last executing test programs:

17m0.165436161s ago: executing program 1 (id=54):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000240)="67f30f09660fae7e0066b9c100000066b80d00000066ba000000000f3066670f30f2e18d0f20c06635000001000f22c066b9800000c00f326635008000000f30c02d1866b9ac0200000f32f30f01df", 0x4f}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000000080102001d000000000000050000040900010073797a300000000014000480080006400000000008000640000000013c000480080002400000000408000240000000860800014000000009080002400000255508000240000000030800014000000061080002400000ffff0600024088"], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x40010)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000001600), 0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="02000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000007500"/28], 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
syz_open_procfs(0x0, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])

16m58.731956113s ago: executing program 1 (id=58):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
listen(r1, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x1000007, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x6, 0x1, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0x1, 0x2, 0x5a, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000bb664b4c0328132c0000190000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8)
pidfd_send_signal(r3, 0x23, &(0x7f0000000340)={0x2e, 0xfffffffe, 0x7f}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x9, 0x0, 0x80, {0x1, 0xfffffffffffffffa, 0x0, 0x0, 0x936f, 0x2, 0x4, 0x0, 0x8, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
getresgid(&(0x7f000000b6c0), 0x0, &(0x7f000000b740))

16m56.517029383s ago: executing program 1 (id=61):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$incfs(0xffffffffffffff9c, 0x0, 0x10841, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
vmsplice(r3, &(0x7f0000000400), 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000004d80)=@deltfilter={0x2434, 0x2d, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1, 0xffe2}, {0xa, 0x8}, {0x9, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_basic={{0xa}, {0x23f4, 0x2, [@TCA_BASIC_EMATCHES={0x1260, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x125c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x6, 0x7, 0x2, "a9764d78a53916"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3ff, 0x1, 0xa4b}, {0x6, 0x2, 0x9, 0x5, 0x8}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc1, 0x3, 0x9}, {0x3, 0x4, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffa, 0x1, 0x7}, {0x5, 0x7, 0x82c0, 0x2, 0x3, 0x1}}}, @TCF_EM_CONTAINER={0x101c, 0x2, 0x0, 0x0, {{0x44a, 0x0, 0x101}, "45182d3970b38c14bc3aff297322ccd59c734e175713b2ded44c02c6015d3dc725fd965981d1f219d31b37328bfd83fab3f7e3f773e72d028041bed0d0fd32339f4ab6ca7772a800d3a5b456faa2cec277490bfcf59a97bc92ec40c012ed67939956964e6be8e9b3de0c11b8b852bb32b9f84c925958b652eaed902ee1e0fdc095a8eb44a9c14091a03b8e52cc5100e3b4ad36c1a0e9fdc9d20a70a2579ff1c6c1dddf482374d543771d13f60bb7b54c6cd1208e7c1f9b261c6dd4d986dad104fe9fbe9720dab3ee5d6ae37d51b21c2456f1040fca809281667a7d83b9e2c8773832ff241f296a482adb0c42f822e5e2659b133fa311f51a70374917f9a63f35684186434ce4023b2d00bb32a76affce7a2606b8977e8d931f7665b3ca1a0efa326f7ab63bcc97b2901a8fc6c7dd440f680bec98112f66ce50e453e754c7663a095a2e82a22696496e80100960bea5c10f938867d96664728aabd4bd55c9d0c47abe58690765ac6aa687891e00bddbb8c09e01b098701004b1cca8dd7359a082e06b3a42ca9823244c7d2d6d9a619d8d7bea15e8d28c428150744f10e677e542b6caa120084a604a42774486af67419a8dc93a8bb07fc1e137d21325b7139aca3cb55fae1f6b4b18639f7038131faa40dd91baef635cf6f7dbda971db6c0e838402c8ce6e5bdedbe60bc6192bfb02978d07403dc56da8a8b70aa0b72d21e0837103582c0a41c1aa5e36dbf9be6ba79dc67e13e7cf6c152aa15fd0a751b011422d71e81e328ecace1263f9c3c92033e520e34244780e4828f6022aefba698e789d69546eec5edc7543aa8108a78db7bc5742dd5573e92bdf9d014ad0352d025ead93dcdf91b667b20ad89d448df229f6d38c9d5b07dba4380b6a94e8a7b3d8401b557f882828b89e41fe9fe33dbf7535479c362ad29f79ba4660b4efe6acd953cd732b58c5b7b8d152605ca49b3b4395c8cc1c796bba007f2378337577317fadbf12317a5739932a0ed488acc78724554c38948b907d5bd3505f4cd521911e03fe8c9d564b1a3ed9733692d636eb6a49ce576ee2dd0e287bfc9d05eb832b076eb56afbc26502b1e01a983a11629876a740930c4fee040433712b7464576b7be787b25785e57aab0af14f87b5c2738266b13dc2e4c63bb6d135ba3c3561e5b7b77840d594371eb2cad6a6d65a61d8c7a4c24e9d4e9ffbb07378c83c00a31b711e406fb71213c40cdeafa8c46556d529ea011e0f66578a8f99b97133d9e62ee1dd1dcb280117c156cd39b466f1567bf4ced0da2ef0ab2e85ad9c872d052fa41315dafa74505d4c04009247615aebc0f8ea4d060998ef3bfed17c1fbc220128379b41ae52acffb670aad7ac1a138144fcfbb79f3d4b015849ee46c9625fe2519f426bffdcc12512bfa0ab3336167b3b69f5c29feb2a8f0f3243e0b827a13da53f95a678696f677302dca360e570e20734b04b4913a6da6120c55d4bca8592ac452a72a69dfe36a2b58a6d783f05a6420f89c0a3615dbba4da28b8aac15311c107066989fc313095179cdcfbd36820647d44beb87eaaf1efb769c5875df37c525c38b82a6a979061a60eba44b1fa7c4aa9478c6447868e38febe3e804016256827475bf92c31f51248a20db344fcfa2a1402b0501fa00f5fea4cdf6494115ad4e4923835490b5f7793d9482d9fd492e7606a68b84ff849791b9111dd27a677ee2f968e29e59b4f56fe09aa19543a143b2f0b27ef095a8893fe8c157c84b1d75995184127275573c9f68becd6ac900f5796d6eea21abf609edcf60150131cb3548f3768fde8a0d247d094a43d5cc2dc814b0861b2e1d51967f22654d6e65cb251a4e3d27cc36ae07d8b2fa9e5e8921cb6f1815307222e7b928615d9ba4d5096c455fe165e09ac67fa8e5d5f5b81084e8c0ac55dc86cc93f69111429d2e7668337d322bfaa8ae3bda3cfd201ff98c09be309acdbc47a589b9495172a2eb90965f82230f9d3ea3d012933effdb6460299a7ced8852eddf27dabe38e5c39e8a6d2b1d19c5395f446bec21ac0f3a5bf05fa1289b6d0c583e8f70ffb0ca1742e32e013f5b0da2fda63cc4657bb39d6427e7ba1d820a48d803d25def0a77adde34a6906083cd64fe0112bdf5138307c6deb3dcc2875f26027c2840967831319ebdc44227d71d152f267fb64af6f4d72ab0eedbc3edc4d6286d7ecc1195ca4606f6deb142c8cb6c46fe18b9a12d9c26eea67a1bf5d6c830fc7c4c32a5bd1f90c45dae3ac096d713fc847413b4321490fc0c89c00ba289e017898bbaa3e7f0576fccebd8e21a14db737c44c4245b4850f43c96dc7f81e7bc3415544de792d1ddc852b6cd11d7c4369c2b0fb511f029f69345f5b6571f2d45b31a5e1eb51fc9acf1967d390ae385281501e879538b07a3f92090b4ff68044d230e626762be04841a92b68565b31e14b5d144aad0ea551537e9a7d995b721521a658acbaf4864b89fc77e6a2f92419d0cf755f7e70fe5abfcaed648d18b89ce5efff61162c309cd49dc8c0225e50ab3b7b773a17d2afb0b2ee7eb3b49cd62a115b3be10705b14c751922ed0d42bcf6330dd63edadac365f8aa83991a2f446bb01ee8758a1638465720b1c136d79e83aa653b9eb9b638a8a5ac55328a82e80f8bff28e61e2154715c2c842d2b48231686a25ad09c3ee2bc6249c94ff89683543f8c513c4e689a9b6b6c062b12bbca9b3f2e21c2d00e2303066e91e26e62707375883e437176f8bcecc9db23b1639850de07a9907038a1481bc767e3de660c00cf5a9f77a8a9529361962540de72b63adfb5ee99f6483defe102351e61f337065ba3f8b8dfc438d40a6cd492afda55560f6eb781e09af24c819c862fb58b8e52f7c34d1132fcdd283356ad9f46296c4e813caeb18bd71fd64bda87db49e93f263f14728725247423eee5de82b9656705f485178238c24f879ee394d4c53df74a866023b52f7245a149331389914705945bd14ac7d6b256a4a4325e8df9bcca0eab7ce944f63cd9528481f077affc544b01f3ea9d857d7ec72c5b0a305c0785959d6e9f2be9e8d3531bc024ed7c855d47c41117fb4f183b0985d30db5787f4eda5303e15c2ea1f72f48e1524dfbcbd3a04bbcd96996a2b0088da555ebddda0199d966b343deff3e2844da84f6158fa3b33893a6d1cd6d2e61e72b03fd38ecee798c34fabd0313660a751c7f062bee4690c90caf59d7e253920869b84a0492aea087a54092d3dd35c155e96026ddedee04acce2d221c8980dd1208865b252fdfa3065ad249f3771cca4c51fd95d66e4e8f776314ed7c2f617f6732ee368bca8a73436f1f95da75d7a2896377de2b8a88bc4d31c286cf1dd97406da47cdf957d809fbcfa2261ddd056c36a7a09259d3eb844b4250e4074f2b427cf280