}}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000, 0x2}]}]}}, &(0x7f00000001c0)=""/2, 0x32, 0x2, 0x1}, 0x20) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}}) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) (async)
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600000000000000000003"], 0x2a) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xa, 0x7, {0xffffffffffffffff}, {<r5=>0xffffffffffffffff}, 0xffff, 0x800})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000240)=0xc) (async)
r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x150)
statx(r8, &(0x7f0000000280)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000680)) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',allow_other,default_permissions,allow_other,default_permissions,fscontext=system_u,smackfsdef=*.\'.)+\\\"\\!\'-@],uid<', @ANYRES8=r6, @ANYRES16=r1, @ANYRESOCT=r7, @ANYBLOB=',smackfsdef=lo\x00,\x00'])

3.996112599s ago: executing program 5 (id=2431):
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x26a114a, 0x0, 0xfffffffffffffffe, 0x18, 0x7}, 0x0)
r2 = socket(0x10, 0x2, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x9)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x6, 0x800, 0x5)
add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x381001)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc3b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b010403"], 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x41015500, &(0x7f0000000500))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xab1}, 0x94)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000280)={0x0, 0x1, 0x63, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10)

3.992351517s ago: executing program 3 (id=2432):
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/127, &(0x7f0000000080)=0x7f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0)
getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0xc, 0x2, {0x1, 0xc}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.888850305s ago: executing program 2 (id=2433):
inotify_init1(0x800)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x68642, 0x0)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfefd}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

3.534969874s ago: executing program 2 (id=2434):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa00000000"], 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r1, &(0x7f0000001b80), 0x0, 0x62, 0xfd4c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa, 0x7000000}]}})

2.769296414s ago: executing program 3 (id=2435):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)
r1 = getpid()
r2 = gettid()
rt_tgsigqueueinfo(r1, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa})
syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xf2, 0xe6, 0x97, 0x10, 0x45e, 0x775, 0x114d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x0, 0xf8, 0xd9, 0x89}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',afid=0'])
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)

2.634798111s ago: executing program 2 (id=2436):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x3, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xe1hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a!\xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458)
socket(0x40000000015, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/237, 0xed}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/184, 0xb8}], 0x3, &(0x7f0000000100)}, 0xffffffff}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000000a80)=""/218, 0xda}, {&(0x7f0000004040)=""/81, 0x51}, {&(0x7f0000000b80)=""/4112, 0x1010}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/234, 0xea}, {&(0x7f0000002d00)=""/104, 0x68}, {&(0x7f0000002f00)=""/105, 0x69}, {&(0x7f0000004180)=""/208, 0xd0}], 0x9, &(0x7f0000004280)=""/4096, 0x1000}, 0x10}], 0x2, 0x102, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
syz_usb_connect(0x4, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)

2.4561506s ago: executing program 0 (id=2437):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x28)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x8000)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r10}, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, r10, 0x4}, 0x38)
write$P9_RREAD(r8, &(0x7f0000000840)={0x100b, 0x75, 0x1, {0x1000, "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"}}, 0x100b)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd5cf, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$inet6(0xa, 0x3, 0x5)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.242909668s ago: executing program 1 (id=2438):
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x7a, &(0x7f0000000800)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, '\x00', 0x44, 0x2f, 0xff, @empty, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0xdd86, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x1}, 0x2, {0xc, 0x820a, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0)

1.205832969s ago: executing program 1 (id=2439):
openat$random(0xffffffffffffff9c, 0x0, 0x502, 0x0)
r0 = creat(0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043", @ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='fsi_master_gpio_in\x00', r0, 0x0, 0x7fff}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000001006400c03c7ad3cd7978a37279d2cc11fd9201807aeb7287f4a1e231a20f2fbf40ab24eb880aedff0a7dba64b67fc2089c05748de5eda31576f2f0f8a224a412952e424e9abea16bcecf119f3ab5615526a20e224c6f15d24088d9e310df0a560af3614b2e569d2e44778f03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
mkdir(0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000340)=""/242, 0xf2, 0x100, &(0x7f0000000180)={0x77359400})
mount(0x0, 0x0, 0x0, 0x2014800, 0x0)

994.1335ms ago: executing program 0 (id=2440):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

662.964277ms ago: executing program 3 (id=2441):
timer_create(0x2, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000000)={{<r1=>0x0}})
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400000dfb291c46f3204370fa5f0ffc07533641d8a3fe9414ecba62fde87db5cfe40ca84e3dc2a3fc2a40d74a83912ccd8d4c817bee96b1099353c82ea909c5482c885e7587fecacba279a9cc2fd273b173188374a15343516810b0e14d896209c4530de67ba06aeeb18758e9a4048130ce098ed02186b73fa80"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r3, 0x40045b17, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x21, 0x75, {0x75, 0x31, "67fc17f6652a133ee32bdf378ee8be832fa589d9cd9dbd56fdbe9727540dcd6ffca658520a9915881d6de20775544e765aa5d584d00d052930df08c9d62850e7df67189a2f5f442494e989c416e2e2fa70205fc6acb76b5709631faf1003567904f1d69be78506b446dcf6dd78df76ea7cc049"}}, &(0x7f00000001c0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "80bf132fab274176f7ae2ab2912938c338551eb34e887e0c6873c5786646024a"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x98, "baf71f3620dcbaaacdcf2b3aadb9a8f473d271bf123e8fefaca3068074b1791f234f1d8c19d64770545c332c15473628b7bb09ef86c153b9fc95cf71dce3efb02e053984dca716e563cb7ccbdbef247ab91c18dc23c0ec7f0ef133281d373a0f6f64b6ed847cd77b4b3a107c78338629f8e06cd94fb8f4af8f6533bbca16f1846a7c5d0b09461211cb67cbde5f7af4030b83e6ca41bcfd7b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc4}, &(0x7f0000000380)={0x20, 0x81, 0x3, "ac5eda"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "5eaab0"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'r'}, &(0x7f0000000440)={0x20, 0x84, 0x3, "397cd4"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "f638c5"}})

604.773184ms ago: executing program 5 (id=2442):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000000)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5e114b64, 0x12, r4, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'veth1_vlan\x00', 0x3}, 0x18)
sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0xe, 0x80}], 0x1, 0x851)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
setresuid(0x0, r1, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x7}, {}, @result={0xff, 0x6b7b}}, {0x0, 0x0, 0x0, 0x0, @time, {0x4, 0x4}, {}, @result={0xc92c}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffa, {}, {}, @control}, {0x8, 0x9, 0x0, 0x0, @time, {0x80}, {0x0, 0x3}, @raw8={"c36b471862abd6a2d90b94d0"}}], 0x70)

538.41647ms ago: executing program 5 (id=2443):
r0 = socket$tipc(0x1e, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000030f000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x5)
dup(r5)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

18.780487ms ago: executing program 1 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x62040200)
syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00')
mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0f"])
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESOCT=0x0])
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = getpid()
fcntl$setstatus(r5, 0x4, 0x40000)
syz_pidfd_open(r7, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r9=>0x0})
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote, r9}, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x78bd28, 0x2000, {0x0, 0x0, 0x74, r9, {0x0, 0x10}, {0xfff3, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close_range(r6, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x1, 0x80, 0x207, 0x80004, 0xe]}, &(0x7f0000000040)=0x54)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2001000076000d0b0000000000000000030000000000000008000a0000000081"], 0x20}}, 0x0)

0s ago: executing program 3 (id=2445):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigqueueinfo(0x0, 0x1d, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$KDSIGACCEPT(r4, 0x400455cb, 0x6)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c61"], 0xbc}}, 0x0)
sendmsg$inet_sctp(r2, 0x0, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

b 4-1: Product: ꤃퀎劖걆ﺯ梯壶ꔌᯙ쳾鲊ﰿ꼥ี藾ʅ暶쒇ᰵ徒핕﫤鍻爆㐬信쭓ꥮ뢂ꅦ㿙ᎂ貫⋩ㅲḝᴒ—⷟᪯ӊ釃뿭㿔秺㋶寨௖쎃䗰㼏
[  465.035218][ T5865] usb 4-1: Manufacturer: ෼䁣誰⛚艽˖髰므੏豈㑬釣灾ⱊ帍襤栀奥튐竲絈돷瘙戼笝類髄㉋鉍堸튣唜᪞䳼᪄㠀萗䛖ﰃ鵚ᄅ芼猚悉訟珻䊉蘜骙蕒᠟᭤炶莟后彳⾱ᅐ磻鰃㪟䀷﬛訤ꡭꅷ巶Ꙍ鱓챉荷ẩ㫕捶䛴㿃䥾ꛅ⮯炎姠셌⚄▼隸㦀茩죕ꮸ닒鴺ﶠ捨彡跎伖╙桬㤨炵屙
[  465.069336][    C1] vkms_vblank_simulate: vblank timer overrun
[  465.107586][ T5865] usb 4-1: SerialNumber: ӿ
[  465.138798][T17089] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  465.146617][T17089] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  465.250509][   T42] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  465.271860][   T42] usb 1-1: device descriptor read/8, error -71
[  465.356592][ T5886] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  465.389783][   T42] usb usb1-port1: unable to enumerate USB device
[  465.521655][ T5886] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  465.522213][ T2910] tipc: Subscription rejected, illegal request
[  465.544942][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.625608][ T5865] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  465.630270][T17151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1689'.
[  465.638713][ T5886] usb 6-1: Product: syz
[  465.702846][ T5886] usb 6-1: Manufacturer: syz
[  465.709358][T17151] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1689'.
[  465.884048][ T5865] usb 4-1: USB disconnect, device number 37
[  465.891014][ T5886] usb 6-1: SerialNumber: syz
[  465.976653][T17123] comedi comedi3: reset error (fatal)
[  465.993826][ T5886] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  466.129486][   T42] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  466.145263][T17151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  466.181685][T17151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  466.225036][T17151] bond0 (unregistering): Released all slaves
[  466.377918][ T5879] usb 6-1: USB disconnect, device number 6
[  466.435996][T17174] kernel profiling enabled (shift: 9)
[  467.274637][   T42] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  467.688633][   T42] ath9k_htc: Failed to initialize the device
[  467.714839][ T5879] usb 6-1: ath9k_htc: USB layer deinitialized
[  467.841467][T17257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19028 sclass=netlink_route_socket pid=17257 comm=syz.2.1699
[  467.869705][T17265] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.320340][T17278] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  468.450811][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'.
[  469.003585][T17286] FAULT_INJECTION: forcing a failure.
[  469.003585][T17286] name failslab, interval 1, probability 0, space 0, times 0
[  469.023486][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.2.1704 Not tainted syzkaller #0 PREEMPT(full) 
[  469.023511][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  469.023519][T17286] Call Trace:
[  469.023526][T17286]  <TASK>
[  469.023532][T17286]  dump_stack_lvl+0x16c/0x1f0
[  469.023564][T17286]  should_fail_ex+0x512/0x640
[  469.023588][T17286]  should_failslab+0xc2/0x120
[  469.023608][T17286]  kmem_cache_alloc_noprof+0x75/0x6e0
[  469.023635][T17286]  ? skb_clone+0x190/0x3f0
[  469.023662][T17286]  ? skb_clone+0x190/0x3f0
[  469.023678][T17286]  skb_clone+0x190/0x3f0
[  469.023699][T17286]  netlink_deliver_tap+0xabd/0xd30
[  469.023725][T17286]  netlink_unicast+0x71f/0x870
[  469.023750][T17286]  ? __pfx_netlink_unicast+0x10/0x10
[  469.023772][T17286]  ? genl_rcv_msg+0x4bb/0x800
[  469.023793][T17286]  netlink_ack+0x696/0xb80
[  469.023821][T17286]  netlink_rcv_skb+0x332/0x420
[  469.023842][T17286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  469.023858][T17286]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  469.023889][T17286]  ? netlink_deliver_tap+0x1ae/0xd30
[  469.023913][T17286]  genl_rcv+0x28/0x40
[  469.023933][T17286]  netlink_unicast+0x5aa/0x870
[  469.023958][T17286]  ? __pfx_netlink_unicast+0x10/0x10
[  469.023989][T17286]  netlink_sendmsg+0x8c8/0xdd0
[  469.024014][T17286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.024045][T17286]  __sys_sendto+0x4a3/0x520
[  469.024070][T17286]  ? __pfx___sys_sendto+0x10/0x10
[  469.024109][T17286]  ? ksys_write+0x1ac/0x250
[  469.024124][T17286]  ? __pfx_ksys_write+0x10/0x10
[  469.024141][T17286]  __x64_sys_sendto+0xe0/0x1c0
[  469.024158][T17286]  ? do_syscall_64+0x91/0xfa0
[  469.024179][T17286]  ? lockdep_hardirqs_on+0x7c/0x110
[  469.024201][T17286]  do_syscall_64+0xcd/0xfa0
[  469.024224][T17286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.024240][T17286] RIP: 0033:0x7fcb90590e5c
[  469.024253][T17286] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  469.024268][T17286] RSP: 002b:00007fcb9147fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  469.024285][T17286] RAX: ffffffffffffffda RBX: 00007fcb9147ffc0 RCX: 00007fcb90590e5c
[  469.024296][T17286] RDX: 0000000000000020 RSI: 00007fcb91480010 RDI: 0000000000000003
[  469.024305][T17286] RBP: 0000000000000000 R08: 00007fcb9147ff14 R09: 000000000000000c
[  469.024314][T17286] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  469.024323][T17286] R13: 00007fcb9147ff68 R14: 00007fcb91480010 R15: 0000000000000000
[  469.024347][T17286]  </TASK>
[  469.343767][T17291] syzkaller0: entered promiscuous mode
[  469.349441][T17291] syzkaller0: entered allmulticast mode
[  469.391095][T17287] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  469.580296][T17291] netlink: 'syz.2.1705': attribute type 1 has an invalid length.