ec4a57f58a22a70117a5fd8c30f345a504862675a63dd4f19336c9e3e04f481783190db893739d69f6bd5edbfd9f694f0cc0f11d66ac869201776e922a37a4448d1702e93f9e92ab02674a9cdb9e13dcc0e3cb6f9f6492e79aeb141c2511d2812400e0884c24374f82c1ab90621e2a7d8ca8e3d34f99cfe53a67f899cded4626a903781d97bdf7cabb26266c7916fedd689c61bc28f75020c0d0af306bd38d69bdacf38cb83145c0db85254188bddd4e8cd9eead5a327e037bac86d8b2ef9d20604c014df46e01596d1b5c0073b485a4d16d92162e7c0c4ed3ceae8034871c0342237189e763cf126d790b9f660a368fc34c4c4f9b471cf29f0346005c19c5edca0ea8652832fcce37f3ed8b05da484c6a2b609719fca9dc259bd9dc621f85ff1a7b9c1afabdc01dc3e2ce58d785240d458a538428c728bcec3c5e981f0128fa8602654ceeb1646d54582c12c488c59df14725be5628d398d7ebb9cf1ecc15c3c9153ecd6389f2186509b240773f522e88b9967df6db4021285614b76096fba6f2d9f0a7e467851efd75618e7cdb92ce95e7eddb11890a267cb2556f4dcb54fa994c4cad78f260e6c370d92ce5c1bf6b33cf46cce36b8524b009ad6a1c0da3e2ce209d2730f1044b60aa1e7df3b6dcc61d4eb58d72ff1b146cd325c11ce2baa183280e5b12cdc5d4212760a6e9ecc110a5e0d4093f3806a2ef933a6188c621046da15bff45f62966f60610005cbe076bb4385d27dc8b57da3a57556cf248b88ed824a5e3da790c4fa69b637c55d587541a950448683c8046ecd1bc325fa1cce1f6ad526d8fe8795ecab941caceb6a1cb5469fde9882102587493837e8fc709b1d8594cafd10d29fb3ec567eac254611a59ff9ad50b388b955f2efda29fbf46d547967239f1844536de87320256c9d60867e3e757547b0986966c079bb611202fd598d12d69b4241c8db75f310d61a815ee54bbec020bea0bd1e79d0e3eb842e36c145782e12aab07e65baa1f78468b308ba1f3dcb0f0e64ea36943ec5b49dd85d9856c5d3b7ac9d64a933f9ed81bb0234de4d4275272fe86b4c057cc8a77568ecd996d8c3a84f8d22804e4c32f5604adde4c4eb621c3f9a5138cdec2ffe9ee67b7c5765185ddd4b4f59667d91187ed99fc6a3ad46fe6b7d00e552ba7f361e8c9879c2efbac374eedcff871123c8621903e42ecfda49ceb085200c99dd494a46bca0cdf161c84ff4a4c622e8948d81363dd48e0569c8ae94f9708a1da0a48437b95e60a9592cb565f781d77c537b3cc9c6f9b1a9b011a3131733d1f41137fc46c0add30d608c8d85deec27edc148baf11770b4737464d4d0bf837866dfd1335713b1d221f7604244f158428043d80d6db9d02924e6e215bd36dfb130ab673ed8e1a7c59e834361fe3c404e7b0b7fe08737db7508de6459136989ff28d5a3d16497f9a824d29c359b2078dfd4d8e49e29a4e045650f7bfa9a8dbc57ef0d0c348c2de6b638fb7360f5a4f21fad289dcbffbb67d42f940a0f241881b6784bbdc2970b1fac55da225cad9077f0c1594c4828eba6ba56e23a2da2e810a59f9d86d9a9f318a3232e3ce03d11e7211265bdc0058942724aba1646f39a1a1cf20d1f156fb88733ccadf98ca9feb0a74f7af81ac6e109a3e72c223123321244fd776f495c339b1f8aa837a790bfab4f7edf7b53b18d608b6b8f71b115cf17230fea31e3d877ab3ab284470488bd1502248c26e3d8f60c5f22d57f199736e0336b7c384662e620f3c83c2b3682a5a9ffd69c49c7c4571f1d3ae534dcca64fdb90adc1d82dee1c4ee4ca421a522efde7d10ffef242f4ae2b7694543c0f3b99949c3bf5d13d5eae9597478b92c7800475e4f7476c03c474c24824809d84b2c3830e461c6752998122ca8e641a873cd4c7aa3f906c0f7765962217c090bc7fa96f4b968ceb43402827f7efe32c75023365dd795fed0b78eb80306406dd73175ded3501104a33b81e1a78ba89762954c0097ae0a8cf9b4365c3579cb18778d8e516a27859885b340a3f85daba0110d22ba2468c6da894c40626afad476e82cb1cc452cc829c210525a51ed34de6655dbf100b79c6c6820ac06b1a47b32dcfdf84732a2c9115e9c3756b6b94f8be510180e5d86e7b9010c5b98caa3dae03e4eb5779d100d988f87712a2d7ec673b9bbb68beb7b52960f994e953862b178f264a567455de2324638e11c04afc987d52d4cfc1a8c9bcdcacca5140e40578d776258b17809b6b24ea1e40deba8c5a907158b7ab33c64424dac050e1b0b0c405511fdcd755047ca6b58f01f7e35bdb2a42c3fd96acd9e07f7591548e88ef9f9cd550d7b266ae4c98bfd9e45f0fe7aa1637b23958cfceedc045fa256103b96b7bc7b170279e36ccd2304d4e2b10f"}}, @TCF_EM_CONTAINER={0x88, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x6}, "65e4859837b4b4f913d2deabe9882f4c52c5a50c047ad10070f8e40dd7b2db20a8e0d25e9e07dbdbada097ad9be4d840a6da3ee2db81af17235d0bd4f6301534a77b2272db8170fdf905f67d8c614a1de8fd95bcf0778888d2d99bd5ac366f86448948bca9b500b07aa88cd184c60b3c45403fda2fe31f0c0e7f6796"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x800, 0x8, 0x200, 0x2, 0x7, 0x1, 0x2}}}, @TCF_EM_META={0xd8, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="ec8fb4547aeec2", @TCF_META_TYPE_VAR="cf", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c3f3d878f90d60", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="8dc3b12ef9504da46710", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="15956a2c17c71c", @TCF_META_TYPE_VAR="e39e", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9b56cd647ad291", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="8f6514f3", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="3cb72a"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="05e9cfee800e4496", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x1}, {0xe93, 0xfa, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x9, 0x2}, {0xff, 0xd3, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="b8dc6bc2e1", @TCF_META_TYPE_VAR="09c7d6828980", @TCF_META_TYPE_VAR="72f2dab636e257"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="eb12bcbcd53b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0x0, 0x2}, {0x4, 0x9}}}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x8000}, {0xc, 0xa, 0x2, "9a8f5ae63abb22081dd2"}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x37, 0x4, 0xfffe}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5b6d, 0x7}, {0xf42, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="dc9522"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="064730567b7bbd", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a236", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9]}]}}]}]}, @TCA_BASIC_POLICE={0x874, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x60346571, 0x5, 0x2, 0x1, 0x3, {0x4, 0x0, 0x4, 0x3, 0x4, 0xffff1abe}, {0x7f, 0x0, 0x3, 0x4, 0x4, 0xfffffffb}, 0x6, 0x62, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3a48, 0x80000000, 0x83bc, 0x1, 0x79b, 0x5, 0x5e, 0x4, 0x81, 0x4, 0x7ff, 0x1, 0x7, 0xffff0e56, 0x10000, 0x8, 0x6, 0x7, 0x800, 0x7fff, 0x0, 0xfffffff9, 0x7, 0x0, 0x31f, 0x0, 0x81, 0x3, 0x5, 0xff, 0x8, 0x3ff, 0x2, 0x75, 0x2, 0x4, 0xad6, 0x3, 0x9, 0x9, 0x2, 0x1192, 0x7ff, 0xb41, 0xd2a, 0xfffffffe, 0x0, 0x1, 0x1, 0x83b, 0x5f, 0x1, 0xc, 0x5d, 0x8, 0x2, 0x3, 0x40, 0x0, 0xc4, 0x401, 0x6, 0x9, 0x5d4e, 0x80000001, 0x0, 0x743, 0x5, 0xb89, 0x36, 0xfff, 0x9, 0x1, 0x1, 0x4bf, 0x0, 0xfdc, 0xe0, 0x1, 0x4, 0x81, 0x0, 0x800, 0xff, 0x0, 0x1, 0x0, 0x3, 0x20b7, 0x3, 0x9, 0x1, 0x8, 0x2, 0x0, 0xff, 0x8, 0xbd7, 0x0, 0x0, 0x7, 0x10, 0x100, 0x0, 0x4, 0x8, 0x7, 0xfcc, 0x6, 0x80, 0x4, 0x10000, 0x7, 0x9, 0x1, 0xa843, 0x1, 0x1, 0xfffffff9, 0x9, 0x9, 0xb138, 0xb, 0x3, 0xe87, 0x0, 0xffff, 0x5, 0x8, 0x7, 0x2, 0x1, 0x401, 0x1, 0x1, 0x0, 0x9, 0x2, 0x5, 0xff, 0x69, 0x2aad, 0x81, 0x10, 0x8001, 0x8, 0x9, 0x9, 0x6, 0x8001, 0x28de, 0x5, 0x8, 0x7, 0x0, 0x3, 0x1, 0x2, 0x9, 0x7fffffff, 0x766, 0x81, 0x6, 0x10001, 0x1, 0x0, 0x9, 0xfffffffa, 0xa, 0x4, 0x7, 0x9, 0xfffffffd, 0x0, 0x2, 0x7, 0xd8d, 0x8, 0xe1a16117, 0x1, 0x9, 0x721, 0x6, 0x3, 0x9, 0x9, 0x3, 0x1, 0x2, 0x1, 0x8, 0x8000, 0x7, 0x6, 0x53c, 0x0, 0x4, 0x0, 0x8, 0x6, 0x0, 0x6, 0x3, 0x9, 0x2, 0x8, 0xfffffffd, 0x2, 0x7, 0x7, 0x80000000, 0x3, 0x2194, 0x0, 0x4, 0x7fff, 0x10000, 0x10001, 0x3, 0x1, 0x20fa, 0x5, 0x2, 0x7, 0x8, 0xffffff7f, 0x9, 0x7fffffff, 0x8, 0x9, 0x2, 0x9a, 0xb, 0x4, 0x6, 0x5, 0x0, 0x3, 0x7, 0x4, 0x8ab2, 0x7, 0xff, 0x3, 0x0, 0x6, 0x3, 0x40, 0xfffffae2, 0x0, 0x5b, 0x101, 0x0, 0x8, 0x2, 0x6d6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x38000000, 0x7, 0x4, 0x6, 0x5, 0x101, 0x10000, 0x0, 0xa, 0x7, 0x0, 0x1000, 0x6, 0x401, 0x14a9, 0x3, 0x0, 0x2f86, 0xffffff20, 0x4, 0x8, 0x1, 0x5, 0x6, 0x1, 0x3, 0xf6, 0x5620, 0x0, 0x9, 0xc, 0x8000, 0x34c00, 0x5, 0xf, 0x7fff, 0x8, 0x7, 0x5, 0xf, 0x0, 0xea1, 0xfffffffd, 0x5, 0xfffffffa, 0x7fff, 0x5, 0x3, 0xc6d, 0x4, 0x7, 0x3, 