[  469.622152][   T42] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  469.805364][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  469.913512][   T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  469.972359][   T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00
[  470.025125][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.100048][   T42] usb 1-1: config 0 descriptor??
[  470.112198][T17295] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  470.295449][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1711'.
[  470.733561][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  470.733576][   T30] audit: type=1400 audit(1761215220.990:698): avc:  denied  { connect } for  pid=17294 comm="syz.0.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  470.775531][ T5920] IPVS: starting estimator thread 0...
[  471.384043][T17344] IPVS: using max 37 ests per chain, 88800 per kthread
[  471.538254][   T42] logitech-hidpp-device 0003:046D:C090.0023: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.0-1/input0
[  472.261032][   T42] usb 1-1: USB disconnect, device number 45
[  472.824898][T17363] fido_id[17363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  473.011539][T17379] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  473.347907][   T30] audit: type=1400 audit(1761215223.440:699): avc:  denied  { shutdown } for  pid=17384 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  475.921508][ T5886] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  476.124769][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  476.181635][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.268234][ T5886] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  476.319858][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.389044][ T5886] usb 1-1: config 0 descriptor??
[  476.904677][ T5886] elan 0003:04F3:0755.0024: unknown main item tag 0x0
[  476.926399][ T5886] elan 0003:04F3:0755.0024: unknown main item tag 0x0
[  476.965793][ T5886] elan 0003:04F3:0755.0024: item fetching failed at offset 2/5
[  477.010093][ T5886] elan 0003:04F3:0755.0024: Hid Parse failed
[  477.035679][ T5886] elan 0003:04F3:0755.0024: probe with driver elan failed with error -22
[  477.095746][ T5886] usb 1-1: USB disconnect, device number 46
[  477.854160][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  477.928950][ T5920] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  478.015710][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.026829][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.036664][   T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  478.045895][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.486657][   T10] usb 6-1: config 0 descriptor??
[  478.498256][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.512713][ T5920] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  478.538075][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.556970][ T5920] usb 4-1: config 0 descriptor??
[  479.123637][ T5920] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor
[  479.136269][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input46
[  479.153532][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'.
[  479.167861][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  479.174220][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  479.264951][T17646] /dev/nullb0: Can't open blockdev
[  479.691627][   T10] usb 6-1: USB disconnect, device number 7
[  479.804648][ T5920] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  479.915523][ T5920] usb 4-1: USB disconnect, device number 38
[  479.951973][T17646] Process accounting resumed
[  480.082991][T17667] fido_id[17667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  480.102601][T17677] tmpfs: Unknown parameter 'nofile0'
[  481.657592][T17722] vivid-007: disconnect
[  481.923316][T17729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1754'.
[  482.349411][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1752'.
[  482.368093][T17734] syzkaller0: entered promiscuous mode
[  482.579234][T17734] syzkaller0: entered allmulticast mode
[  482.595240][T17718] vivid-007: reconnect
[  482.602929][T17741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17741 comm=syz.0.1755
[  482.852790][   T30] audit: type=1326 audit(1761215232.271:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  482.908279][   T30] audit: type=1326 audit(1761215232.308:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  483.531739][   T30] audit: type=1326 audit(1761215232.308:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  483.600341][   T30] audit: type=1326 audit(1761215232.308:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  483.803790][   T30] audit: type=1326 audit(1761215232.308:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  483.901294][T17777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1761'.
[  483.902000][T17779] netlink: 'syz.2.1762': attribute type 21 has an invalid length.
[  483.949323][   T30] audit: type=1326 audit(1761215232.308:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  483.993779][T17780] netlink: 'syz.2.1762': attribute type 21 has an invalid length.
[  484.081324][T17780] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.095220][T17779] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.118265][   T30] audit: type=1326 audit(1761215232.308:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  484.183136][T17779] IPv6: Can't replace route, no match found
[  484.206314][   T30] audit: type=1326 audit(1761215232.317:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  484.230785][T17780] IPv6: Can't replace route, no match found
[  484.303683][   T30] audit: type=1326 audit(1761215232.317:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  484.337347][   T30] audit: type=1326 audit(1761215232.317:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f0cd8efc9 code=0x7ffc0000
[  484.710352][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1764'.
[  484.835671][T17801] gretap1: entered promiscuous mode
[  485.564257][T17814] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  485.946702][ T5886] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  486.267490][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  486.455289][ T5886] usb 4-1: config 0 has an invalid interface number: 230 but max is 0
[  486.465371][ T5886] usb 4-1: config 0 has no interface number 0
[  486.474987][ T5886] usb 4-1: config 0 interface 230 has no altsetting 0
[  486.495508][ T5886] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  486.521198][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.539356][ T5886] usb 4-1: Product: syz
[  486.543905][ T5886] usb 4-1: Manufacturer: syz
[  486.549808][ T5886] usb 4-1: SerialNumber: syz
[  486.558219][ T5886] usb 4-1: config 0 descriptor??
[  486.565163][ T5886] ums-usbat 4-1:0.230: USB Mass Storage device detected
[  486.923720][ T5886] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  487.700015][   T42] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  487.845908][T17894] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  487.867584][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  487.888752][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.898977][   T42] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  487.911345][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.929128][   T42] usb 1-1: config 0 descriptor??
[  488.238147][T17907] overlayfs: workdir and upperdir must reside under the same mount
[  488.397214][T17919] FAULT_INJECTION: forcing a failure.
[  488.397214][T17919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  488.411660][T17919] CPU: 0 UID: 0 PID: 17919 Comm: syz.1.1789 Not tainted syzkaller #0 PREEMPT(full) 
[  488.411682][T17919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  488.411692][T17919] Call Trace:
[  488.411697][T17919]  <TASK>
[  488.411703][T17919]  dump_stack_lvl+0x16c/0x1f0
[  488.411732][T17919]  should_fail_ex+0x512/0x640
[  488.411755][T17919]  _copy_from_user+0x2e/0xd0
[  488.411777][T17919]  __sys_bpf+0x248/0x4980
[  488.411806][T17919]  ? __pfx___sys_bpf+0x10/0x10
[  488.411827][T17919]  ? find_held_lock+0x2b/0x80
[  488.411854][T17919]  ? find_held_lock+0x2b/0x80
[  488.411880][T17919]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  488.411919][T17919]  ? fput+0x9b/0xd0
[  488.411937][T17919]  ? ksys_write+0x1ac/0x250
[  488.411950][T17919]  ? __pfx_ksys_write+0x10/0x10
[  488.411968][T17919]  __x64_sys_bpf+0x78/0xc0
[  488.411991][T17919]  ? lockdep_hardirqs_on+0x7c/0x110
[  488.412011][T17919]  do_syscall_64+0xcd/0xfa0
[  488.412034][T17919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.412049][T17919] RIP: 0033:0x7ffac0b8efc9
[  488.412061][T17919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  488.412075][T17919] RSP: 002b:00007ffac1ae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  488.412089][T17919] RAX: ffffffffffffffda RBX: 00007ffac0de5fa0 RCX: 00007ffac0b8efc9
[  488.412099][T17919] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  488.412108][T17919] RBP: 00007ffac1ae6090 R08: 0000000000000000 R09: 0000000000000000
[  488.412117][T17919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  488.412126][T17919] R13: 00007ffac0de6038 R14: 00007ffac0de5fa0 R15: 00007ffde79f43c8
[  488.412148][T17919]  </TASK>
[  488.637027][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  488.637043][   T30] audit: type=1400 audit(1761215237.733:743): avc:  denied  { map } for  pid=17925 comm="syz.1.1791" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  488.689642][   T30] audit: type=1400 audit(1761215237.733:744): avc:  denied  { execute } for  pid=17925 comm="syz.1.1791" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  488.877433][   T42] elan 0003:04F3:0755.0026: unknown main item tag 0x0
[  488.884254][   T42] elan 0003:04F3:0755.0026: unknown main item tag 0x0
[  488.893262][   T42] elan 0003:04F3:0755.0026: item fetching failed at offset 2/5
[  489.044974][T17932] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  489.105789][   T30] audit: type=1400 audit(1761215238.164:745): avc:  denied  { shutdown } for  pid=17925 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  489.209196][   T42] elan 0003:04F3:0755.0026: Hid Parse failed
[  489.225238][   T42] elan 0003:04F3:0755.0026: probe with driver elan failed with error -22
[  489.297280][   T30] audit: type=1400 audit(1761215238.164:746): avc:  denied  { read } for  pid=17925 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  490.076883][ T5886] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5
[  490.087315][   T10] usb 1-1: USB disconnect, device number 47
[  490.111194][ T5886] usb 4-1: USB disconnect, device number 39
[  490.187562][T17968] overlayfs: failed to clone upperpath
[  490.380087][   T30] audit: type=1400 audit(1761215239.370:747): avc:  denied  { name_bind } for  pid=17947 comm="syz.2.1793" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  490.597163][ T5886] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  490.909375][ T5886] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[  491.095183][ T5886] usb 4-1: config 0 has no interface number 0
[  491.249540][ T5886] usb 4-1: config 0 interface 182 has no altsetting 0
[  491.284004][ T5886] usb 4-1: language id specifier not provided by device, defaulting to English
[  491.681769][   T30] audit: type=1400 audit(1761215240.586:748): avc:  denied  { append } for  pid=17988 comm="syz.0.1799" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  491.722738][ T5886] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=40.a5
[  492.213746][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.226453][ T5886] usb 4-1: Product: ᳒컉妇冑〔Ԝ䷝䯉宸
[  492.234445][ T5886] usb 4-1: SerialNumber: syz
[  492.261249][ T5886] usb 4-1: config 0 descriptor??
[  492.438099][   T30] audit: type=1400 audit(1761215241.297:749): avc:  denied  { ioctl } for  pid=17996 comm="syz.1.1800" path="socket:[37022]" dev="sockfs" ino=37022 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  493.218331][   T30] audit: type=1326 audit(1761215241.344:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb03b8efc9 code=0x7ffc0000
[  493.242062][   T30] audit: type=1326 audit(1761215241.353:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb03b8efc9 code=0x7ffc0000
[  493.269296][   T30] audit: type=1326 audit(1761215241.456:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb03b8efc9 code=0x7ffc0000
[  493.292691][    C1] vkms_vblank_simulate: vblank timer overrun
[  493.709610][T18018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18018 comm=syz.1.1804
[  493.998539][   T30] kauditd_printk_skb: 139 callbacks suppressed
[  493.998553][   T30] audit: type=1326 audit(1761215242.756:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb03b8efc9 code=0x7ffc0000
[  494.259859][   T30] audit: type=1326 audit(1761215242.785:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb03b8f003 code=0x7ffc0000
[  494.300178][   T30] audit: type=1326 audit(1761215242.887:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb03b8f003 code=0x7ffc0000
[  494.637386][   T30] audit: type=1326 audit(1761215242.972:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb03b8efc9 code=0x7ffc0000
[  494.852018][ T5865] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  495.020275][ T5865] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  495.027378][   T30] audit: type=1326 audit(1761215242.972:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb03b8f003 code=0x7ffc0000
[  495.061726][ T5865] usb 2-1: config 0 has no interface number 0
[  495.083355][ T5886] gspca_main: spca501-2.14.0 probing 0000:0000
[  495.138844][   T30] audit: type=1326 audit(1761215242.972:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feb03b8f087 code=0x7ffc0000
[  495.174163][ T5865] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 97, changing to 7
[  495.204960][ T5886] gspca_spca501: reg write: error -71
[  495.243933][   T30] audit: type=1326 audit(1761215242.972:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feb03b4644d code=0x7ffc0000
[  495.287233][ T5886] spca501 4-1:0.182: Reg write failed for 0x02,0x0f,0x05
[  495.298004][ T5865] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 24929, setting to 1024
[  495.316854][ T5886] spca501 4-1:0.182: probe with driver spca501 failed with error -22
[  495.367110][ T5886] uvcvideo 4-1:0.182: Found UVC 0.00 device ᳒컉妇冑〔Ԝ䷝䯉宸 (0000:0000)
[  495.381223][ T5865] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  495.407594][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.419174][ T5886] uvcvideo 4-1:0.182: No valid video chain found.
[  495.455282][   T30] audit: type=1326 audit(1761215242.972:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feb03bc3709 code=0x7ffc0000
[  495.500656][ T5886] usb 4-1: USB disconnect, device number 40
[  495.513106][ T5865] usb 2-1: config 0 descriptor??
[  495.514770][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  495.561639][ T5865] ttusbir 2-1:0.83: cannot find expected altsetting
[  495.773005][    T9] usb 1-1: Using ep0 maxpacket: 16
[  495.782323][   T30] audit: type=1326 audit(1761215242.972:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feb03b464b7 code=0x7ffc0000
[  495.786392][ T5865] usb 2-1: USB disconnect, device number 28
[  495.839362][    T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  495.868021][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.908314][    T9] usb 1-1: config 0 has no interface number 0
[  495.938858][   T30] audit: type=1326 audit(1761215242.972:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.5.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feb03b45bc7 code=0x7ffc0000
[  496.096853][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  496.179911][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.188041][    T9] usb 1-1: Product: syz
[  496.194118][    T9] usb 1-1: Manufacturer: syz
[  496.198804][    T9] usb 1-1: SerialNumber: syz
[  496.225447][    T9] usb 1-1: config 0 descriptor??
[  496.281009][ T5183] Dev loop4: unable to read RDB block 7
[  496.287868][ T5183]  loop4: unable to read partition table
[  496.294719][ T5183] loop4: partition table beyond EOD, truncated
[  496.300409][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'.
[  496.624868][T18127] FAULT_INJECTION: forcing a failure.
[  496.624868][T18127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  496.638416][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.5.1814 Not tainted syzkaller #0 PREEMPT(full) 
[  496.638438][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  496.638448][T18127] Call Trace:
[  496.638454][T18127]  <TASK>
[  496.638461][T18127]  dump_stack_lvl+0x16c/0x1f0
[  496.638491][T18127]  should_fail_ex+0x512/0x640
[  496.638518][T18127]  _copy_to_user+0x32/0xd0
[  496.638541][T18127]  simple_read_from_buffer+0xcb/0x170
[  496.638570][T18127]  proc_fail_nth_read+0x197/0x240
[  496.638591][T18127]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  496.638612][T18127]  ? rw_verify_area+0xcf/0x6c0
[  496.638636][T18127]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  496.638656][T18127]  vfs_read+0x1e4/0xcf0
[  496.638676][T18127]  ? __pfx___mutex_lock+0x10/0x10
[  496.638698][T18127]  ? __pfx_vfs_read+0x10/0x10
[  496.638721][T18127]  ? __fget_files+0x20e/0x3c0
[  496.638746][T18127]  ksys_read+0x12a/0x250
[  496.638761][T18127]  ? __pfx_ksys_read+0x10/0x10
[  496.638778][T18127]  ? fput+0x9b/0xd0
[  496.638802][T18127]  do_syscall_64+0xcd/0xfa0
[  496.638829][T18127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  496.638847][T18127] RIP: 0033:0x7feb03b8d9dc
[  496.638861][T18127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  496.638877][T18127] RSP: 002b:00007feb01db4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  496.638895][T18127] RAX: ffffffffffffffda RBX: 00007feb03de6180 RCX: 00007feb03b8d9dc
[  496.638906][T18127] RDX: 000000000000000f RSI: 00007feb01db40a0 RDI: 0000000000000009
[  496.638916][T18127] RBP: 00007feb01db4090 R08: 0000000000000000 R09: 0000000000000000
[  496.638926][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  496.638935][T18127] R13: 00007feb03de6218 R14: 00007feb03de6180 R15: 00007ffe147efdf8
[  496.638961][T18127]  </TASK>
[  496.929170][    T9] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  496.936681][    T9] uvcvideo 1-1:0.105: No valid video chain found.
[  496.937285][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  497.038287][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  497.047437][T16468] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  497.058660][T16468] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  497.069515][T16468] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  497.097248][T16468] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  497.171863][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  497.332199][   T10] usb 6-1: Using ep0 maxpacket: 32
[  497.769444][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  497.786752][   T10] usb 6-1: unable to read config index 0 descriptor/start: -71
[  497.802425][   T10] usb 6-1: can't read configurations, error -71
[  498.729122][ T5865] usb 1-1: USB disconnect, device number 48
[  499.614489][T18199] input: syz1 as /devices/virtual/input/input48
[  499.981268][ T5865] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  500.913577][ T5865] usb 4-1: Using ep0 maxpacket: 32
[  500.920309][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.932001][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.943104][ T5865] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.956326][ T5865] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  500.969358][ T5865] usb 4-1: config 0 interface 0 has no altsetting 0
[  500.976256][ T5865] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  500.988581][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.015180][ T5865] usb 4-1: config 0 descriptor??
[  501.380666][T18237] netlink: 'syz.5.1830': attribute type 2 has an invalid length.
[  501.390050][T18237] FAULT_INJECTION: forcing a failure.
[  501.390050][T18237] name failslab, interval 1, probability 0, space 0, times 0
[  501.402772][T18237] CPU: 1 UID: 0 PID: 18237 Comm: syz.5.1830 Not tainted syzkaller #0 PREEMPT(full) 
[  501.402795][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  501.402805][T18237] Call Trace:
[  501.402814][T18237]  <TASK>
[  501.402822][T18237]  dump_stack_lvl+0x16c/0x1f0
[  501.402852][T18237]  should_fail_ex+0x512/0x640
[  501.402875][T18237]  ? __kmalloc_noprof+0xca/0x880
[  501.402902][T18237]  should_failslab+0xc2/0x120
[  501.402923][T18237]  __kmalloc_noprof+0xdd/0x880
[  501.402947][T18237]  ? tbl_mask_array_alloc+0x38/0x160
[  501.402972][T18237]  ? tbl_mask_array_alloc+0x38/0x160
[  501.402990][T18237]  tbl_mask_array_alloc+0x38/0x160
[  501.403012][T18237]  ovs_flow_tbl_init+0x40/0x600
[  501.403032][T18237]  ? kasan_save_track+0x14/0x30
[  501.403052][T18237]  ovs_dp_cmd_new+0x251/0xe60
[  501.403082][T18237]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  501.403110][T18237]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[  501.403139][T18237]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[  501.403173][T18237]  genl_family_rcv_msg_doit+0x209/0x2f0
[  501.403202][T18237]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  501.403238][T18237]  ? bpf_lsm_capable+0x9/0x10
[  501.403257][T18237]  ? security_capable+0x7e/0x260
[  501.403285][T18237]  ? ns_capable+0xd7/0x110
[  501.403308][T18237]  genl_rcv_msg+0x55c/0x800
[  501.403327][T18237]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.403344][T18237]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  501.403376][T18237]  netlink_rcv_skb+0x158/0x420
[  501.403405][T18237]  ? __pfx_genl_rcv_msg+0x10/0x10
[  501.403423][T18237]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  501.403469][T18237]  genl_rcv+0x28/0x40
[  501.403493][T18237]  netlink_unicast+0x5aa/0x870
[  501.403522][T18237]  ? __pfx_netlink_unicast+0x10/0x10
[  501.403545][T18237]  ? netlink_autobind.isra.0+0xa8/0x370
[  501.403579][T18237]  netlink_sendmsg+0x8c8/0xdd0
[  501.403609][T18237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.403636][T18237]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.403666][T18237]  ____sys_sendmsg+0xa98/0xc70
[  501.403694][T18237]  ? copy_msghdr_from_user+0x10a/0x160
[  501.403716][T18237]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.403757][T18237]  ___sys_sendmsg+0x134/0x1d0
[  501.403781][T18237]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.403800][T18237]  ? __lock_acquire+0x622/0x1c90
[  501.403867][T18237]  __sys_sendmsg+0x16d/0x220
[  501.403889][T18237]  ? __pfx___sys_sendmsg+0x10/0x10
[  501.403932][T18237]  do_syscall_64+0xcd/0xfa0
[  501.403960][T18237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.403978][T18237] RIP: 0033:0x7feb03b8efc9
[  501.403992][T18237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.404008][T18237] RSP: 002b:00007feb01db4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.404025][T18237] RAX: ffffffffffffffda RBX: 00007feb03de6180 RCX: 00007feb03b8efc9
[  501.404036][T18237] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003
[  501.404047][T18237] RBP: 00007feb01db4090 R08: 0000000000000000 R09: 0000000000000000
[  501.404057][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  501.404068][T18237] R13: 00007feb03de6218 R14: 00007feb03de6180 R15: 00007ffe147efdf8
[  501.404094][T18237]  </TASK>
[  501.719215][    C1] vkms_vblank_simulate: vblank timer overrun
[  501.727344][ T5865] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  501.735197][ T5865] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  501.743047][ T5865] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  501.750882][ T5865] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  501.758914][ T5865] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  501.767920][ T5865] hid-thrustmaster 0003:044F:B65D.0027: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  501.780040][ T5865] hid-thrustmaster 0003:044F:B65D.0027: Wrong number of endpoints?
[  501.872324][   T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  501.885293][T18194] batman_adv: batadv0: Adding interface: gretap1
[  501.891731][T18194] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.916993][    C1] vkms_vblank_simulate: vblank timer overrun
[  501.923750][T18194] batman_adv: batadv0: Interface activated: gretap1
[  501.956782][T18193] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  502.012942][T18254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18254 comm=syz.0.1833
[  502.112888][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  502.135958][T18254] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  502.215582][T18254] bond4: (slave bridge1): making interface the new active one
[  502.224332][T18254] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  502.276973][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.293438][   T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  502.320298][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.719992][   T10] usb 2-1: config 0 descriptor??
[  503.070605][    C1] hid-thrustmaster 0003:044F:B65D.0027: URB to get model id failed with error -71
[  503.200498][   T10] elan 0003:04F3:0755.0028: unknown main item tag 0x0
[  503.244414][   T10] elan 0003:04F3:0755.0028: unknown main item tag 0x0
[  503.288040][   T10] elan 0003:04F3:0755.0028: item fetching failed at offset 2/5
[  503.356396][   T10] elan 0003:04F3:0755.0028: Hid Parse failed
[  503.386212][   T10] elan 0003:04F3:0755.0028: probe with driver elan failed with error -22
[  503.575987][ T5865] usb 4-1: USB disconnect, device number 41
[  503.835895][T18318] netem: change failed
[  504.004425][T17143] usb 2-1: USB disconnect, device number 29
[  504.579799][T18331] syz.5.1840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  504.580075][T18331] CPU: 0 UID: 0 PID: 18331 Comm: syz.5.1840 Not tainted syzkaller #0 PREEMPT(full) 
[  504.580099][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  504.580110][T18331] Call Trace:
[  504.580117][T18331]  <TASK>
[  504.580124][T18331]  dump_stack_lvl+0x16c/0x1f0
[  504.580157][T18331]  warn_alloc+0x248/0x3a0
[  504.580187][T18331]  ? __pfx_warn_alloc+0x10/0x10
[  504.580214][T18331]  ? __pfx_stack_trace_save+0x10/0x10
[  504.580250][T18331]  ? kasan_save_stack+0x42/0x60
[  504.580265][T18331]  ? kasan_save_stack+0x33/0x60
[  504.580279][T18331]  ? kasan_save_track+0x14/0x30
[  504.580295][T18331]  ? xskq_create+0x52/0x1d0
[  504.580317][T18331]  ? xsk_setsockopt+0x74e/0x9a0
[  504.580335][T18331]  ? do_sock_setsockopt+0xf3/0x1d0
[  504.580360][T18331]  ? xskq_create+0xfb/0x1d0
[  504.580381][T18331]  __vmalloc_node_range_noprof+0xfbc/0x1480
[  504.580410][T18331]  ? xskq_create+0xfb/0x1d0
[  504.580437][T18331]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  504.580470][T18331]  ? xskq_create+0xfb/0x1d0
[  504.580491][T18331]  vmalloc_user_noprof+0x9e/0xe0
[  504.580514][T18331]  ? xskq_create+0xfb/0x1d0
[  504.580536][T18331]  xskq_create+0xfb/0x1d0
[  504.580560][T18331]  xsk_setsockopt+0x74e/0x9a0
[  504.580582][T18331]  ? __pfx_xsk_setsockopt+0x10/0x10
[  504.580609][T18331]  ? find_held_lock+0x2b/0x80
[  504.580638][T18331]  ? selinux_socket_setsockopt+0x6a/0x80
[  504.580669][T18331]  ? __pfx_xsk_setsockopt+0x10/0x10
[  504.580692][T18331]  do_sock_setsockopt+0xf3/0x1d0
[  504.580724][T18331]  __sys_setsockopt+0x1a0/0x230
[  504.580755][T18331]  __x64_sys_setsockopt+0xbd/0x160
[  504.580777][T18331]  ? do_syscall_64+0x91/0xfa0
[  504.580804][T18331]  ? lockdep_hardirqs_on+0x7c/0x110
[  504.580830][T18331]  do_syscall_64+0xcd/0xfa0
[  504.580859][T18331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.580878][T18331] RIP: 0033:0x7feb03b8efc9
[  504.580894][T18331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.580912][T18331] RSP: 002b:00007feb01df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  504.580929][T18331] RAX: ffffffffffffffda RBX: 00007feb03de5fa0 RCX: 00007feb03b8efc9
[  504.580941][T18331] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  504.580951][T18331] RBP: 00007feb03c11f91 R08: 0000000000000004 R09: 0000000000000000
[  504.580961][T18331] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  504.580971][T18331] R13: 00007feb03de6038 R14: 00007feb03de5fa0 R15: 00007ffe147efdf8
[  504.580998][T18331]  </TASK>
[  504.645659][T18331] Mem-Info:
[  504.975521][T18331] active_anon:15300 inactive_anon:0 isolated_anon:0
[  504.975521][T18331]  active_file:19415 inactive_file:41212 isolated_file:0
[  504.975521][T18331]  unevictable:768 dirty:260 writeback:0
[  504.975521][T18331]  slab_reclaimable:12109 slab_unreclaimable:102859
[  504.975521][T18331]  mapped:34334 shmem:4259 pagetables:1586
[  504.975521][T18331]  sec_pagetables:0 bounce:0
[  504.975521][T18331]  kernel_misc_reclaimable:0
[  504.975521][T18331]  free:1290546 free_pcp:15088 free_cma:0
[  504.975569][T18331] Node 0 active_anon:61200kB inactive_anon:0kB active_file:77572kB inactive_file:164592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137240kB dirty:1040kB writeback:0kB shmem:15500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12692kB pagetables:6224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  504.975612][T18331] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  504.975654][T18331] Node 0 DMA free:15312kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:16kB free_cma:0kB
[  504.975705][T18331] lowmem_reserve[]: 0 2485 2487 2487 2487
[  504.975738][T18331] Node 0 DMA32 free:1250652kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61200kB inactive_anon:0kB active_file:77572kB inactive_file:164592kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2544884kB mlocked:0kB bounce:0kB free_pcp:48528kB local_pcp:31336kB free_cma:0kB
[  504.975788][T18331] lowmem_reserve[]: 0 0 1 1 1
[  504.975819][T18331] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  504.975875][T18331] lowmem_reserve[]: 0 0 0 0 0
[  504.976558][T18331] Node 1 Normal free:3896220kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:256kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11776kB local_pcp:3808kB free_cma:0kB
[  504.976610][T18331] lowmem_reserve[]: 0 0 0 0 0
[  504.976646][T18331] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15312kB
[  504.976817][T18331] Node 0 DMA32: 819*4kB (UE) 246*8kB (UME) 142*16kB (UME) 8*32kB (UME) 196*64kB (UME) 178*128kB (UM) 57*256kB (UME) 22*512kB (UM) 28*1024kB (UM) 17*2048kB (UME) 273*4096kB (UM) = 1250652kB
[  504.976976][T18331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  504.977086][T18331] Node 1 Normal: 169*4kB (UME) 59*8kB (UME) 54*16kB (UME) 208*32kB (UME) 77*64kB (UME) 17*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3896220kB
[  504.977266][T18331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.977280][T18331] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  504.977294][T18331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  504.977307][T18331] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  504.977321][T18331] 64882 total pagecache pages
[  504.977328][T18331] 0 pages in swap cache
[  504.977335][T18331] Free swap  = 124996kB
[  504.977342][T18331] Total swap = 124996kB
[  504.977354][T18331] 2097051 pages RAM
[  504.977361][T18331] 0 pages HighMem/MovableOnly
[  504.977368][T18331] 428740 pages reserved
[  504.977374][T18331] 0 pages cma reserved
[  505.023040][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.061483][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.198581][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.544446][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.787047][T18364] syzkaller1: entered promiscuous mode
[  505.787063][T18364] syzkaller1: entered allmulticast mode
[  505.863294][T17143] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  506.793436][T17143] usb 1-1: Using ep0 maxpacket: 8
[  507.129064][T17143] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  507.148904][T17143] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  507.195625][T17143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.210795][T17143] usb 1-1: Product: syz
[  507.228510][T17143] usb 1-1: Manufacturer: syz
[  507.237091][T17143] usb 1-1: SerialNumber: syz
[  507.250259][T17143] usb 1-1: config 0 descriptor??