0xf75, 0x7, 0x6d0, 0x4, 0xa, 0x2, 0x4, 0x8, 0x8, 0xff, 0x3, 0x0, 0x2, 0x6, 0xef, 0x9, 0xe, 0x6, 0xd2c2, 0x0, 0x10001, 0x9, 0x9, 0x5, 0xfffffffa, 0xc7, 0x0, 0x6, 0x1, 0x7, 0x0, 0xef9, 0x4, 0x1, 0x0, 0x6, 0x1bc, 0xe, 0xaf, 0x5, 0x400, 0xc, 0x17, 0x6, 0x80000001, 0xcc7, 0x0, 0x3, 0x6, 0x9, 0x4, 0x10001, 0xc, 0x3, 0x10000, 0x3, 0xffff, 0x7, 0x6, 0x7, 0x9, 0xfffffff4, 0xb08, 0x9, 0x8cad, 0xaa, 0x4, 0x16, 0x6, 0x200, 0x9, 0x3, 0x8, 0x7, 0xd558, 0x81, 0x8, 0xf4b909a5, 0x8001, 0x6, 0x5, 0x9, 0x8000, 0x43d, 0xffffffff, 0x9, 0x10001, 0xd38, 0x200, 0x40, 0x0, 0x4, 0x7, 0x2, 0xffffff00, 0xdfe, 0x4, 0x9, 0x3, 0x101, 0x0, 0xbcd, 0x4, 0xffffffff, 0x3, 0x14000, 0xfffffff7, 0x9, 0x7, 0x0, 0x1, 0x7ff, 0x4021358f, 0x7ff, 0x8, 0xa, 0x800, 0x5, 0xa, 0x8, 0x4, 0x1ffc00, 0x2, 0xdbd0, 0x16d, 0x0, 0x0, 0x7, 0x7, 0x0, 0x9, 0x7fffffff, 0xc2b, 0x6, 0x5, 0x0, 0xca88, 0x6, 0x9, 0x87f5, 0xe783, 0x1, 0x0, 0x10001, 0x3, 0x8, 0x7, 0x2, 0x5f071c29, 0x6, 0x4, 0x3, 0x100000, 0xffffffaf, 0x3, 0x7, 0x5, 0xc868, 0x9, 0xffff1baf, 0xc3d, 0x3, 0x2, 0x6, 0x9fb, 0x8, 0x500, 0xc514, 0x9, 0x7, 0x7fffffff, 0x5, 0x70000, 0x4, 0x5, 0x9, 0x3, 0x6, 0x8, 0x1, 0x8, 0x400, 0x492, 0x3, 0xfffffffc, 0x4, 0xff, 0x2, 0x0, 0x200, 0x8, 0x7, 0x3, 0x4, 0x8, 0x0, 0x881, 0x7, 0x80, 0xf, 0x7fff, 0x0, 0x3b, 0x11]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_BASIC_EMATCHES={0x91c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0xfff}, {0x8, 0x3ff, 0xe, 0xbf}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0xbc4}, {0x3, 0x3, 0xb7b, 0x3, 0x9, 0x2}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b8fb72a223c5", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="ebb9a6b6be9d699ce287", @TCF_META_TYPE_VAR="51a0", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1935, 0x9, 0x2}, {0x8, 0x8}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd, 0x3, 0x1}, {0x2, 0x4, 0x1, 0x10000}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x80}, {0x1, 0x8, 0x2, "9d13380d306d65ba"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xf55b, 0x2, 0x4}, {0x7, 0x7, 0x2, "407183ab2e27be"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff7, 0x1, 0x9}, {0x7, 0x9, 0x800, 0x4, 0x4, 0x2173fa24bbb3e72f}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x7, 0x5}, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0xffffffffffffffff, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x10, 0x2, 0x7}, {0x401, 0x9, 0x2, "9fa3e41fbfa594fb1f"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8000, 0x3, 0xc325}, {0x5, 0xe, 0x8, 0xfffffff4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x4000}, {0x5, 0x40000, 0x5, 0x3ff}}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x100}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="26e83791a84f", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="af728d30"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff}, {0x66, 0x6}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffae, 0x8, 0x2}, {0x2, 0xfb}}}]}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="16a43c0f62", @TCF_META_TYPE_VAR="7dfb9939f9b4", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x7f, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x1}, {0xb, 0xc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x2}, {0xff, 0xf4, 0x2}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7620, 0x8, 0x6}, {0x3, 0x2, 0x4}}}, @TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0x200, 0x0, 0x5a}, "f2bf75b8221403652d36a3afe538451c90075a4dabe0745e5975e9b844c2dce33b98de0abaaf0889d6028818"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0xd23}, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x3ec, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1a8, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4f, 0x5, "d0cead0af29dae29d768137c532291b5df6402a3e2b4e4cbd69457311c4c34a2c748d9b87e91a80b89536cd38abb3eae37307334511ec823960ce9c6fb2df3fc9b923cc640794ed2af2723"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8c}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x100, 0x5, "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"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0x3c0, 0x0, 0x81}, "cb959f3746e26ad439ca3018b798264b0300604d0cf5cac56ad8e59099fa07c3abe05cf3c14e4ce7588847fb1ebf504803648d07f8438ab2c79730761ab8852c359c57d53afb127cfa6d3dad51498af3d462306dc069190f7b1e7cdd0566fdbccd566e6a7ec3d5e993cb5d3d95b64c3d52421a962443807c16a36b976e9cc7e25c0f29"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x100, 0x1, 0x2}, {0x8, 0x5, 0x7fff, 0x5, 0x1, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x1, 0x2, 0xffff}, {0x9, 0x8, 0x2, "83c03e4c63db99f5"}}}, @TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0xda, 0x0, 0x101}, "95693ff43b1c772f0590eeccbf942d260eece1941b508e3f4dc96d86ddc212bae97a7fddc6205b75c7ce0d4a5f4825813e903f44d4bb4f931b62c1015a7d72246021d89cd1b33992ad3628cd03a9cca1e482b7fe3e8ab8d42b058ed3428abb07707e12fcb2ea50d9d4255cf6d23008e13baef94a1507b5d99e5da30c17efb0c721d6652ed0945e75d3daa7592469f3f25651c55f6ddf367d990d5eb5c8824dfcbf74b6c9ca897087bde5de9d0ddedddda15895d3e8f312e12ecfb74ef8191bacf42647debc129cc9c97d8597d1c5f2248a484d"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x60f7, 0x2, 0x1}, {0x0, 0x3, 0x0, "f316d2"}}}, @TCF_EM_META={0x8c, 0x3, 0x0, 0x0, {{0x8}, [@TCA_EM_META_LVALUE={0x31, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2fabfb8f95a1aff6", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c3b093cc0a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ed99", @TCF_META_TYPE_VAR="d17e547ecf31e57d0b38"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="60b398", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="c7f627", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1, 0x1}, {0x9, 0x1, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x270, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xff, 0x8, 0x7}, {0x3, 0x4}}}, @TCF_EM_IPT={0x14c, 0x2, 0x0, 0x0, {{0xff84, 0x9, 0xfff9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xe3, 0x5, "99a134de9e3dda10518adf6eea8b992b0717602bed531d36d17bd8ae5735280353d5ffe4b29fd00bea7f3b51957db96578051543879a67828c8da17842508914417ad7ba2e5146ae76aaf22716df924ed8677ff3f5875a2b908546d183db6353ad1536935f3ed786cef45b005348e0898265280cfb260c8544a3e3b8dd38903fa61f5ab6823a3526d3aa9910f5549d230ff483882c99c4240bf1e9eb107c450a70cf5205c6e9d6dd6de96dc1d91a67fae1680d963b458d9366b2b0ebc5b7c0946b6db30156794e0474cf90f31f2eaf21eb4363c1009589500eb668d619ce74"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe}, @TCA_EM_IPT_MATCH_DATA={0x20, 0x5, "38276d275a6957b0c17819461dcc6f01989da29e4896f3d4fe60f05a"}]}}, @TCF_EM_CONTAINER={0xf8, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x45}, "9c3dd223f0eed17be65f7374f51385c1fc19158675166bc490fc59d52f2f751b5929cd22022e82b07127837af36a32575339a6fafeb3738be72d8629f2121b1a5a49a63466946fe2839bd499c63f4d47682e921c3b4dc2d979a4941a45042c45494b6c8d3c1d2f7a7b36495fd560d98e539eaf8c79176ec2a58a305924e6ae0beec43f5294469b993238751378714580d57ec181074f9c80462e1dde17826811c43ac525ee646c4d3129721fb383a9448b9268398792b73bc7e726ddeaa4b8ded1e007b95d2d8b4f55108faa9ad41ce10eeba015ef1f52c7d672d9db3703dd0a56a00829dc242c394edfc6fc"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x6}, {0x2, 0x7, 0x512, 0x1, 0x1, 0x1ba6fa9c0bf942f}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x2434}, 0x1, 0x0, 0x0, 0x4004800}, 0x44810)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0)
migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r8)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB='\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