[  507.259255][T17143] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  507.830755][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  507.830769][   T30] audit: type=1400 audit(1761215255.693:962): avc:  denied  { search } for  pid=18397 comm="syz.2.1853" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  507.840139][T18401] ieee802154 phy1 wpan1: encryption failed: -22
[  507.917979][   T30] audit: type=1400 audit(1761215255.693:963): avc:  denied  { write } for  pid=18400 comm="syz.3.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  507.953735][   T30] audit: type=1400 audit(1761215255.730:964): avc:  denied  { search } for  pid=18397 comm="syz.2.1853" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  507.976812][   T30] audit: type=1400 audit(1761215255.730:965): avc:  denied  { read open } for  pid=18397 comm="syz.2.1853" path="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  508.159902][T18413] syzkaller1: entered promiscuous mode
[  508.165499][T18413] syzkaller1: entered allmulticast mode
[  508.268982][T18419] overlayfs: failed to clone lowerpath
[  508.345258][T18420] overlayfs: failed to clone upperpath
[  508.413970][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1855'.
[  508.674306][T17143] gspca_zc3xx: reg_w_i err -110
[  509.316358][T17143] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  509.326783][T17143] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  509.365366][T17143] usb 1-1: USB disconnect, device number 49
[  509.434058][   T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  509.594695][   T10] usb 4-1: Using ep0 maxpacket: 16
[  509.614659][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.630852][   T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  509.655767][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.666284][   T10] usb 4-1: Product: syz
[  509.670602][   T10] usb 4-1: Manufacturer: syz
[  509.683048][   T10] usb 4-1: SerialNumber: syz
[  509.702636][   T10] usb 4-1: config 0 descriptor??
[  509.721906][   T10] usb 4-1: selecting invalid altsetting 1
[  509.722630][T17143] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  509.729198][   T10] usb 4-1: Can not set alternate setting to 1, error: -22
[  509.742452][   T10] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -22
[  509.835189][T18475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18475 comm=syz.2.1864
[  509.934877][   T10] usb 4-1: USB disconnect, device number 42
[  509.947617][T17143] usb 1-1: Using ep0 maxpacket: 8
[  509.956395][T17143] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  509.971846][T17143] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  510.012723][T17143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.020735][T17143] usb 1-1: Product: syz
[  510.038039][T17143] usb 1-1: Manufacturer: 糆È㊅ᢘ┮쫡뻧쬿ﵯ䁞昱洰㗍㒴藑₢涎态╈紮ႋݻ㣚쑐瀰諃뢮彮曼뵆궚艄㯗ᮐ鸇揝㙲䧠ᣈ㥯ꓜ뺭졤꼖朲撽䊢⃉췺ꂫỰ용蔌䀹ꤴ᳣삁飑겱웼⯦럕懲䌶飩⏘鿈㋈方൫킢庫﷒튢襁
[  510.211871][T18493] mkiss: ax0: crc mode is auto.
[  510.617519][T17143] usb 1-1: SerialNumber: syz
[  510.712600][ T6275] Bluetooth: Error in BCSP hdr checksum
[  510.724617][T17143] usb 1-1: config 0 descriptor??
[  510.791141][T17143] usb 1-1: can't set config #0, error -71
[  510.806241][T17143] usb 1-1: USB disconnect, device number 50
[  511.804440][T18517] : entered promiscuous mode
[  511.922221][T18518] syzkaller1: entered promiscuous mode
[  511.928005][T18518] syzkaller1: entered allmulticast mode
[  512.295457][T18536] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  512.606094][ T5817] Bluetooth: hci5: command 0x1003 tx timeout
[  512.612433][ T5811] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  512.934867][T18556] geneve2: entered promiscuous mode
[  512.935832][   T30] audit: type=1400 audit(1761215260.464:966): avc:  denied  { getopt } for  pid=18563 comm="syz.2.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  512.953470][T18556] geneve2: entered allmulticast mode
[  512.966117][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'.
[  512.986041][T18564] netlink: 'syz.2.1878': attribute type 62 has an invalid length.
[  513.016089][T18557] geneve2: entered promiscuous mode
[  513.021336][   T30] audit: type=1400 audit(1761215260.548:967): avc:  denied  { mount } for  pid=18567 comm="syz.1.1880" name="/" dev="rpc_pipefs" ino=37599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  513.058365][T18557] geneve2: entered allmulticast mode
[  513.075188][   T30] audit: type=1400 audit(1761215260.595:968): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  514.580485][T18612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18612 comm=syz.1.1885
[  514.608241][T17143] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  514.647894][T18613] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1887'.
[  514.657246][T18613] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1887'.
[  514.847406][T17143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.851572][T18617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1888'.
[  514.868976][T17143] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  514.879770][T17143] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  514.929332][T17143] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  515.230394][T17143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.265605][T17143] usb 1-1: config 0 descriptor??
[  516.037700][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  516.190151][T17143] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  516.385916][T18639] veth2: entered promiscuous mode
[  516.391303][T18639] veth2: entered allmulticast mode
[  516.409636][T17143] usb 1-1: USB disconnect, device number 51
[  516.976676][T18668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1893'.
[  517.385820][T18651] fido_id[18651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  517.386616][T18680] syzkaller1: entered promiscuous mode
[  517.432807][T18680] syzkaller1: entered allmulticast mode
[  517.459876][T18687] binder: 18686:18687 ioctl c0306201 0 returned -14
[  517.718515][T18699] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1898'.
[  518.200328][   T10] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  518.373153][   T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  518.396408][   T10] usb 1-1: config 0 has no interface number 0
[  518.407114][   T10] usb 1-1: config 0 interface 41 has no altsetting 0
[  518.423774][   T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  518.453059][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.461333][   T10] usb 1-1: Product: syz
[  518.465576][   T10] usb 1-1: Manufacturer: syz
[  518.470432][   T10] usb 1-1: SerialNumber: syz
[  518.486347][   T10] usb 1-1: config 0 descriptor??
[  519.148019][   T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  519.171052][   T10] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  519.234396][   T10] usb 1-1: USB disconnect, device number 52
[  519.245475][    T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  519.493884][    T9] usb 4-1: Using ep0 maxpacket: 8
[  519.519183][    T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  519.523315][   T30] audit: type=1400 audit(1761215266.628:969): avc:  denied  { node_bind } for  pid=18751 comm="syz.2.1908" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  519.528496][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.528518][    T9] usb 4-1: Product: syz
[  519.528532][    T9] usb 4-1: Manufacturer: syz
[  519.528546][    T9] usb 4-1: SerialNumber: syz
[  519.642640][T18754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1907'.
[  520.017766][    T9] usb 4-1: config 0 descriptor??
[  520.107355][T18758] input: syz1 as /devices/virtual/input/input49
[  521.845369][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  522.087471][T18777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1913'.
[  522.259967][   T30] audit: type=1400 audit(1761215269.191:970): avc:  denied  { create } for  pid=18780 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  523.798149][T17143] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  523.885711][    T9] gspca_sunplus: reg_w_riv err -71
[  523.954126][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  523.973599][    T9] usb 4-1: USB disconnect, device number 43
[  523.994713][T17143] usb 6-1: Using ep0 maxpacket: 32
[  524.130581][   T30] audit: type=1400 audit(1761215270.931:971): avc:  denied  { ioctl } for  pid=18780 comm="syz.1.1914" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  524.350857][T18781] mkiss: ax0: crc mode is auto.
[  524.402543][   T30] audit: type=1400 audit(1761215270.931:972): avc:  denied  { accept } for  pid=18780 comm="syz.1.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  524.406779][T17143] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  524.472996][T17143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.503097][T17143] usb 6-1: Product: syz
[  524.552380][T17143] usb 6-1: Manufacturer: syz
[  524.557014][T17143] usb 6-1: SerialNumber: syz
[  524.613811][T17143] usb 6-1: config 0 descriptor??
[  524.628612][T17143] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  525.183216][T18817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'.
[  525.561097][T18839] input: syz1 as /devices/virtual/input/input50
[  526.096935][T18847] netlink: 'syz.2.1923': attribute type 19 has an invalid length.
[  526.149651][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'.
[  526.556839][T18855] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1924'.
[  527.020894][T18862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1925'.
[  527.041598][T17143] gspca_ov534_9: reg_r err -110
[  527.095327][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1910'.
[  527.119588][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1910'.
[  527.409741][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  527.497986][T18870] No memory to map
[  527.533709][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  527.542615][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'.
[  527.629820][T17143] gspca_ov534_9: Unknown sensor 0000
[  527.629903][T17143] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  527.664364][T17143] usb 6-1: USB disconnect, device number 10
[  527.757813][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  527.939692][   T10] usb 4-1: Using ep0 maxpacket: 32
[  527.950847][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  527.963238][   T10] usb 4-1: config 0 has no interface number 0
[  527.969401][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  528.037069][T18871] tipc: Started in network mode
[  528.047597][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  528.064757][T18871] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  528.068262][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.080844][   T10] usb 4-1: Product: syz
[  528.084994][   T10] usb 4-1: Manufacturer: syz
[  528.089870][T18871] tipc: Enabled bearer <eth:team0>, priority 0
[  528.089919][   T10] usb 4-1: SerialNumber: syz
[  528.128786][   T10] usb 4-1: config 0 descriptor??
[  528.137300][   T10] smsc75xx v1.0.0
[  528.254433][T18895] mkiss: ax0: crc mode is auto.
[  529.286712][T17143] tipc: Node number set to 11578026
[  529.451036][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  529.463265][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  530.276120][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  530.296065][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  530.353309][T18928] input: syz1 as /devices/virtual/input/input51
[  532.883527][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  532.972824][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  532.998588][   T10] usb 4-1: USB disconnect, device number 44
[  533.252810][T18960] trusted_key: syz.3.1943 sent an empty control message without MSG_MORE.
[  533.581483][   T30] audit: type=1326 audit(1761215279.780:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18962 comm="syz.3.1944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x0
[  533.669646][    T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  533.808636][    T9] usb 1-1: device descriptor read/64, error -71
[  533.958280][ T5865] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  534.065316][    T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  534.075882][ T5808] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  534.121684][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  534.142941][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  534.166085][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  534.188376][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  534.204146][    T9] usb 1-1: device descriptor read/64, error -71
[  534.210579][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  534.239855][ T5865] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  534.254203][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.270298][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.280378][ T5808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.290600][ T5865] usb 4-1: Product: syz
[  534.295285][ T5808] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  534.308304][ T5865] usb 4-1: Manufacturer: syz
[  534.312998][ T5865] usb 4-1: SerialNumber: syz
[  534.319545][ T5865] usb 4-1: config 0 descriptor??
[  534.322465][    T9] usb usb1-port1: attempt power cycle
[  534.329193][ T5808] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  534.339061][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.348989][T18982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  534.359590][ T5808] usb 6-1: config 0 descriptor??
[  534.366115][ T5865] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input52
[  534.626391][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1948'.
[  534.685234][    T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  534.753826][    T9] usb 1-1: device descriptor read/8, error -71
[  534.830535][ T5808] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  535.000050][T19006] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  535.022082][T19006] ./file0: Can't lookup blockdev
[  535.539200][    T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  535.845650][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'.
[  535.865819][    T9] usb 1-1: device descriptor read/8, error -71
[  535.922773][T18975] netlink: 'syz.5.1946': attribute type 5 has an invalid length.
[  535.955992][T18975] netlink: 'syz.5.1946': attribute type 8 has an invalid length.
[  535.983238][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'.
[  535.995558][    T9] usb usb1-port1: unable to enumerate USB device
[  536.018840][T18975] geneve2: entered promiscuous mode
[  536.026067][T18975] geneve2: entered allmulticast mode
[  536.033649][ T6307] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  536.043568][ T6307] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  536.052465][ T6307] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  536.061813][ T6307] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  536.128467][ T5865] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  536.288812][ T5865] usb 2-1: Using ep0 maxpacket: 32
[  536.297568][   T30] audit: type=1326 audit(1761215282.315:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.2.1953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb9058efc9 code=0x0
[  536.298944][ T5865] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  536.330493][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.343725][ T5865] usb 2-1: config 0 descriptor??
[  536.474985][   T30] audit: type=1400 audit(1761215282.483:975): avc:  denied  { ioctl } for  pid=18974 comm="syz.5.1946" path="socket:[39132]" dev="sockfs" ino=39132 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  536.500822][    C1] plantronics 0003:047F:FFFF.002A: hid_field_extract() called with n (132) > 32! (syz-executor)
[  536.521533][   T30] audit: type=1400 audit(1761215282.530:976): avc:  denied  { ioctl } for  pid=19040 comm="syz.0.1956" path="socket:[39955]" dev="sockfs" ino=39955 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  536.600142][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  536.620630][T19041] block nbd0: server does not support multiple connections per device.
[  536.626960][ T5865] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  536.633045][T19041] block nbd0: shutting down sockets
[  536.646552][ T5865] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  536.650976][   T30] audit: type=1400 audit(1761215282.651:977): avc:  denied  { firmware_load } for  pid=5865 comm="kworker/1:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  536.720689][    T9] usb 6-1: USB disconnect, device number 11
[  536.800638][T17143] usb 4-1: USB disconnect, device number 45
[  536.845795][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1958'.
[  536.895776][T19078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19078 comm=syz.0.1957
[  538.673746][T19112] Bluetooth: MGMT ver 1.23
[  539.062107][T19129] No memory to map
[  539.138118][T19130] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1970'.
[  541.983676][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034299000: rx timeout, send abort
[  541.992150][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034299400: rx timeout, send abort
[  542.000704][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034299000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  542.015076][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888034299400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  542.992169][T19176] input: syz1 as /devices/virtual/input/input55
[  544.905802][T19216] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  544.954394][   T30] audit: type=1326 audit(1761215290.415:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19219 comm="syz.0.1989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe73758efc9 code=0x0
[  544.977288][    C1] vkms_vblank_simulate: vblank timer overrun
[  545.482739][    T9] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  545.499491][T19238] overlay: Unknown parameter 'euid'
[  546.078759][T19187] syz.3.1981 (19187) used greatest stack depth: 19720 bytes left
[  546.467478][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  546.484551][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  546.521321][T19253] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  546.567775][T19253] overlayfs: missing 'lowerdir'
[  546.575093][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  546.591657][T19251] wireguard0: entered promiscuous mode
[  546.599222][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  546.620417][T19253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1995'.
[  546.630351][T19251] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1994'.
[  546.646261][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  546.676899][    T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  546.686932][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.695758][    T9] usb 1-1: Product: syz
[  546.701935][    T9] usb 1-1: Manufacturer: syz
[  546.706736][    T9] usb 1-1: SerialNumber: syz
[  546.749272][    T9] usb 1-1: config 0 descriptor??
[  546.771069][    T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56
[  547.603921][   T30] audit: type=1400 audit(1761215292.894:979): avc:  denied  { write } for  pid=19300 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  547.946484][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'.
[  547.999703][    T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  548.007633][   T10] libceph: connect (1)[c::]:6789 error -101
[  548.014408][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  548.048328][   T10] libceph: connect (1)[c::]:6789 error -101
[  548.054763][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  548.178169][T17143] usb 1-1: USB disconnect, device number 57
[  548.193977][    T9] usb 6-1: config 0 has an invalid interface number: 182 but max is 0
[  548.217856][    T9] usb 6-1: config 0 has no interface number 0
[  548.235712][    T9] usb 6-1: config 0 interface 182 has no altsetting 0
[  548.260272][    T9] usb 6-1: language id specifier not provided by device, defaulting to English
[  548.290369][    T9] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=40.a5
[  548.304645][   T10] libceph: connect (1)[c::]:6789 error -101
[  548.314939][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  548.321156][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.337680][ T5879] libceph: connect (1)[c::]:6789 error -101
[  548.540768][T19342] netlink: 'syz.1.2006': attribute type 2 has an invalid length.
[  548.643733][T19315] ceph: No mds server is up or the cluster is laggy
[  548.657996][ T5879] libceph: mon0 (1)[c::]:6789 connect error
[  548.664039][    T9] usb 6-1: Product: ᳒컉妇冑〔Ԝ䷝䯉宸
[  548.675599][T19307] ceph: No mds server is up or the cluster is laggy
[  548.688121][    T9] usb 6-1: SerialNumber: syz
[  548.712417][    T9] usb 6-1: config 0 descriptor??
[  548.786125][T17143] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  548.946709][T17143] usb 1-1: device descriptor read/64, error -71
[  548.948563][   T30] audit: type=1400 audit(1761215294.138:980): avc:  denied  { connect } for  pid=19347 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  549.288834][T17143] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  549.449023][T17143] usb 1-1: device descriptor read/64, error -71
[  549.587749][T17143] usb usb1-port1: attempt power cycle
[  549.669416][   T30] audit: type=1400 audit(1761215294.811:981): avc:  denied  { setopt } for  pid=19372 comm="syz.2.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  549.994372][T17143] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  550.016477][T17143] usb 1-1: device descriptor read/8, error -71
[  550.282794][T17143] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  550.315582][T17143] usb 1-1: device descriptor read/8, error -71
[  550.433082][T17143] usb usb1-port1: unable to enumerate USB device
[  550.649831][ T5811] Bluetooth: hci4: unexpected event for opcode 0x201c
[  550.825019][   T30] audit: type=1400 audit(1761215295.906:982): avc:  denied  { write } for  pid=19407 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  554.916827][    T9] gspca_main: spca501-2.14.0 probing 0000:0000
[  555.167723][    T9] gspca_spca501: reg write: error -71
[  555.173456][    T9] spca501 6-1:0.182: Reg write failed for 0x02,0x0f,0x05
[  555.183574][    T9] spca501 6-1:0.182: probe with driver spca501 failed with error -22
[  555.199556][    T9] uvcvideo 6-1:0.182: Found UVC 0.00 device ᳒컉妇冑〔Ԝ䷝䯉宸 (0000:0000)
[  555.214491][    T9] uvcvideo 6-1:0.182: No valid video chain found.
[  555.251561][    T9] usb 6-1: USB disconnect, device number 12
[  555.345318][T19433] syzkaller1: entered promiscuous mode
[  555.367295][T19433] syzkaller1: entered allmulticast mode
[  555.372679][T19442] fuse: Bad value for 'fd'
[  555.706298][T19451] bridge2: entered promiscuous mode
[  555.711579][T19451] bridge2: entered allmulticast mode
[  556.148129][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  557.628402][T19606] l2tp_ppp: sess 2/0: no socket in recv
[  557.700181][T19610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2034'.
[  558.155407][T19625] qnx6: unable to read the first superblock
[  558.162298][T19625] qnx6: unable to read the first superblock
[  558.168325][T19625] qnx6: unable to read the first superblock
[  558.228699][T19630] FAULT_INJECTION: forcing a failure.
[  558.228699][T19630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  558.254985][T19630] CPU: 1 UID: 0 PID: 19630 Comm: syz.0.2039 Not tainted syzkaller #0 PREEMPT(full) 
[  558.255021][T19630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  558.255035][T19630] Call Trace:
[  558.255043][T19630]  <TASK>
[  558.255052][T19630]  dump_stack_lvl+0x16c/0x1f0
[  558.255093][T19630]  should_fail_ex+0x512/0x640
[  558.255125][T19630]  _copy_to_user+0x32/0xd0
[  558.255157][T19630]  simple_read_from_buffer+0xcb/0x170
[  558.255194][T19630]  proc_fail_nth_read+0x197/0x240
[  558.255230][T19630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.255263][T19630]  ? rw_verify_area+0xcf/0x6c0
[  558.255294][T19630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  558.255322][T19630]  vfs_read+0x1e4/0xcf0
[  558.255350][T19630]  ? __pfx___mutex_lock+0x10/0x10
[  558.255371][T19630]  ? __pfx_vfs_read+0x10/0x10
[  558.255406][T19630]  ? __fget_files+0x20e/0x3c0
[  558.255440][T19630]  ksys_read+0x12a/0x250
[  558.255460][T19630]  ? __pfx_ksys_read+0x10/0x10
[  558.255481][T19630]  ? fput+0x9b/0xd0
[  558.255512][T19630]  do_syscall_64+0xcd/0xfa0
[  558.255549][T19630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.255571][T19630] RIP: 0033:0x7fe73758d9dc
[  558.255600][T19630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  558.255622][T19630] RSP: 002b:00007fe738422030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  558.255646][T19630] RAX: ffffffffffffffda RBX: 00007fe7377e5fa0 RCX: 00007fe73758d9dc
[  558.255662][T19630] RDX: 000000000000000f RSI: 00007fe7384220a0 RDI: 0000000000000006
[  558.255676][T19630] RBP: 00007fe738422090 R08: 0000000000000000 R09: 0000000000000000
[  558.255689][T19630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.255702][T19630] R13: 00007fe7377e6038 R14: 00007fe7377e5fa0 R15: 00007ffc5c8c29e8
[  558.255737][T19630]  </TASK>
[  558.439998][    C1] vkms_vblank_simulate: vblank timer overrun
[  558.699195][T19651] netlink: 'syz.5.2045': attribute type 10 has an invalid length.
[  558.707240][T19651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2045'.
[  558.716268][T19651] veth0_vlan: entered allmulticast mode
[  558.726022][T19651] bridge0: port 3(veth0_vlan) entered blocking state
[  558.733688][T19651] bridge0: port 3(veth0_vlan) entered disabled state
[  558.774216][T19651] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  559.416484][T19671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19671 comm=syz.0.2049
[  559.435924][T19668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19668 comm=syz.3.2047
[  560.337663][T19697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19697 comm=syz.5.2051
[  560.954985][T19705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19705 comm=syz.2.2054
[  561.714375][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'.
[  561.815238][T19726] syzkaller1: entered promiscuous mode
[  561.823534][T19726] syzkaller1: entered allmulticast mode
[  561.971690][   T30] audit: type=1400 audit(1761215306.336:983): avc:  denied  { listen } for  pid=19734 comm="syz.0.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  561.991181][    C1] vkms_vblank_simulate: vblank timer overrun
[  563.560818][T19752] mkiss: ax0: crc mode is auto.
[  564.780288][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2068'.
[  564.889055][T19782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19782 comm=syz.0.2067
[  565.462332][T19794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19794 comm=syz.1.2070
[  565.591043][T19798] 9pnet_fd: Insufficient options for proto=fd
[  566.323087][   T30] audit: type=1400 audit(1761215310.405:984): avc:  denied  { create } for  pid=19805 comm="syz.0.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  567.017230][   T30] audit: type=1400 audit(1761215310.433:985): avc:  denied  { ioctl } for  pid=19805 comm="syz.0.2074" path="socket:[39785]" dev="sockfs" ino=39785 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  567.787794][   T30] audit: type=1400 audit(1761215311.677:986): avc:  denied  { connect } for  pid=19825 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  569.966945][T19851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2082'.
[  570.262581][   T30] audit: type=1400 audit(1761215314.090:987): avc:  denied  { watch } for  pid=19864 comm="syz.3.2086" path="anon_inode:[fanotify]" dev="anon_inodefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1
[  570.380781][T19869] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2087'.
[  570.983117][T19886] FAULT_INJECTION: forcing a failure.
[  570.983117][T19886] name failslab, interval 1, probability 0, space 0, times 0
[  570.995836][T19886] CPU: 1 UID: 0 PID: 19886 Comm: syz.5.2091 Not tainted syzkaller #0 PREEMPT(full) 
[  570.995859][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  570.995870][T19886] Call Trace:
[  570.995876][T19886]  <TASK>
[  570.995882][T19886]  dump_stack_lvl+0x16c/0x1f0
[  570.995914][T19886]  should_fail_ex+0x512/0x640
[  570.995934][T19886]  ? fs_reclaim_acquire+0xae/0x150
[  570.995956][T19886]  should_failslab+0xc2/0x120
[  570.995976][T19886]  __kmalloc_noprof+0xdd/0x880
[  570.996000][T19886]  ? tomoyo_encode2+0x100/0x3e0
[  570.996025][T19886]  ? tomoyo_encode2+0x100/0x3e0
[  570.996042][T19886]  tomoyo_encode2+0x100/0x3e0
[  570.996065][T19886]  tomoyo_encode+0x29/0x50
[  570.996083][T19886]  tomoyo_realpath_from_path+0x18f/0x6e0
[  570.996110][T19886]  tomoyo_path_number_perm+0x245/0x580
[  570.996136][T19886]  ? tomoyo_path_number_perm+0x237/0x580
[  570.996165][T19886]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  570.996192][T19886]  ? lockdep_hardirqs_on+0x7c/0x110
[  570.996242][T19886]  ? find_held_lock+0x2b/0x80
[  570.996263][T19886]  ? hook_file_ioctl_common+0x145/0x410
[  570.996291][T19886]  ? __fget_files+0x20e/0x3c0
[  570.996313][T19886]  security_file_ioctl+0x9b/0x240
[  570.996334][T19886]  __x64_sys_ioctl+0xb7/0x210
[  570.996360][T19886]  do_syscall_64+0xcd/0xfa0
[  570.996387][T19886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.996404][T19886] RIP: 0033:0x7feb03b8efc9
[  570.996418][T19886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.996434][T19886] RSP: 002b:00007feb01db4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  570.996450][T19886] RAX: ffffffffffffffda RBX: 00007feb03de6180 RCX: 00007feb03b8efc9
[  570.996461][T19886] RDX: 00002000000003c0 RSI: 000000000000541a RDI: 0000000000000007
[  570.996471][T19886] RBP: 00007feb01db4090 R08: 0000000000000000 R09: 0000000000000000
[  570.996480][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.996490][T19886] R13: 00007feb03de6218 R14: 00007feb03de6180 R15: 00007ffe147efdf8
[  570.996515][T19886]  </TASK>
[  570.996591][T19886] ERROR: Out of memory at tomoyo_realpath_from_path.