16m54.881305251s ago: executing program 1 (id=63):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x40049409, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
unshare(0x22020400)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
bind$isdn_base(r2, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000100), 0x12)
listen(r4, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000340))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x80880)
connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

16m50.434134144s ago: executing program 1 (id=76):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r3)
r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYRES64=0x0], 0x10)
socket(0x1, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x800)

16m49.936792283s ago: executing program 1 (id=78):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001800010000000000ffffffff0a0000000000fd0000000000140005000000000000000000000000000000000108000400", @ANYRES32=r1], 0x40}}, 0x10080)
r3 = request_key(&(0x7f0000000280)='.dead\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='-@\x00', 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghiqrstuvwxyz0123456'], 0x29, r3)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000)
epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0)

16m34.723719489s ago: executing program 32 (id=78):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001800010000000000ffffffff0a0000000000fd0000000000140005000000000000000000000000000000000108000400", @ANYRES32=r1], 0x40}}, 0x10080)
r3 = request_key(&(0x7f0000000280)='.dead\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='-@\x00', 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00abcdefghiqrstuvwxyz0123456'], 0x29, r3)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
r6 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000)
epoll_create1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0)

8m49.483262531s ago: executing program 5 (id=1269):
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
syz_open_procfs(r2, &(0x7f0000000540)='net/ip_vs\x00')
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x200, 0x0, 0x0, 0x7, 0x10000000000000, 0x0, 0x0, 0x0, 0x10006})
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x6}, 0xf3e, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x400, 0x77c1907b})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)

8m48.132931738s ago: executing program 5 (id=1271):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0xf, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)

8m47.519446111s ago: executing program 5 (id=1273):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})

8m46.794547391s ago: executing program 5 (id=1274):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0)
read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef)

8m45.78627977s ago: executing program 5 (id=1278):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000100)={0x80, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]})
ioctl$TCSETS(r3, 0x89f2, &(0x7f00000000c0)={0x8000000, 0x1000000, 0x0, 0x0, 0xf, "bb5dee00"})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="81028200000002"], 0x0, 0x0, 0x0, 0x0})

8m42.75974013s ago: executing program 5 (id=1287):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0xf, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x30}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x3, &(0x7f0000001680)=[{}, {0x87}, {0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x0)
close(r4)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791048000000008000a0000041000000950000000000000090153b9273123229c0426ed9e8106d155606482910e9f2309106e38a2bfa3e3cf76fc366ddbce3e0cc854a27cae7870c445de6150d3ecea420522b40d06189cb84766562032e922f13741f724c27d09e7067d072d357f8f24e19cc68043f93557d920b867d86c0348b670fef766dca9b2392753f2a6f8ef7c3734e55"], &(0x7f0000000080)='GPL\x00', 0x2, 0xffb9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x40)
socket$key(0xf, 0x3, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r8}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20)

8m27.577962563s ago: executing program 33 (id=1287):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
getrlimit(0xf, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6}}]}, 0x30}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x3, &(0x7f0000001680)=[{}, {0x87}, {0x6}]})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}, 0x0)
close(r4)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791048000000008000a0000041000000950000000000000090153b9273123229c0426ed9e8106d155606482910e9f2309106e38a2bfa3e3cf76fc366ddbce3e0cc854a27cae7870c445de6150d3ecea420522b40d06189cb84766562032e922f13741f724c27d09e7067d072d357f8f24e19cc68043f93557d920b867d86c0348b670fef766dca9b2392753f2a6f8ef7c3734e55"], &(0x7f0000000080)='GPL\x00', 0x2, 0xffb9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x40)
socket$key(0xf, 0x3, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r8}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000240), &(0x7f00000004c0)=""/200}, 0x20)

18.618578263s ago: executing program 2 (id=2624):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
getgroups(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a8, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001dc0)=ANY=[], 0x1508}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004)
recvmmsg(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/119, 0x77}], 0x2}, 0x2}], 0x1, 0x40002041, 0x0) (fail_nth: 2)

17.396683543s ago: executing program 4 (id=2627):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
socket$inet6(0xa, 0x3, 0xff)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xcd}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

17.064841084s ago: executing program 4 (id=2629):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x5, 0x0, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2={0xff, 0x5}, 0x0, 0x8}})
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r4, 0x0, r4)
getgroups(0x2, &(0x7f00000000c0)=[r4, <r5=>0xee00])
keyctl$chown(0x4, r2, 0x0, r5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000010c0), 0x0, 0x1, 0x0, 0x0, r7})
r8 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0xf, &(0x7f0000000100)={0x7, 0x81})
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0)
syz_clone(0x4002000, &(0x7f0000000240)="a6392886ab8f24654f62edfebcc8b6a0b3f903a3f4e2934ec9f1488d4cd13432fa913f7c435187e020c7a03542b7aacb177c70c88cce2ab36fdfefa18d441f8b208e37ef3d1c", 0x46, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="0b9ef4d6b11bb3f9ba02ff7de3656e989f09d5c025d2a4")
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}]}, 0x34}}, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100697069700000000014000280060009000000"], 0x44}}, 0x0)

16.786339713s ago: executing program 2 (id=2630):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585cf"], 0x0)
mount$bpf(0x0, 0x0, 0xffffffffffffffff, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="1840dd51", @ANYRES8, @ANYRESDEC, @ANYBLOB=',dirsync,seclabel,smackfsdef=,fowner>', @ANYRESDEC, @ANYBLOB="2c02e7ab16163dcbe633e1914efa1ad6f8419724f29c4c4e4db5eb7935317719124d26fc426e590b9f79cd8aab9fc9cb7e1c5af4ff90188ef2ae06c324ccef73b6a429a1"])
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000780000000006000008001e00000000000c0009"], 0x30}}, 0x0)
socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x2, 0x8, 0xfffffff7, 0x4888, r1, 0x9, '\x00', 0x0, r2, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
setgid(0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0xa)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707573657420c5302dc6d43bfafecba2135547819df763fa577ce60de286307b4e3f36dcd3ed80d9246b43e225beadf6245b0be1d2642c8514b64346fd1b77e49773f6f29b60e67127615ede2b624650d3e9bab3392e0842d9ee82771b4a59c9206228f1602264b11da77f98f519423fda7ee1f630aa776f9cbd4da9825b631acbee9442fc02749264d5c24f3734ba3b97b10ae72da6ffbcd1420241b356a357d5dc64c8ec0a99935e488c02aac8e7f22229a2a98740b738ee61965c71c87fe0ca5574f4401cf305b3a219c42624d555f064ff26282a47a58cd04fa4495ada9e439ce6d8cb7b90ee558b74e995c4"], 0x8)

15.037486259s ago: executing program 0 (id=2632):
prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockname(r3, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500))
close_range(0xffffffffffffffff, r3, 0x0)
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
socket$inet6(0xa, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x2}}}, 0x24}}, 0x40001)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r7 = socket(0x2a, 0x2, 0x0)
sendto(r7, 0x0, 0x0, 0x0, &(0x7f0000000540)=@qipcrtr, 0x80)
read$qrtrtun(r6, 0x0, 0x0)
dup2(r6, r7)

13.125253552s ago: executing program 2 (id=2636):
prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
socket$inet6(0xa, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x2}}}, 0x24}}, 0x40001)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r6 = socket(0x2a, 0x2, 0x0)
sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)=@qipcrtr, 0x80)
read$qrtrtun(r5, 0x0, 0x0)
dup2(r5, r6)

11.005910463s ago: executing program 0 (id=2639):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
socket$inet6(0xa, 0x3, 0xff)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xcd}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

10.754426906s ago: executing program 0 (id=2640):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000100)=0x200009)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x2000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x5}])
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x3, 0x7, 0x0, 0x6, 0x9, 0x101}}, 0x82800)
pwritev2(r0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

9.306198865s ago: executing program 4 (id=2641):
syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = getpgrp(0x0)
tkill(r4, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222})
r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r9})

9.293766655s ago: executing program 0 (id=2642):
syz_emit_ethernet(0x6e, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
r1 = add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff)
r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x4, 0x6})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
r4 = msgget$private(0x0, 0x70b)
msgctl$IPC_RMID(r4, 0x0)
socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)

8.756961328s ago: executing program 2 (id=2643):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0xfff3, 0x7}, {0xa, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x88c0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(0x0)
r1 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc16, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x164, 0x40, 0x8e, 0xff, 0xb, 0x4]})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
prlimit64(0x0, 0xf, &(0x7f0000000480)={0xa, 0x1}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x1)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)
poll(0x0, 0x0, 0x9)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/timers\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
open(0x0, 0x143c62, 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='hpfs\x00', 0x0, &(0x7f0000000300)='tra=rdma,\x00\x00')
write$sysctl(r5, 0x0, 0x0)
open(0x0, 0xec902, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x40}, @broadcast}, 0x8)
unlinkat(r4, &(0x7f0000000200)='./file0/file0\x00', 0x0)

8.081838556s ago: executing program 6 (id=2644):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0200b70604"], 0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x331600, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x40000, 0x3, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0)

7.857052039s ago: executing program 0 (id=2645):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
sendmsg$tipc(r4, &(0x7f00000001c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x4}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000001280), 0x0, 0x404009c}, 0x4000)
getpeername$packet(r4, 0x0, &(0x7f00000002c0))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r5 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x0)

7.114072711s ago: executing program 6 (id=2646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setrlimit(0xb6e82e8175962257, &(0x7f0000000000)={0x800000000008, 0x3fc})
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r2, &(0x7f0000012380)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f00000145c0)={0x2020}, 0x2020)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x48001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg$sock(r1, &(0x7f0000001840)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @private=0xa010100}, 0x4, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)="95140a45b65815b2fe5a16fec2e63843a3", 0x11}, {&(0x7f00000001c0)="eca2855afc630fddcb6518d65a0ceb12fb211d1b4601de682743d61931f997f2b39691c4f59188ac7d893d9cea6772aafffa163fc6370db92c6c13786bc4325dc34c307a231920bbf5a1da91a41e4699a41a1db1a6743c4d62a1debb03b79499a67d8329afb436ffcf9fe702f47052f703f89214cfb29abb80ac747d6f9cdba25e4631092e74eb2e95fbddf8a1b6ec3596cc122e6dc55c7c32e04fbd7d89d42cedf6351bc6f67ae4ce8e431358", 0xad}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="b545dc9efc02c46b9b16eba370afaf938cdf9f5b8b2aed158909c4a23180aa6f3040ff1c61623a6da33c08d8c1d64d8f8c998f68f2f21a1529a3cded4f6d7ebdd307fa1f1c7d6dc8f89429961ce11b7aa024372cafcd10547a15597b4b4785a5cdbc7fbdf85ff4bcb3e2c3e5e0de8934e43c3a88c0e85472ea92911d24eadb0b428a7202ab0d427c2f715e7c1be7ad4456b98a2ef04294a816ca482dbbe47f2cf99e75c712aaebc911dd6467cdff7714b7c4e224a88e12157628af2bf6aa2998df21f6f01be5f956143e8bc11620ff7bb93841a29caedbbc147d7dcfb04430ba59a8ceff", 0xe4}, {&(0x7f0000000140)="a2aabeb443386be6e5293230d0ef923be67301a1593f6a", 0x17}], 0x5, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}, {{&(0x7f0000001440)=@l2tp={0x2, 0x0, @loopback, 0x3}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000014c0)="03c97c1bc3685c81de7b66952fada0c7ea6ceb0471d526914046e6a458072d102b3728b203ce644ca8a4127866a4b085f77b1311312ee69499f7c23694149bac14a4313cfad992e41ca154441843b18c3fc18bdcaa09291cb8856b024fd0461fd1d74517cf26e97431f33e2cb33842a689cb2daadd0638af728ad6a789a837d0eebf8881ac6537b811cab3a74ec22ef7600a9a51223f33d7de9fe4707d76311c0346e3879873ce7f6e3a44ec4d451e22fb84f84c24a5b7d1771b39e1dec60b1be256361f68ae6da553a8382c", 0xcc}], 0x1, &(0x7f0000001600)=[@txtime={{0x18, 0x1, 0x3d, 0x8005}}, @mark={{0x14, 0x1, 0x24, 0x90}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}, {{&(0x7f0000001680)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001700)="03afae119b3bcdef146ec4fca42962cd283d97dbde1d554e1cb91f69985e619dc707bbd942e49a22dfb3391539b3a8cd8bbf58446caaaf5c2c16c9302bf7e77e99c7f6db270ccdd91144af3fa6cc8c1c8b9f9d67f6e674c23396fa87a12f2a864f8554e0d086b83140a7cb415aa24d752f7142354bdb4a29381ae7a56ff30d4ef892ad93a65bc078dd24e55841dddc1094d939ac68b00d33cf8f07436f823d60670ba1a4fb4c8a6ee4c097c4fbc9d78772ac5220f7f0fbb395d6fed92c3159f502e4246dbb7daf08082e22985e38d7af401f6ed45766302ad423", 0xda}], 0x1}}], 0x3, 0x4004000)

6.854295739s ago: executing program 2 (id=2647):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0001800600060080"], 0x528}}, 0xc000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x14, 0x0, &(0x7f00000001c0))

6.853442454s ago: executing program 6 (id=2648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x3, 0x1000, 0x18, &(0x7f0000000040)="13760989bad5d9b8ca0fc8796caa950f48fbc143b4b09022", 0x25, 0x0, &(0x7f0000000080)="ae28a3988e85210ac5a713cbfd25bf7a22d3a02176fc78ffc935f3147f943b0ecf19514a1b"})
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x20000000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000200)="ee"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@clear_death], 0x0, 0x0, 0x0})
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x5dc, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000)
syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x0, 0x0)
socket$inet(0x2, 0xa, 0x1)

6.845005643s ago: executing program 3 (id=2649):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000100)=0x200009)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x2000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x5}])
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x3, 0x7, 0x0, 0x6, 0x9, 0x101}}, 0x82800)
pwritev2(r0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

5.761236578s ago: executing program 2 (id=2650):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000ee0ff540991100b038e5010203010902120009000000000904000000da8671003c9d97ed00812c221da6920e5f697184ed9d4cbc7bce209fee7badd1162c9e45e441ba177db51553a7b5a3c47ad3ab6a423878bb3da01ef367c740d6c0a6b341e62c5ce7071c5ccbab42ddf01b"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2002, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)
getpgrp(0xffffffffffffffff)
pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
munmap(&(0x7f000040a000/0x400000)=nil, 0x400000)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000280)="0f", 0x1}], 0x1, 0x9, 0x0, 0x0)
syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x101, 0x1, 0x1, "eee98fa709178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x49433553})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

5.430915766s ago: executing program 4 (id=2651):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x123302, 0x0)
write$nci(r0, 0x0, 0x0)

4.444825014s ago: executing program 6 (id=2652):
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
io_setup(0xffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f00000003c0))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x149000, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2)

4.342954363s ago: executing program 4 (id=2653):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x2000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x5}])
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x3, 0x7, 0x0, 0x6, 0x9, 0x101}}, 0x82800)
pwritev2(r0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

4.240886425s ago: executing program 3 (id=2654):
io_setup(0xffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f00000003c0))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x149000, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2)

3.056174605s ago: executing program 6 (id=2655):
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x5, 0xa3, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x8000)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000200702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})

3.048753684s ago: executing program 3 (id=2656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x3, 0x1000, 0x12, &(0x7f0000000040)="13760989bad5d9b8ca0fc8796caa950f48fb", 0x25, 0x0, &(0x7f0000000080)="ae28a3988e85210ac5a713cbfd25bf7a22d3a02176fc78ffc935f3147f943b0ecf19514a1b"})
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x20000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000200)="ee"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x5dc, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000)
syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x0, 0x0)
socket$inet(0x2, 0xa, 0x1)
socket$nl_route(0x10, 0x3, 0x0)

1.070750819s ago: executing program 3 (id=2657):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
pipe2$9p(&(0x7f0000001900), 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], &(0x7f0000000340)=[<r2=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]})

535.240013ms ago: executing program 0 (id=2658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x58)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x2, 0x5)
socket$alg(0x26, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18c6000000000000000000000000100085000000870000001801000020786c2500040000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102376, 0x18fe8)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
connect$ax25(r4, &(0x7f0000000280)={{0x3, @bcast, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default]}, 0x48)
syz_emit_vhci(0x0, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x100)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x1}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
linkat(r1, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000440), 0xc4000, &(0x7f0000019700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_L}, {@afid={'afid', 0x3d, 0x1}}, {@loose}, {@loose}, {@cachetag={'cachetag', 0x3d, '/dev/vcs#\x00'}}, {@dfltuid}, {@ignoreqv}, {@cache_mmap}, {@cache_mmap}, {@fscache}], [{@measure}, {@obj_type}, {@uid_eq}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}, {@appraise_type}, {@fowner_gt}]}})
unlink(0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)

534.483688ms ago: executing program 6 (id=2659):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

533.449358ms ago: executing program 4 (id=2660):
r0 = socket$key(0xf, 0x3, 0x2)
clock_gettime(0x0, &(0x7f00000019c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000400)=""/21, 0x15}], 0xa, &(0x7f00000018c0)=""/213, 0xd5}, 0x2}], 0x1, 0x40, &(0x7f0000001a00)={r1, r2+10000000})
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r3)
r4 = timerfd_create(0x0, 0x0)
pipe2$9p(&(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x0)
r6 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000000})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000000))