[  571.804553][   T30] audit: type=1400 audit(1761215315.540:988): avc:  denied  { connect } for  pid=19892 comm="syz.5.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  573.034111][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2098'.
[  573.073515][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'.
[  573.112893][T19921] fuse: Bad value for 'fd'
[  573.130358][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'.
[  573.179709][T19909] bond0: (slave bond_slave_1): Releasing backup interface
[  573.236831][T19929] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  573.319531][T19934] tipc: Enabled bearer <udp:s>, priority 10
[  573.560876][   T24] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  573.630346][ T5920] libceph: connect (1)[c::]:6789 error -101
[  573.636604][ T5920] libceph: mon0 (1)[c::]:6789 connect error
[  573.764027][   T30] audit: type=1400 audit(1761215317.364:989): avc:  denied  { read } for  pid=19945 comm="syz.5.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  573.783798][   T24] usb 1-1: unable to read config index 0 descriptor/start: -71
[  573.793814][   T24] usb 1-1: can't read configurations, error -71
[  573.926026][    T9] libceph: connect (1)[c::]:6789 error -101
[  574.095967][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  574.549168][T19967] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  574.561251][T19967] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  574.618715][T19955] ceph: No mds server is up or the cluster is laggy
[  574.631614][T19970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2109'.
[  574.669464][ T5920] libceph: connect (1)[c::]:6789 error -101
[  574.692966][ T5920] libceph: mon0 (1)[c::]:6789 connect error
[  574.899561][T19990] binder: 19985:19990 ioctl 400c620e 200000000040 returned -22
[  575.047272][   T30] audit: type=1400 audit(1761215318.571:990): avc:  denied  { map } for  pid=20007 comm="syz.0.2113" path="socket:[42033]" dev="sockfs" ino=42033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  575.508923][T20023] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  575.517063][T20023] overlayfs: failed to set xattr on upper
[  575.522829][T20023] overlayfs: ...falling back to redirect_dir=nofollow.
[  575.529758][T20023] overlayfs: ...falling back to index=off.
[  575.535637][T20023] overlayfs: ...falling back to uuid=null.
[  575.595456][T20024] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  575.602604][T20024] overlayfs: failed to set xattr on upper
[  575.608362][T20024] overlayfs: ...falling back to redirect_dir=nofollow.
[  575.615255][T20024] overlayfs: ...falling back to index=off.
[  575.621199][T20024] overlayfs: ...falling back to uuid=null.
[  575.627373][T20024] overlayfs: conflicting lowerdir path
[  575.806616][   T30] audit: type=1400 audit(1761215318.973:991): avc:  denied  { mounton } for  pid=20017 comm="syz.0.2117" path="/file0" dev="ramfs" ino=42049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  575.887737][    C1] vkms_vblank_simulate: vblank timer overrun
[  575.929689][T20027] vxfs: WRONG superblock magic 00000000 at 1
[  575.936918][T20027] vxfs: WRONG superblock magic 00000000 at 8
[  575.943085][T20027] vxfs: can't find superblock.
[  575.978697][   T24] libceph: connect (1)[c::]:6789 error -101
[  576.036100][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  576.171420][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'.
[  576.190722][T20031] blktrace: Concurrent blktraces are not allowed on loop4
[  576.201050][T20033] bridge_slave_1: left allmulticast mode
[  576.206907][T20033] bridge_slave_1: left promiscuous mode
[  576.220467][T20025] ceph: No mds server is up or the cluster is laggy
[  576.343816][T20037] CIFS: VFS: Malformed UNC in devname
[  576.355737][T20037] SELinux: failed to load policy
[  576.379690][T20033] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.436386][T20033] bridge_slave_0: left allmulticast mode
[  576.442213][T20033] bridge_slave_0: left promiscuous mode
[  576.450487][T20033] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.598508][   T30] audit: type=1400 audit(1761215320.021:992): avc:  denied  { write } for  pid=20041 comm="syz.0.2121" path="socket:[42077]" dev="sockfs" ino=42077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  576.621851][    C1] vkms_vblank_simulate: vblank timer overrun
[  576.664497][T20049] lo speed is unknown, defaulting to 1000
[  576.716158][   T30] audit: type=1400 audit(1761215320.067:993): avc:  denied  { shutdown } for  pid=20041 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  577.351434][ T5920] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  577.492323][ T5920] usb 1-1: device descriptor read/64, error -71
[  577.720376][T20092] overlayfs: missing 'lowerdir'
[  577.747005][ T5920] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  577.896710][ T5920] usb 1-1: device descriptor read/64, error -71
[  577.938887][T20102] l2tp_ppp: sess 2/0: no socket in recv
[  578.025150][ T5920] usb usb1-port1: attempt power cycle
[  578.067717][    T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  578.255081][    T9] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  578.294089][    T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  578.318953][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  578.328290][    T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  578.351431][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  578.362922][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  578.387422][    T9] usb 6-1: string descriptor 0 read error: -22
[  578.409184][    T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  578.421185][ T5920] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  578.436884][T20112] overlayfs: failed to clone upperpath
[  578.448541][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.473782][ T5920] usb 1-1: device descriptor read/8, error -71
[  578.499179][    T9] usb 6-1: config 0 descriptor??
[  578.521937][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  578.534258][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  578.780904][ T5920] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  578.914373][    T9] usb 6-1: USB disconnect, device number 13
[  578.981768][ T5920] usb 1-1: device descriptor read/8, error -71
[  579.115960][ T5920] usb usb1-port1: unable to enumerate USB device
[  580.600577][T20165] dvmrp1: entered allmulticast mode
[  581.738861][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  583.384804][T20215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2149'.
[  584.328152][T20226] netlink: 'syz.5.2152': attribute type 6 has an invalid length.
[  585.976363][T20268] FAULT_INJECTION: forcing a failure.
[  585.976363][T20268] name failslab, interval 1, probability 0, space 0, times 0
[  585.989611][T20268] CPU: 0 UID: 0 PID: 20268 Comm: syz.1.2163 Not tainted syzkaller #0 PREEMPT(full) 
[  585.989633][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  585.989643][T20268] Call Trace:
[  585.989648][T20268]  <TASK>
[  585.989654][T20268]  dump_stack_lvl+0x16c/0x1f0
[  585.989683][T20268]  should_fail_ex+0x512/0x640
[  585.989702][T20268]  ? __kmalloc_noprof+0xca/0x880
[  585.989728][T20268]  should_failslab+0xc2/0x120
[  585.989747][T20268]  __kmalloc_noprof+0xdd/0x880
[  585.989771][T20268]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  585.989805][T20268]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  585.989832][T20268]  genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290
[  585.989865][T20268]  genl_family_rcv_msg_doit+0xbf/0x2f0
[  585.989892][T20268]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  585.989926][T20268]  ? bpf_lsm_capable+0x9/0x10
[  585.989943][T20268]  ? security_capable+0x7e/0x260
[  585.989967][T20268]  ? ns_capable+0xd7/0x110
[  585.989988][T20268]  genl_rcv_msg+0x55c/0x800
[  585.990006][T20268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  585.990023][T20268]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  585.990045][T20268]  ? __pfx_nl80211_del_mpath+0x10/0x10
[  585.990066][T20268]  ? __pfx_nl80211_post_doit+0x10/0x10
[  585.990091][T20268]  netlink_rcv_skb+0x158/0x420
[  585.990114][T20268]  ? __pfx_genl_rcv_msg+0x10/0x10
[  585.990131][T20268]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  585.990164][T20268]  ? netlink_deliver_tap+0x1ae/0xd30
[  585.990190][T20268]  genl_rcv+0x28/0x40
[  585.990212][T20268]  netlink_unicast+0x5aa/0x870
[  585.990240][T20268]  ? __pfx_netlink_unicast+0x10/0x10
[  585.990272][T20268]  netlink_sendmsg+0x8c8/0xdd0
[  585.990308][T20268]  ? __pfx_netlink_sendmsg+0x10/0x10
[  585.990342][T20268]  ____sys_sendmsg+0xa98/0xc70
[  585.990370][T20268]  ? copy_msghdr_from_user+0x10a/0x160
[  585.990391][T20268]  ? __pfx_____sys_sendmsg+0x10/0x10
[  585.990428][T20268]  ___sys_sendmsg+0x134/0x1d0
[  585.990450][T20268]  ? __pfx____sys_sendmsg+0x10/0x10
[  585.990470][T20268]  ? __lock_acquire+0x622/0x1c90
[  585.990528][T20268]  __sys_sendmsg+0x16d/0x220
[  585.990550][T20268]  ? __pfx___sys_sendmsg+0x10/0x10
[  585.990593][T20268]  do_syscall_64+0xcd/0xfa0
[  585.990618][T20268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.990636][T20268] RIP: 0033:0x7ffac0b8efc9
[  585.990650][T20268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  585.990666][T20268] RSP: 002b:00007ffac1ae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  585.990682][T20268] RAX: ffffffffffffffda RBX: 00007ffac0de5fa0 RCX: 00007ffac0b8efc9
[  585.990693][T20268] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  585.990703][T20268] RBP: 00007ffac1ae6090 R08: 0000000000000000 R09: 0000000000000000
[  585.990712][T20268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  585.990722][T20268] R13: 00007ffac0de6038 R14: 00007ffac0de5fa0 R15: 00007ffde79f43c8
[  585.990746][T20268]  </TASK>
[  586.800620][T20289] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  587.188029][   T30] audit: type=1400 audit(1761215329.898:994): avc:  denied  { ioctl } for  pid=20302 comm="syz.3.2171" path="socket:[41450]" dev="sockfs" ino=41450 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  587.283410][T20306] Invalid source name
[  587.913951][ T5879] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  588.046782][T20326] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  588.079543][ T5879] usb 1-1: config 0 has no interfaces?
[  588.089289][ T5879] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  588.099637][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.108372][ T5879] usb 1-1: Product: syz
[  588.112877][ T5879] usb 1-1: Manufacturer: syz
[  588.117806][ T5879] usb 1-1: SerialNumber: syz
[  588.124857][ T5879] usb 1-1: config 0 descriptor??
[  589.179762][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'.
[  590.584248][   T24] usb 1-1: USB disconnect, device number 68
[  590.878170][T20370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20370 comm=syz.2.2182
[  591.184373][T20378] FAULT_INJECTION: forcing a failure.
[  591.184373][T20378] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  591.205556][T20378] CPU: 0 UID: 0 PID: 20378 Comm: syz.1.2185 Not tainted syzkaller #0 PREEMPT(full) 
[  591.205583][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  591.205594][T20378] Call Trace:
[  591.205600][T20378]  <TASK>
[  591.205607][T20378]  dump_stack_lvl+0x16c/0x1f0
[  591.205638][T20378]  should_fail_ex+0x512/0x640
[  591.205663][T20378]  _copy_from_iter+0x29f/0x1720
[  591.205688][T20378]  ? __alloc_skb+0x200/0x380
[  591.205710][T20378]  ? __pfx__copy_from_iter+0x10/0x10
[  591.205732][T20378]  ? netlink_autobind.isra.0+0x158/0x370
[  591.205766][T20378]  netlink_sendmsg+0x820/0xdd0
[  591.205796][T20378]  ? __pfx_netlink_sendmsg+0x10/0x10
[  591.205830][T20378]  ____sys_sendmsg+0xa98/0xc70
[  591.205859][T20378]  ? copy_msghdr_from_user+0x10a/0x160
[  591.205881][T20378]  ? __pfx_____sys_sendmsg+0x10/0x10
[  591.205919][T20378]  ___sys_sendmsg+0x134/0x1d0
[  591.205944][T20378]  ? __pfx____sys_sendmsg+0x10/0x10
[  591.205963][T20378]  ? __lock_acquire+0x622/0x1c90
[  591.206025][T20378]  __sys_sendmsg+0x16d/0x220
[  591.206048][T20378]  ? __pfx___sys_sendmsg+0x10/0x10
[  591.206087][T20378]  do_syscall_64+0xcd/0xfa0
[  591.206114][T20378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.206132][T20378] RIP: 0033:0x7ffac0b8efc9
[  591.206146][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.206163][T20378] RSP: 002b:00007ffac1ae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  591.206180][T20378] RAX: ffffffffffffffda RBX: 00007ffac0de5fa0 RCX: 00007ffac0b8efc9
[  591.206190][T20378] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003
[  591.206200][T20378] RBP: 00007ffac1ae6090 R08: 0000000000000000 R09: 0000000000000000
[  591.206210][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.206225][T20378] R13: 00007ffac0de6038 R14: 00007ffac0de5fa0 R15: 00007ffde79f43c8
[  591.206250][T20378]  </TASK>
[  591.954933][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  592.014913][T17143] IPVS: starting estimator thread 0...
[  592.090331][T20395] bond0: (slave bond_slave_0): Releasing backup interface
[  592.100603][T20395] bond_slave_0: left allmulticast mode
[  592.109473][T20395] bond0: (slave bond_slave_1): Releasing backup interface
[  592.115335][T20398] IPVS: using max 57 ests per chain, 136800 per kthread
[  592.128949][T20395] bond_slave_1: left allmulticast mode
[  592.135073][T20403] netlink: 'syz.3.2189': attribute type 10 has an invalid length.
[  592.146533][T20395] team0: Port device team_slave_0 removed
[  592.156627][T20395] team0: Port device team_slave_1 removed
[  592.163002][T20395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  592.170618][T20395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  592.179085][T20395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  592.187002][T20395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  592.198158][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.209456][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.220964][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  592.234991][   T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  592.245371][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.250334][T20395] batman_adv: batadv0: Interface deactivated: gretap1
[  592.260473][T20395] batman_adv: batadv0: Removing interface: gretap1
[  592.272586][   T24] usb 6-1: config 0 descriptor??
[  593.006174][   T30] audit: type=1326 audit(1761215335.174:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20407 comm="syz.3.2190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f0cd8efc9 code=0x0
[  593.040606][   T24] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  593.726542][T20381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  593.736863][T20381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.747679][   T10] usb 6-1: USB disconnect, device number 14
[  593.881749][T20441] lo speed is unknown, defaulting to 1000
[  594.703236][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2197'.
[  594.759606][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'.
[  594.949114][   T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  595.007184][   T30] audit: type=1400 audit(1761215337.241:996): avc:  denied  { write } for  pid=20496 comm="syz.1.2200" path="socket:[42526]" dev="sockfs" ino=42526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  595.060237][   T30] audit: type=1400 audit(1761215337.288:997): avc:  denied  { read } for  pid=20496 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  595.148902][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  595.158590][   T10] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  595.169742][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.183118][T20501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.190418][T20501] IPv6: NLM_F_CREATE should be set when creating new route
[  595.201564][   T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  595.234823][   T10] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  595.371594][T20513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.378968][T20513] IPv6: NLM_F_CREATE should be set when creating new route
[  595.386512][   T10] usb 6-1: Manufacturer: syz
[  595.409482][   T10] usb 6-1: config 0 descriptor??
[  595.482682][   T10] rc_core: IR keymap rc-hauppauge not found
[  595.492607][   T10] Registered IR keymap rc-empty
[  595.510005][   T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  595.542968][   T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59
[  595.704163][T20528] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  595.942585][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2198'.
[  597.720463][T20560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2210'.
[  598.652588][T20561] Bluetooth: MGMT ver 1.23
[  598.813099][   T10] usb 6-1: USB disconnect, device number 15
[  598.912105][T20569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2212'.
[  601.011247][T20629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20629 comm=syz.1.2222
[  602.732744][   T30] audit: type=1400 audit(1761215344.472:998): avc:  denied  { map } for  pid=20661 comm="syz.1.2228" path="socket:[41983]" dev="sockfs" ino=41983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  602.757066][   T30] audit: type=1400 audit(1761215344.472:999): avc:  denied  { read } for  pid=20661 comm="syz.1.2228" path="socket:[41983]" dev="sockfs" ino=41983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  603.256986][   T30] audit: type=1400 audit(1761215344.958:1000): avc:  denied  { unmount } for  pid=16041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  603.595139][ T5865] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  603.650342][ T5865] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[  603.960501][T20698] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  603.972683][T20698] fuse: Bad value for 'fd'
[  604.507308][ T5865] usb 2-1: USB disconnect, device number 30
[  604.816766][T20724] netlink: 'syz.2.2241': attribute type 39 has an invalid length.
[  604.944833][T20728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20728 comm=syz.2.2241
[  605.042386][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  605.044608][T20731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2242'.
[  605.318260][   T24] usb 6-1: Using ep0 maxpacket: 16
[  605.330198][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  605.376818][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'.
[  605.414015][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  605.435653][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.443677][   T24] usb 6-1: Product: syz
[  605.448067][   T24] usb 6-1: Manufacturer: syz
[  605.452660][   T24] usb 6-1: SerialNumber: syz
[  605.489146][   T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  605.506889][   T24] usb 6-1: config 0 descriptor??
[  605.523141][   T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  605.538800][   T24] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  605.654690][T20746] input: syz1 as /devices/virtual/input/input60
[  605.672195][   T10] usb 2-1: Using ep0 maxpacket: 8
[  605.679381][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  605.690972][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  605.713043][   T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  605.730252][   T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  605.740332][   T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  605.753442][   T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  605.762865][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.784027][   T10] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  606.497709][   T24] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  606.702404][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'.
[  606.714708][T20764] overlayfs: failed to clone upperpath
[  606.969022][T20777] No source specified
[  607.276564][   T24] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  607.293889][   T24] em28xx 6-1:0.0: board has no eeprom
[  607.308207][T20777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2251'.
[  608.070246][   T24] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  608.093314][   T24] em28xx 6-1:0.0: dvb set to bulk mode.
[  608.127196][ T5865] em28xx 6-1:0.0: Binding DVB extension
[  608.191932][   T24] usb 6-1: USB disconnect, device number 16
[  608.200714][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[  608.380832][T20801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  608.405888][T20801] overlayfs: missing 'lowerdir'
[  608.422370][ T5865] em28xx 6-1:0.0: Registering input extension
[  608.442140][   T24] em28xx 6-1:0.0: Closing input extension
[  608.586688][   T24] em28xx 6-1:0.0: Freeing device
[  608.688203][   T10] usb 2-1: USB disconnect, device number 31
[  609.797517][ T5920] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  610.193018][ T5920] usb 2-1: config 0 has an invalid interface number: 182 but max is 0
[  610.218508][T20856] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=395103763 (790207526 ns) > initial count (364125664 ns). Using initial count to start timer.
[  610.255255][T20856] kvm: Disabled LAPIC found during irq injection
[  610.265133][ T5920] usb 2-1: config 0 has no interface number 0
[  610.329835][ T5920] usb 2-1: config 0 interface 182 has no altsetting 0
[  610.361248][ T5920] usb 2-1: language id specifier not provided by device, defaulting to English
[  610.413085][   T30] audit: type=1326 audit(1761215351.637:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20863 comm="syz.3.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x0
[  610.482464][ T5920] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=40.a5
[  610.499621][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.550708][ T5920] usb 2-1: Product: ᳒컉妇冑〔Ԝ䷝䯉宸
[  610.572440][ T5920] usb 2-1: SerialNumber: syz
[  610.588935][ T5920] usb 2-1: config 0 descriptor??
[  610.633384][   T30] audit: type=1326 audit(1761215351.833:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20873 comm="syz.0.2265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe73758efc9 code=0x0
[  610.755069][T20878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2266'.
[  611.075042][ T5879] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  611.269406][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  611.383000][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  611.559575][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  611.577745][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  611.621764][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  611.656102][ T5879] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  611.666560][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.691411][ T5879] usb 1-1: Product: syz
[  611.697680][ T5879] usb 1-1: Manufacturer: syz
[  611.706003][ T5879] usb 1-1: SerialNumber: syz
[  611.738063][ T5879] usb 1-1: config 0 descriptor??
[  611.839206][ T5879] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input62
[  612.845422][ T5920] gspca_main: spca501-2.14.0 probing 0000:0000
[  612.854339][ T5920] gspca_spca501: reg write: error -71
[  612.860338][ T5920] spca501 2-1:0.182: Reg write failed for 0x02,0x0f,0x05
[  612.892164][ T5920] spca501 2-1:0.182: probe with driver spca501 failed with error -22
[  612.903136][ T5920] uvcvideo 2-1:0.182: Found UVC 0.00 device ᳒컉妇冑〔Ԝ䷝䯉宸 (0000:0000)
[  612.913608][ T5920] uvcvideo 2-1:0.182: No valid video chain found.
[  612.922527][ T5920] usb 2-1: USB disconnect, device number 32
[  613.019356][T20929] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  614.262798][T20950] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  614.631955][ T5879] usb 1-1: USB disconnect, device number 69
[  614.666570][T20959] netlink: 'syz.2.2277': attribute type 21 has an invalid length.
[  614.730080][T20959] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2277'.
[  615.527976][   T30] audit: type=1800 audit(1761215356.426:1003): pid=20959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2277" name="bus" dev="tmpfs" ino=2595 res=0 errno=0
[  615.549630][    C1] vkms_vblank_simulate: vblank timer overrun
[  615.971837][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'.
[  616.376847][T21014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2286'.
[  616.389603][T21017] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  616.550704][T21021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21021 comm=syz.2.2289
[  616.629501][   T30] audit: type=1326 audit(1761215357.465:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.3.2290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd8efc9 code=0x0
[  616.652434][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.490860][T21043] overlay: Unknown parameter 'dont_measure'
[  617.686645][T21045] bond1: entered promiscuous mode
[  617.693597][T21045] bond1: entered allmulticast mode
[  617.700589][T21045] 8021q: adding VLAN 0 to HW filter on device bond1
[  618.584944][T21103] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  619.086950][T21107] trusted_key: encrypted_key: insufficient parameters specified
[  619.156648][T21112] FAULT_INJECTION: forcing a failure.
[  619.156648][T21112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  619.173599][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.5.2305 Not tainted syzkaller #0 PREEMPT(full) 
[  619.173623][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  619.173633][T21112] Call Trace:
[  619.173639][T21112]  <TASK>
[  619.173646][T21112]  dump_stack_lvl+0x16c/0x1f0
[  619.173675][T21112]  should_fail_ex+0x512/0x640
[  619.173698][T21112]  _copy_from_iter+0x29f/0x1720
[  619.173720][T21112]  ? __alloc_skb+0x200/0x380
[  619.173739][T21112]  ? __pfx__copy_from_iter+0x10/0x10
[  619.173758][T21112]  ? netlink_autobind.isra.0+0x158/0x370
[  619.173790][T21112]  netlink_sendmsg+0x820/0xdd0
[  619.173817][T21112]  ? __pfx_netlink_sendmsg+0x10/0x10
[  619.173850][T21112]  ____sys_sendmsg+0xa98/0xc70
[  619.173874][T21112]  ? copy_msghdr_from_user+0x10a/0x160
[  619.173894][T21112]  ? __pfx_____sys_sendmsg+0x10/0x10
[  619.173930][T21112]  ___sys_sendmsg+0x134/0x1d0
[  619.173951][T21112]  ? __pfx____sys_sendmsg+0x10/0x10
[  619.173969][T21112]  ? __lock_acquire+0x622/0x1c90
[  619.174025][T21112]  __sys_sendmsg+0x16d/0x220
[  619.174052][T21112]  ? __pfx___sys_sendmsg+0x10/0x10
[  619.174091][T21112]  do_syscall_64+0xcd/0xfa0
[  619.174119][T21112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.174136][T21112] RIP: 0033:0x7feb03b8efc9
[  619.174150][T21112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  619.174166][T21112] RSP: 002b:00007feb01df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.174182][T21112] RAX: ffffffffffffffda RBX: 00007feb03de5fa0 RCX: 00007feb03b8efc9
[  619.174192][T21112] RDX: 0000000020040814 RSI: 0000200000000180 RDI: 0000000000000003
[  619.174202][T21112] RBP: 00007feb01df6090 R08: 0000000000000000 R09: 0000000000000000
[  619.174212][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.174221][T21112] R13: 00007feb03de6038 R14: 00007feb03de5fa0 R15: 00007ffe147efdf8
[  619.174243][T21112]  </TASK>
[  619.364343][    C1] vkms_vblank_simulate: vblank timer overrun
[  619.609312][T21123] fuse: Bad value for 'rootmode'
[  619.996411][ T5920] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  620.100459][T21129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21129 comm=syz.5.2308
[  620.156713][ T5920] usb 2-1: Using ep0 maxpacket: 16
[  620.193051][ T5920] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  620.273066][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.330258][ T5920] usb 2-1: Product: syz
[  620.344255][ T5920] usb 2-1: Manufacturer: syz
[  620.363333][ T5920] usb 2-1: SerialNumber: syz
[  620.461948][ T5920] r8152-cfgselector 2-1: Unknown version 0x0000
[  620.490549][ T5920] r8152-cfgselector 2-1: config 0 descriptor??
[  620.719148][T21134] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  620.809401][ T5920] r8152-cfgselector 2-1: Unknown version 0x0020
[  620.815972][ T5920] r8152-cfgselector 2-1: bad CDC descriptors
[  621.395736][T21151] input: syz1 as /devices/virtual/input/input64
[  622.692293][   T24] r8152-cfgselector 2-1: USB disconnect, device number 33
[  623.372293][T21168] nvme_fabrics: missing parameter 'transport=%s'
[  623.379970][T21168] nvme_fabrics: missing parameter 'nqn=%s'
[  623.477612][T21143] veth1_macvtap: left allmulticast mode
[  623.559610][T15199] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.572427][T15199] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.611516][T15199] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.693672][T15199] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.724640][T15199] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.734170][T15199] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.743331][T15199] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  623.752450][T15199] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  623.782894][T21188] overlayfs: failed to clone upperpath
[  623.807216][T21190] comedi comedi4: bad chanlist[0]=0x0000096d chan=2413 range length=2
[  623.974918][   T30] audit: type=1326 audit(1761215364.330:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21192 comm="syz.0.2320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe73758efc9 code=0x0
[  624.972240][   T10] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  625.047607][T21210] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  625.252523][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  625.298787][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  625.336679][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  625.453437][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  625.481600][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  625.512054][   T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  625.522858][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.533987][   T10] usb 1-1: Product: syz
[  625.538188][   T10] usb 1-1: Manufacturer: syz
[  625.542819][   T10] usb 1-1: SerialNumber: syz
[  625.875446][   T10] usb 1-1: config 0 descriptor??