475.47906ms ago: executing program 3 (id=2661):
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
rt_sigtimedwait(&(0x7f00000001c0), 0x0, 0xfffffffffffffffc, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@allocspi={0x22c, 0x16, 0x20, 0x70bd28, 0x25dfdbfe, {{{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@private=0xa010102, 0x4e20, 0x5, 0x4e23, 0x8, 0x2, 0x80, 0x20, 0x6}, {@in6=@mcast2, 0x4d6, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x1, 0x240, 0x100000000, 0xd, 0x9, 0xa1, 0x6, 0x2}, {0x4, 0x0, 0x8, 0x9}, {0x9, 0xb, 0x713}, 0x70bd2a, 0x3505, 0x2, 0x0, 0x2, 0x47}, 0x401, 0x9}, [@migrate={0x134, 0x11, [{@in=@empty, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x32, 0x0, 0x0, 0x3501, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, @in=@local, @in=@rand_addr=0x64010101, 0x32, 0x8dbe4ed97bda627, 0x0, 0x3501, 0xa, 0xa}, {@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@empty, @in6=@mcast2, 0x2b, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in6=@empty, @in=@rand_addr=0x64010100, @in=@local, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40080}, 0x2000010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff42, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xcd4d, 0x10100}, &(0x7f0000000100), &(0x7f0000000140))
move_pages(0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=2662):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

3.348933][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  963.448885][T11363] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  963.501019][T14885] FAULT_INJECTION: forcing a failure.
[  963.501019][T14885] name failslab, interval 1, probability 0, space 0, times 0
[  963.597768][T14885] CPU: 0 UID: 0 PID: 14885 Comm: syz.0.2282 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  963.608577][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  963.618646][T14885] Call Trace:
[  963.621937][T14885]  <TASK>
[  963.624881][T14885]  dump_stack_lvl+0x16c/0x1f0
[  963.629583][T14885]  should_fail_ex+0x497/0x5b0
[  963.634291][T14885]  ? fs_reclaim_acquire+0xae/0x150
[  963.639432][T14885]  should_failslab+0xc2/0x120
[  963.644134][T14885]  kmem_cache_alloc_noprof+0x6e/0x3d0
[  963.649532][T14885]  ? __mutex_unlock_slowpath+0x164/0x690
[  963.655188][T14885]  ? getname_flags.part.0+0x4c/0x550
[  963.660513][T14885]  getname_flags.part.0+0x4c/0x550
[  963.665657][T14885]  getname_flags+0x93/0xf0
[  963.670098][T14885]  user_path_at+0x24/0x60
[  963.674450][T14885]  __x64_sys_name_to_handle_at+0x1eb/0x310
[  963.680290][T14885]  ? __pfx___x64_sys_name_to_handle_at+0x10/0x10
[  963.686652][T14885]  do_syscall_64+0xcd/0x250
[  963.691186][T14885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.697102][T14885] RIP: 0033:0x7f339557ff19
[  963.701542][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  963.721173][T14885] RSP: 002b:00007f339639a058 EFLAGS: 00000246 ORIG_RAX: 000000000000012f
[  963.729616][T14885] RAX: ffffffffffffffda RBX: 00007f3395746080 RCX: 00007f339557ff19
[  963.737610][T14885] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 0000000000000009
[  963.745628][T14885] RBP: 00007f339639a0a0 R08: 0000000000000200 R09: 0000000000000000
[  963.753621][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  963.761607][T14885] R13: 0000000000000000 R14: 00007f3395746080 R15: 00007fffdb077ea8
[  963.769619][T14885]  </TASK>
[  963.798833][T11363] usb 3-1: Using ep0 maxpacket: 16
[  963.828290][   T11] Bluetooth: hci0: Frame reassembly failed (-84)
[  963.837644][T11363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  963.852639][   T29] audit: type=1400 audit(2000000030.771:975): avc:  denied  { name_connect } for  pid=14882 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  963.855042][T11363] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  963.926401][   T29] audit: type=1400 audit(2000000030.821:976): avc:  denied  { read } for  pid=14882 comm="syz.0.2282" lport=34821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  963.962598][   T46] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  964.049077][T11363] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  964.059583][T11363] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  964.070035][T11363] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  964.080619][T11363] usb 3-1: config 1 interface 0 has no altsetting 0
[  964.087529][T11363] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  964.104356][   T46] usb 7-1: device descriptor read/64, error -71
[  964.119090][T11363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.203340][T11363] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  964.382383][   T46] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  964.388929][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  964.489451][T14861] CIFS mount error: No usable UNC path provided in device string!
[  964.489451][T14861] 
[  964.514376][T14861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  964.545133][T14872] overlay: ./file0 is not a directory
[  964.668963][T11363] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22
[  964.685426][   T46] usb 7-1: device descriptor read/64, error -71
[  964.696323][T11363] usb 3-1: USB disconnect, device number 75
[  964.799092][   T46] usb usb7-port1: attempt power cycle
[  964.818862][ T5867] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  964.958882][ T5867] usb 1-1: device descriptor read/64, error -71
[  965.158835][   T46] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  965.179415][   T46] usb 7-1: device descriptor read/8, error -71
[  965.218812][ T5867] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  965.359058][ T5867] usb 1-1: device descriptor read/64, error -71
[  965.428880][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  965.439400][   T46] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  965.469730][   T46] usb 7-1: device descriptor read/8, error -71
[  965.479365][ T5867] usb usb1-port1: attempt power cycle
[  965.579302][   T46] usb usb7-port1: unable to enumerate USB device
[  965.630834][   T29] audit: type=1400 audit(2000000032.551:977): avc:  denied  { ioctl } for  pid=14900 comm="syz.2.2286" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  965.864301][ T5824] Bluetooth: hci0: command 0x1003 tx timeout
[  965.883972][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  966.281593][ T5867] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  966.309887][ T5867] usb 1-1: device descriptor read/8, error -71
[  966.468761][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  966.552028][ T5867] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  966.667293][ T5867] usb 1-1: device descriptor read/8, error -71
[  966.951001][ T5867] usb usb1-port1: unable to enumerate USB device
[  967.092689][T11363] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  967.278959][T11363] usb 3-1: Using ep0 maxpacket: 16
[  967.490274][T14920] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  967.508693][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  967.970688][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'.
[  968.193230][T11363] usb 3-1: unable to get BOS descriptor set
[  968.548660][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  969.183323][T11363] usb 3-1: unable to read config index 0 descriptor/start: -71
[  969.191070][T11363] usb 3-1: can't read configurations, error -71
[  969.241100][   T29] audit: type=1400 audit(2000000036.122:978): avc:  denied  { getopt } for  pid=14937 comm="syz.0.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  969.588772][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  970.628592][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  971.410086][   T29] audit: type=1400 audit(2000000038.332:979): avc:  denied  { map } for  pid=14953 comm="syz.2.2300" path="socket:[41958]" dev="sockfs" ino=41958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  971.668619][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  972.708416][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  973.498938][   T29] audit: type=1400 audit(2000000040.422:980): avc:  denied  { append } for  pid=14950 comm="syz.3.2299" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  973.643805][   T29] audit: type=1400 audit(2000000040.512:981): avc:  denied  { create } for  pid=14973 comm="syz.0.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  973.748340][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  974.788299][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  975.150292][T14992] netlink: 'syz.6.2308': attribute type 1 has an invalid length.
[  975.175581][T14992] 8021q: adding VLAN 0 to HW filter on device bond1
[  975.366687][T15003] ax25_connect(): syz.3.2312 uses autobind, please contact jreuter@yaina.de
[  975.828228][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  976.868191][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  977.908190][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  978.347492][T15018] netlink: 'syz.3.2315': attribute type 8 has an invalid length.
[  978.355377][T15018] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.2315'.
[  978.841313][   T29] audit: type=1400 audit(2000000045.762:982): avc:  denied  { execmem } for  pid=15019 comm="syz.2.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  978.877586][   T29] audit: type=1400 audit(2000000045.782:983): avc:  denied  { create } for  pid=15019 comm="syz.2.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  978.948110][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  979.016734][   T29] audit: type=1400 audit(2000000045.802:984): avc:  denied  { prog_load } for  pid=15022 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  979.037222][   T29] audit: type=1400 audit(2000000045.802:985): avc:  denied  { bpf } for  pid=15022 comm="syz.3.2316" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  979.059308][   T29] audit: type=1400 audit(2000000045.802:986): avc:  denied  { create } for  pid=15022 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  979.289719][   T29] audit: type=1400 audit(2000000045.812:987): avc:  denied  { map_create } for  pid=15022 comm="syz.3.2316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  979.522121][   T29] audit: type=1400 audit(2000000045.822:988): avc:  denied  { append } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  979.698385][   T29] audit: type=1400 audit(2000000046.002:989): avc:  denied  { read } for  pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  979.797490][   T29] audit: type=1400 audit(2000000046.002:990): avc:  denied  { search } for  pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.819308][   T29] audit: type=1400 audit(2000000046.002:991): avc:  denied  { open } for  pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  979.988008][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  980.989608][T15038] netlink: 'syz.3.2321': attribute type 1 has an invalid length.
[  981.027931][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  982.067936][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  983.107848][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  983.676920][T15068] netlink: 'syz.4.2326': attribute type 8 has an invalid length.
[  983.684785][T15068] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.2326'.
[  983.938031][   T29] kauditd_printk_skb: 42 callbacks suppressed
[  983.938047][   T29] audit: type=1400 audit(2000000050.612:1034): avc:  denied  { create } for  pid=15054 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  983.964002][   T29] audit: type=1400 audit(2000000050.612:1035): avc:  denied  { read } for  pid=15054 comm="syz.4.2326" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  983.987245][   T29] audit: type=1400 audit(2000000050.612:1036): avc:  denied  { open } for  pid=15054 comm="syz.4.2326" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  984.011708][   T29] audit: type=1400 audit(2000000050.622:1037): avc:  denied  { ioctl } for  pid=15054 comm="syz.4.2326" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  984.147832][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  984.329190][T15077] openvswitch: netlink: IPv4 tunnel dst address is zero
[  984.727832][   T29] audit: type=1400 audit(2000000051.642:1038): avc:  denied  { read } for  pid=15079 comm="syz.2.2333" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  984.866817][   T29] audit: type=1400 audit(2000000051.642:1039): avc:  denied  { open } for  pid=15079 comm="syz.2.2333" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  984.890602][   T29] audit: type=1400 audit(2000000051.642:1040): avc:  denied  { ioctl } for  pid=15079 comm="syz.2.2333" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  984.915220][    C0] vkms_vblank_simulate: vblank timer overrun
[  985.187741][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  986.102412][   T29] audit: type=1400 audit(2000000053.022:1041): avc:  denied  { create } for  pid=15086 comm="syz.2.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  986.227648][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  986.547604][   T29] audit: type=1400 audit(2000000053.292:1042): avc:  denied  { read } for  pid=15086 comm="syz.2.2335" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  986.924476][   T29] audit: type=1400 audit(2000000053.292:1043): avc:  denied  { open } for  pid=15086 comm="syz.2.2335" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  986.947618][    C0] vkms_vblank_simulate: vblank timer overrun
[  987.267683][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  988.307538][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  988.737494][ T5865] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  988.987015][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  988.987080][   T29] audit: type=1400 audit(2000000055.893:1060): avc:  denied  { read } for  pid=15125 comm="syz.6.2346" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  989.017912][   T29] audit: type=1400 audit(2000000055.893:1061): avc:  denied  { open } for  pid=15125 comm="syz.6.2346" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  989.041553][    C0] vkms_vblank_simulate: vblank timer overrun
[  989.089435][   T29] audit: type=1400 audit(2000000055.893:1062): avc:  denied  { ioctl } for  pid=15125 comm="syz.6.2346" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  989.212195][T15129] syz.4.2344: attempt to access beyond end of device
[  989.212195][T15129] loop4: rw=0, sector=2, nr_sectors = 1 limit=0
[  989.225382][T15129] hfs: can't find a HFS filesystem on dev loop4
[  989.347487][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  989.421994][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  989.659322][   T29] audit: type=1400 audit(2000000055.893:1063): avc:  denied  { create } for  pid=15125 comm="syz.6.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  989.711890][ T5865] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  989.774918][   T29] audit: type=1400 audit(2000000056.043:1064): avc:  denied  { ioctl } for  pid=15119 comm="syz.4.2344" path="socket:[44296]" dev="sockfs" ino=44296 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  989.809182][   T25] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  989.817240][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.825917][ T5865] usb 3-1: Product: syz
[  989.832699][ T5865] usb 3-1: Manufacturer: syz
[  989.839814][ T5865] usb 3-1: SerialNumber: syz
[  989.878105][   T29] audit: type=1400 audit(2000000056.053:1065): avc:  denied  { setopt } for  pid=15119 comm="syz.4.2344" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  989.899889][   T29] audit: type=1400 audit(2000000056.073:1066): avc:  denied  { module_request } for  pid=15119 comm="syz.4.2344" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  989.924243][   T29] audit: type=1400 audit(2000000056.133:1067): avc:  denied  { mounton } for  pid=15119 comm="syz.4.2344" path="/461" dev="tmpfs" ino=2492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  989.946442][    C0] vkms_vblank_simulate: vblank timer overrun
[  989.953480][   T29] audit: type=1400 audit(2000000056.193:1068): avc:  denied  { create } for  pid=15119 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  989.974763][ T5865] usb 3-1: config 0 descriptor??
[  989.977790][   T25] usb 7-1: Using ep0 maxpacket: 16
[  990.020733][   T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  990.024521][   T29] audit: type=1400 audit(2000000056.943:1069): avc:  denied  { read write } for  pid=15135 comm="syz.0.2348" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  990.367403][   T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  990.387478][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  990.387512][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.512530][   T25] usb 7-1: config 0 descriptor??
[  990.522068][   T25] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input38
[  990.558605][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2348'.
[  990.626595][T15142] FAULT_INJECTION: forcing a failure.
[  990.626595][T15142] name failslab, interval 1, probability 0, space 0, times 0
[  990.659585][T15142] CPU: 0 UID: 0 PID: 15142 Comm: syz.3.2350 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[  990.670391][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  990.680444][T15142] Call Trace:
[  990.683730][T15142]  <TASK>
[  990.686673][T15142]  dump_stack_lvl+0x16c/0x1f0
[  990.691364][T15142]  should_fail_ex+0x497/0x5b0
[  990.696067][T15142]  ? fs_reclaim_acquire+0xae/0x150
[  990.701205][T15142]  should_failslab+0xc2/0x120
[  990.705911][T15142]  kmem_cache_alloc_node_noprof+0x72/0x3c0
[  990.711752][T15142]  ? __alloc_skb+0x2b1/0x380
[  990.716370][T15142]  __alloc_skb+0x2b1/0x380
[  990.720810][T15142]  ? __pfx___alloc_skb+0x10/0x10