[  625.901745][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65
[  627.329622][T17143] usb 1-1: USB disconnect, device number 70
[  627.425551][T21260] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  627.793164][T21273] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  628.193602][T21276] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  628.370697][T21279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21279 comm=syz.5.2341
[  628.799653][T21284] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  629.003997][   T30] audit: type=1400 audit(1761215368.661:1006): avc:  denied  { mount } for  pid=21283 comm="syz.1.2343" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  629.068505][   T30] audit: type=1400 audit(1761215369.073:1007): avc:  denied  { append } for  pid=21287 comm="syz.2.2344" name="file0" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  629.209994][   T30] audit: type=1400 audit(1761215369.073:1008): avc:  denied  { open } for  pid=21287 comm="syz.2.2344" path="/503/file0" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  629.331701][T21306] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  629.480306][   T30] audit: type=1400 audit(1761215369.428:1009): avc:  denied  { unmount } for  pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  629.538021][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'.
[  629.547893][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'.
[  629.600249][T21315] syzkaller1: entered promiscuous mode
[  629.607903][T21315] syzkaller1: entered allmulticast mode
[  631.241436][T21341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2355'.
[  632.363523][T21338] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  632.491344][T21373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  632.571859][T21373] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  632.697936][ T5879] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0
[  632.739082][ T5879] hid-generic 0000:0000:0000.002C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  632.742918][T21380] fuse: blksize only supported for fuseblk
[  633.349416][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'.
[  633.358394][T21402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2365'.
[  633.369055][T21402] trusted_key: encrypted_key: insufficient parameters specified
[  633.377493][T21402] trusted_key: encrypted_key: insufficient parameters specified
[  633.507568][T21392] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  633.625517][   T30] audit: type=1400 audit(1761215373.357:1010): avc:  denied  { link } for  pid=5806 comm="syz-executor" name="#2d" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  633.655205][   T30] audit: type=1400 audit(1761215373.357:1011): avc:  denied  { rename } for  pid=5806 comm="syz-executor" name="#2e" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  634.506988][T21414] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  634.886955][T21420] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  635.256365][T21431] lo speed is unknown, defaulting to 1000
[  635.775641][T21465] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  637.746013][T21489] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2380'.
[  637.761207][T21491] input: syz1 as /devices/virtual/input/input66
[  639.384468][T21524] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2386'.
[  639.489531][T21526] binder: BINDER_SET_CONTEXT_MGR already set
[  639.495565][T21526] binder: 21522:21526 ioctl 4018620d 200000000040 returned -16
[  640.704052][T21539] binder: 21522:21539 ioctl 400454ca 200000000200 returned -22
[  641.717136][   T30] audit: type=1400 audit(1761215380.915:1012): avc:  denied  { setopt } for  pid=21534 comm="syz.1.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  641.860185][T21526] syz.0.2387 (21526): drop_caches: 2
[  642.073364][T17143] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  642.085046][   T30] audit: type=1400 audit(1761215381.280:1013): avc:  denied  { accept } for  pid=21559 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  642.255131][T17143] usb 6-1: no configurations
[  642.259752][T17143] usb 6-1: can't read configurations, error -22
[  642.457396][T17143] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  642.641023][T17143] usb 6-1: no configurations
[  642.778031][T21575] input: syz1 as /devices/virtual/input/input67
[  643.700123][T17143] usb 6-1: can't read configurations, error -22
[  643.706697][T17143] usb usb6-port1: attempt power cycle
[  644.082589][T17143] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  644.145002][T17143] usb 6-1: no configurations
[  644.149912][T17143] usb 6-1: can't read configurations, error -22
[  644.306963][T17143] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  644.340609][T17143] usb 6-1: no configurations
[  644.345298][T17143] usb 6-1: can't read configurations, error -22
[  644.349459][ T5920] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  644.352610][T17143] usb usb6-port1: unable to enumerate USB device
[  644.473484][T21603] overlayfs: failed to clone upperpath
[  644.530079][ T5920] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  644.540064][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.549097][ T5920] usb 1-1: Product: syz
[  644.555276][ T5920] usb 1-1: Manufacturer: syz
[  644.560100][ T5920] usb 1-1: SerialNumber: syz
[  644.574462][ T5920] usb 1-1: config 0 descriptor??
[  644.934636][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'.
[  645.092600][   T30] audit: type=1400 audit(1761215384.021:1014): avc:  denied  { validate_trans } for  pid=21608 comm="syz.1.2403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  646.891932][ T5920] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[  646.902505][ T5920] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[  647.193338][ T5920] f81604 1-1:0.0: probe with driver f81604 failed with error -110
[  647.377761][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  648.100054][ T5920] usb 1-1: USB disconnect, device number 71
[  649.639575][T21672] veth0: entered promiscuous mode
[  649.705041][T21677] netlink: 'syz.3.2415': attribute type 10 has an invalid length.
[  649.714377][T21677] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2415'.
[  649.930547][T21689] sctp: [Deprecated]: syz.5.2417 (pid 21689) Use of int in max_burst socket option.
[  649.930547][T21689] Use struct sctp_assoc_value instead
[  649.946553][T21675] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  649.970887][T21666] veth0: left promiscuous mode
[  650.111854][ T5879] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  650.199333][T21700] autofs: Unknown parameter '�_��ˑ��9���؛~3e5����tL�B]מ�'
[  650.389916][ T5879] usb 2-1: Using ep0 maxpacket: 16
[  650.428255][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  650.734826][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.747519][ T5879] usb 2-1: config 0 descriptor??
[  650.773657][ T5879] gspca_main: sonixj-2.14.0 probing 0471:0327
[  652.859817][T21757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2432'.
[  653.041696][T21762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=21762 comm=syz.5.2431
[  653.816751][ T6275] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  653.816923][ T5879] gspca_sonixj: reg_r err -110
[  653.835132][ T6275] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  653.843050][ T5879] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  653.884554][T21744] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2428'.
[  653.978517][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  653.989999][T21744] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2428'.
[  654.002329][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  654.018075][T21744] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2428'.
[  655.440620][T17143] usb 2-1: USB disconnect, device number 34
[  655.591556][T21800] bridge: RTM_NEWNEIGH with invalid ether address
[  656.701834][T21819] mkiss: ax0: crc mode is auto.
[  656.814457][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'.
[  656.823399][T21835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'.
[  656.901157][T21827] lo speed is unknown, defaulting to 1000
[  757.285488][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  770.434459][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  770.441417][    C1] rcu: 	0-...!: (1 GPs behind) idle=4a04/0/0x1 softirq=75457/75473 fqs=324
[  770.450929][    C1] rcu: 	(detected by 1, t=10505 jiffies, g=63337, q=229 ncpus=2)
[  770.458664][    C1] Sending NMI from CPU 1 to CPUs 0:
[  770.458688][    C0] NMI backtrace for cpu 0
[  770.458699][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  770.458714][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  770.458723][    C0] RIP: 0010:lock_is_held_type+0x6f/0x150
[  770.458747][    C0] Code: 85 d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c 8f 04 24 fa 48 c7 c7 48 9a b1 8d 4d 8d ac 24 30 0b 00 00 45 31 ff e8 01 15 00 00 <65> ff 05 72 5b 41 08 41 8b 84 24 28 0b 00 00 85 c0 7f 17 e9 92 00
[  770.458759][    C0] RSP: 0018:ffffc90000007e00 EFLAGS: 00000092
[  770.458771][    C0] RAX: 0000000000000000 RBX: ffff8880b8427d80 RCX: 0000000000000001
[  770.458780][    C0] RDX: 0000000000000000 RSI: ffffffff8db19a48 RDI: ffffffff8bf06cc0
[  770.458788][    C0] RBP: ffff8880b8427c98 R08: 0000000000000005 R09: 0000000000000000
[  770.458796][    C0] R10: 0000000000000001 R11: ffffffff9ad00d68 R12: ffffffff8e097a00
[  770.458811][    C0] R13: ffffffff8e098530 R14: 00000000ffffffff R15: 0000000000000000
[  770.458819][    C0] FS:  0000000000000000(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000
[  770.458834][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  770.458842][    C0] CR2: 0000200000007040 CR3: 00000000233c1000 CR4: 00000000003526f0
[  770.458851][    C0] Call Trace:
[  770.458857][    C0]  <IRQ>
[  770.458865][    C0]  __hrtimer_run_queues+0x86a/0xad0
[  770.458886][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  770.458900][    C0]  ? read_tsc+0x9/0x20
[  770.458919][    C0]  hrtimer_interrupt+0x397/0x8e0
[  770.458940][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x3f0
[  770.458955][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[  770.458973][    C0]  </IRQ>
[  770.458977][    C0]  <TASK>
[  770.458982][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  770.458996][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  770.459014][    C0] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  770.459026][    C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6
[  770.459035][    C0] RAX: 0000000003644f6b RBX: 0000000000000000 RCX: ffffffff8b6042a9
[  770.459044][    C0] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0
[  770.459052][    C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655
[  770.459060][    C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000
[  770.459068][    C0] R13: ffffffff8e097a00 R14: ffffffff9081f4d0 R15: 0000000000000000
[  770.459080][    C0]  ? ct_kernel_exit+0x139/0x190
[  770.459100][    C0]  default_idle+0x13/0x20
[  770.459112][    C0]  default_idle_call+0x6c/0xb0
[  770.459125][    C0]  do_idle+0x38d/0x500
[  770.459141][    C0]  ? __pfx_do_idle+0x10/0x10
[  770.459156][    C0]  ? trace_sched_exit_tp+0x2f/0x120
[  770.459172][    C0]  cpu_startup_entry+0x4f/0x60
[  770.459188][    C0]  rest_init+0x16b/0x2b0
[  770.459201][    C0]  ? acpi_subsystem_init+0x133/0x180
[  770.459216][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  770.459233][    C0]  start_kernel+0x3f6/0x4e0
[  770.459248][    C0]  x86_64_start_reservations+0x18/0x30
[  770.459263][    C0]  x86_64_start_kernel+0x130/0x190
[  770.459278][    C0]  common_startup_64+0x13e/0x148
[  770.459297][    C0]  </TASK>
[  770.459682][    C1] rcu: rcu_preempt kthread starved for 8885 jiffies! g63337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  770.783791][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  770.793741][    C1] rcu: RCU grace-period kthread stack dump:
[  770.799614][    C1] task:rcu_preempt     state:R  running task     stack:28232 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  770.813107][    C1] Call Trace:
[  770.816381][    C1]  <TASK>
[  770.819306][    C1]  __schedule+0x1190/0x5de0
[  770.823819][    C1]  ? __lock_acquire+0x622/0x1c90
[  770.828763][    C1]  ? __pfx___schedule+0x10/0x10
[  770.833614][    C1]  ? find_held_lock+0x2b/0x80
[  770.838283][    C1]  ? schedule+0x2d7/0x3a0
[  770.842607][    C1]  schedule+0xe7/0x3a0
[  770.846668][    C1]  schedule_timeout+0x123/0x290
[  770.851508][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  770.856870][    C1]  ? __pfx_process_timeout+0x10/0x10
[  770.862152][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  770.867952][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  770.873409][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[  770.878159][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  770.883430][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  770.888621][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  770.893541][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  770.898382][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  770.904181][    C1]  rcu_gp_kthread+0x26d/0x380
[  770.908846][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  770.914027][    C1]  ? rcu_is_watching+0x12/0xc0
[  770.918780][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  770.923983][    C1]  ? __kthread_parkme+0x19e/0x250
[  770.929001][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  770.934185][    C1]  kthread+0x3c5/0x780
[  770.938264][    C1]  ? __pfx_kthread+0x10/0x10
[  770.942862][    C1]  ? rcu_is_watching+0x12/0xc0
[  770.947634][    C1]  ? __pfx_kthread+0x10/0x10
[  770.952210][    C1]  ret_from_fork+0x675/0x7d0
[  770.956799][    C1]  ? __pfx_kthread+0x10/0x10
[  770.961382][    C1]  ret_from_fork_asm+0x1a/0x30
[  770.966149][    C1]  </TASK>
[  770.969152][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  770.975455][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  770.984374][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  770.994419][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  771.000059][    C1] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 <e9> 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  771.019667][    C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6
[  771.025732][    C1] RAX: 0000000002ed3493 RBX: 0000000000000001 RCX: ffffffff8b6042a9
[  771.033689][    C1] RDX: 0000000000000000 RSI: ffffffff8da2a184 RDI: ffffffff8bf06cc0
[  771.041646][    C1] RBP: ffffed1003adb490 R08: 0000000000000001 R09: ffffed10170a6655
[  771.049602][    C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001
[  771.057565][    C1] R13: ffff88801d6da480 R14: ffffffff9081f4d0 R15: 0000000000000000
[  771.065535][    C1] FS:  0000000000000000(0000) GS:ffff888124b0b000(0000) knlGS:0000000000000000
[  771.074468][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  771.081047][    C1] CR2: 00007f3ed2e9f42f CR3: 00000000354fd000 CR4: 00000000003526f0
[  771.089009][    C1] Call Trace:
[  771.092280][    C1]  <TASK>
[  771.095195][    C1]  default_idle+0x13/0x20
[  771.099516][    C1]  default_idle_call+0x6c/0xb0
[  771.104268][    C1]  do_idle+0x38d/0x500
[  771.108330][    C1]  ? __pfx_do_idle+0x10/0x10
[  771.112911][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  771.118103][    C1]  cpu_startup_entry+0x4f/0x60
[  771.122859][    C1]  start_secondary+0x21d/0x2b0
[  771.127614][    C1]  ? __pfx_start_secondary+0x10/0x10
[  771.132895][    C1]  common_startup_64+0x13e/0x148
[  771.137839][    C1]  </TASK>
[  771.141137][    C1] vkms_vblank_simulate: vblank timer overrun