[  990.725796][T15142]  netlink_ack+0x15f/0xb80
[  990.730241][T15142]  ? avc_has_perm_noaudit+0x61/0x3a0
[  990.735565][T15142]  netlink_rcv_skb+0x348/0x440
[  990.740356][T15142]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  990.745858][T15142]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  990.751171][T15142]  ? bpf_lsm_capable+0x9/0x10
[  990.755862][T15142]  ? security_capable+0x7e/0x260
[  990.760816][T15142]  ? ns_capable+0xd7/0x110
[  990.765263][T15142]  nfnetlink_rcv+0x1b4/0x430
[  990.769875][T15142]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  990.774997][T15142]  ? netlink_deliver_tap+0x1ae/0xd30
[  990.780290][T15142]  netlink_unicast+0x53c/0x7f0
[  990.785054][T15142]  ? __pfx_netlink_unicast+0x10/0x10
[  990.790367][T15142]  netlink_sendmsg+0x8b8/0xd70
[  990.795136][T15142]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.800422][T15142]  ____sys_sendmsg+0xaaf/0xc90
[  990.805187][T15142]  ? copy_msghdr_from_user+0x10b/0x160
[  990.810662][T15142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  990.816290][T15142]  ___sys_sendmsg+0x135/0x1e0
[  990.820995][T15142]  ? __pfx____sys_sendmsg+0x10/0x10
[  990.826219][T15142]  ? __pfx_lock_release+0x10/0x10
[  990.831256][T15142]  ? trace_lock_acquire+0x14e/0x1f0
[  990.836469][T15142]  ? __fget_files+0x206/0x3a0
[  990.841157][T15142]  __sys_sendmsg+0x16e/0x220
[  990.845784][T15142]  ? __pfx___sys_sendmsg+0x10/0x10
[  990.850927][T15142]  do_syscall_64+0xcd/0x250
[  990.855435][T15142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.861343][T15142] RIP: 0033:0x7f898a37ff19
[  990.865786][T15142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  990.885415][T15142] RSP: 002b:00007f898b256058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  990.893850][T15142] RAX: ffffffffffffffda RBX: 00007f898a545fa0 RCX: 00007f898a37ff19
[  990.901855][T15142] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000003
[  990.909836][T15142] RBP: 00007f898b2560a0 R08: 0000000000000000 R09: 0000000000000000
[  990.917828][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.925792][T15142] R13: 0000000000000000 R14: 00007f898a545fa0 R15: 00007ffe777e3f78
[  990.933789][T15142]  </TASK>
[  990.936953][    C0] vkms_vblank_simulate: vblank timer overrun
[  991.005786][T15146] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  991.015057][T15146] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  991.023810][T15146] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  991.032582][T15146] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  991.041695][T15146] vxlan0: entered promiscuous mode
[  991.046827][T15146] vxlan0: entered allmulticast mode
[  991.149501][ T5174] bcm5974 7-1:0.0: could not read from device
[  991.228868][ T5868] usb 7-1: USB disconnect, device number 27
[  991.427477][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  991.566543][T15146] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  991.575534][T15146] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  991.584512][T15146] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  991.593743][T15146] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  991.609206][T15126] bcm5974 7-1:0.0: could not read from device
[  992.467319][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  992.709575][T15110] bcm5974 7-1:0.0: could not read from device
[  993.006753][ T5865] usb 3-1: USB disconnect, device number 78
[  993.031797][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  993.038195][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  993.074951][T15166] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2356'.
[  993.246643][T15171] binder: 15167:15171 ioctl 4018620d 0 returned -22
[  993.507231][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  994.077425][   T25] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  994.223633][   T29] kauditd_printk_skb: 25 callbacks suppressed
[  994.223651][   T29] audit: type=1400 audit(2000000061.143:1095): avc:  denied  { mount } for  pid=15176 comm="syz.2.2360" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  994.257653][   T29] audit: type=1400 audit(2000000061.153:1096): avc:  denied  { setattr } for  pid=15176 comm="syz.2.2360" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  994.289824][   T29] audit: type=1400 audit(2000000061.173:1097): avc:  denied  { read write } for  pid=15176 comm="syz.2.2360" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  994.350323][   T25] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  994.499619][   T25] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  994.547429][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  994.776879][   T25] usb 5-1: Product: syz
[  994.781963][   T29] audit: type=1400 audit(2000000061.173:1098): avc:  denied  { open } for  pid=15176 comm="syz.2.2360" path="/481/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  994.841781][   T25] usb 5-1: Manufacturer: syz
[  994.846431][   T25] usb 5-1: SerialNumber: syz
[  994.898090][   T25] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  994.928268][   T29] audit: type=1400 audit(2000000061.833:1099): avc:  denied  { unmount } for  pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  995.252589][   T29] audit: type=1400 audit(2000000062.033:1100): avc:  denied  { watch } for  pid=15189 comm="syz.6.2362" path="/202" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  995.274599][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.587156][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  995.757177][   T46] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  995.759083][   T29] audit: type=1400 audit(2000000062.673:1101): avc:  denied  { append } for  pid=15202 comm="syz.6.2367" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  995.787590][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.798734][   T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  995.810956][   T25] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  996.101070][   T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  996.112807][   T46] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  996.121962][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.130721][   T46] usb 1-1: Product: syz
[  996.134914][   T46] usb 1-1: Manufacturer: syz
[  996.139628][   T46] usb 1-1: SerialNumber: syz
[  996.146510][   T46] usb 1-1: config 0 descriptor??
[  996.596864][   T29] audit: type=1400 audit(2000000063.503:1102): avc:  denied  { map_read map_write } for  pid=15161 comm="syz.4.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  996.627079][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  996.655234][   T46] usb 5-1: USB disconnect, device number 56
[  996.780219][   T29] audit: type=1400 audit(2000000063.553:1103): avc:  denied  { ioctl } for  pid=15161 comm="syz.4.2355" path="socket:[43477]" dev="sockfs" ino=43477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  996.805173][    C0] vkms_vblank_simulate: vblank timer overrun
[  996.833262][   T29] audit: type=1400 audit(2000000063.703:1104): avc:  denied  { create } for  pid=15213 comm="syz.6.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  996.853516][    C0] vkms_vblank_simulate: vblank timer overrun
[  996.864272][T15215] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2369'.
[  997.067256][ T5867] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  997.357249][ T6211] Bluetooth: Error in BCSP hdr checksum
[  997.382444][ T5867] usb 4-1: Using ep0 maxpacket: 32
[  997.400900][ T5867] usb 4-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config
[  997.412022][ T5867] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  997.432054][ T5867] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  997.446123][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  997.464608][ T5867] usb 4-1: SerialNumber: syz
[  997.667001][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  998.547438][ T5867] usb 4-1: USB disconnect, device number 46
[  998.677586][ T5865] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  998.707045][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  998.956503][ T5865] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  998.972577][ T5865] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice=b2.0b
[  998.983248][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.108899][ T5824] Bluetooth: hci0: command 0x1003 tx timeout
[  999.116897][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  999.159834][ T5865] usb 5-1: Product: syz
[  999.164043][ T5865] usb 5-1: Manufacturer: syz
[  999.176704][ T5865] usb 5-1: SerialNumber: syz
[  999.294429][ T5865] usb 5-1: config 0 descriptor??
[  999.420148][T15241] bridge0: port 3(hsr_slave_1) entered blocking state
[  999.427638][T15241] bridge0: port 3(hsr_slave_1) entered disabled state
[  999.436589][T15241] hsr_slave_1: entered allmulticast mode
[  999.454165][T15241] hsr_slave_1: left allmulticast mode
[  999.746881][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  999.998594][  T970] usb 1-1: USB disconnect, device number 71
[ 1000.017814][ T5865] usb 5-1: USB disconnect, device number 57
[ 1000.104758][T15232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1000.127729][T15232] netlink: 'syz.3.2373': attribute type 9 has an invalid length.
[ 1000.135535][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'.
[ 1000.786916][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1001.221215][   T29] kauditd_printk_skb: 13 callbacks suppressed
[ 1001.221231][   T29] audit: type=1400 audit(2000000068.143:1118): avc:  denied  { setopt } for  pid=15243 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1001.406935][   T29] audit: type=1400 audit(2000000068.143:1119): avc:  denied  { write } for  pid=15243 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1001.596741][ T5867] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1001.621727][   T29] audit: type=1400 audit(2000000068.143:1120): avc:  denied  { connect } for  pid=15243 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1001.747020][   T29] audit: type=1400 audit(2000000068.143:1121): avc:  denied  { name_connect } for  pid=15243 comm="syz.0.2377" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[ 1001.826798][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1001.858015][ T5867] usb 7-1: config 0 has an invalid interface number: 100 but max is 0
[ 1001.866236][ T5867] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.877477][ T5867] usb 7-1: config 0 has no interface number 0
[ 1001.883980][ T5867] usb 7-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1001.993524][   T25] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[ 1002.002831][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0c7a
[ 1002.024416][ T5867] usb 7-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1002.136993][   T29] audit: type=1400 audit(2000000068.583:1122): avc:  denied  { unmount } for  pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 1002.184333][   T25] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1002.480937][   T25] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1002.499115][ T5867] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad
[ 1002.516812][   T25] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1002.534147][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.608841][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.617221][ T5867] usb 7-1: Product: syz
[ 1002.621412][ T5867] usb 7-1: Manufacturer: syz
[ 1002.626453][ T5867] usb 7-1: SerialNumber: syz
[ 1002.642225][ T5867] usb 7-1: config 0 descriptor??
[ 1002.662648][ T5867] port100 7-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint
[ 1002.776177][T15261] FAULT_INJECTION: forcing a failure.
[ 1002.776177][T15261] name failslab, interval 1, probability 0, space 0, times 0
[ 1002.866723][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1002.910680][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1002.920124][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1002.949484][T15261] CPU: 1 UID: 0 PID: 15261 Comm: syz.3.2381 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1002.960291][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1002.970358][T15261] Call Trace:
[ 1002.973620][T15261]  <TASK>
[ 1002.976549][T15261]  dump_stack_lvl+0x16c/0x1f0
[ 1002.981315][T15261]  should_fail_ex+0x497/0x5b0
[ 1002.985979][T15261]  ? fs_reclaim_acquire+0xae/0x150
[ 1002.991096][T15261]  should_failslab+0xc2/0x120
[ 1002.995798][T15261]  __kmalloc_cache_noprof+0x68/0x410
[ 1003.001095][T15261]  ? lock_acquire+0x2f/0xb0
[ 1003.005593][T15261]  ? __pfx_binder_poll+0x10/0x10
[ 1003.010526][T15261]  binder_get_thread+0x223/0x8c0
[ 1003.015484][T15261]  ? __pfx_binder_poll+0x10/0x10
[ 1003.020410][T15261]  binder_poll+0x41/0x400
[ 1003.024732][T15261]  ? __pfx_binder_poll+0x10/0x10
[ 1003.029742][T15261]  do_sys_poll+0x524/0xde0
[ 1003.034143][T15261]  ? __pfx_do_sys_poll+0x10/0x10
[ 1003.039070][T15261]  ? __pfx___lock_acquire+0x10/0x10
[ 1003.044284][T15261]  ? __pfx___pollwait+0x10/0x10
[ 1003.049167][T15261]  ? __pfx_timespec64_add_safe+0x10/0x10
[ 1003.054786][T15261]  ? ktime_get_ts64+0x2d4/0x400
[ 1003.059638][T15261]  ? set_user_sigmask+0x217/0x2a0
[ 1003.064676][T15261]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1003.070063][T15261]  __x64_sys_ppoll+0x25a/0x2d0
[ 1003.074825][T15261]  ? __pfx___x64_sys_ppoll+0x10/0x10
[ 1003.080102][T15261]  ? ksys_write+0x1ba/0x250
[ 1003.084600][T15261]  ? __pfx_ksys_write+0x10/0x10
[ 1003.089455][T15261]  do_syscall_64+0xcd/0x250
[ 1003.093956][T15261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1003.100018][T15261] RIP: 0033:0x7f898a37ff19
[ 1003.104428][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1003.124037][T15261] RSP: 002b:00007f898b256058 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[ 1003.132449][T15261] RAX: ffffffffffffffda RBX: 00007f898a545fa0 RCX: 00007f898a37ff19
[ 1003.140447][T15261] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000020000180
[ 1003.148411][T15261] RBP: 00007f898b2560a0 R08: 0000000000000000 R09: 0000000000000000
[ 1003.156460][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1003.164444][T15261] R13: 0000000000000000 R14: 00007f898a545fa0 R15: 00007ffe777e3f78
[ 1003.172434][T15261]  </TASK>
[ 1003.268674][   T29] audit: type=1400 audit(2000000070.153:1123): avc:  denied  { mount } for  pid=15252 comm="syz.0.2378" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1003.300111][   T25] usb 1-1: string descriptor 0 read error: -71
[ 1003.306965][   T25] hub 1-1:32.0: USB hub found
[ 1003.410042][   T25] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1003.698645][   T25] usb 1-1: USB disconnect, device number 72
[ 1003.883629][   T29] audit: type=1400 audit(2000000070.803:1124): avc:  denied  { unmount } for  pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 1003.903639][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1003.910077][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1003.968551][   T25] usb 7-1: USB disconnect, device number 28
[ 1004.896798][   T25] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 1004.946628][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1005.081404][ T5865] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1005.103765][   T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1005.116391][   T25] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1005.127987][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.163929][   T25] usb 7-1: Product: syz
[ 1005.182235][   T25] usb 7-1: Manufacturer: syz
[ 1005.195516][   T25] usb 7-1: SerialNumber: syz
[ 1005.451477][   T29] audit: type=1400 audit(2000000072.364:1125): avc:  denied  { setopt } for  pid=15282 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1005.477729][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1005.494101][   T25] usb 7-1: config 0 descriptor??
[ 1005.511773][   T29] audit: type=1400 audit(2000000072.424:1126): avc:  denied  { getopt } for  pid=15282 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1005.555139][ T5865] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1005.594652][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.636375][ T5865] usb 4-1: config 0 descriptor??
[ 1005.746577][ T5868] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1005.986657][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1006.243277][   T25] usb 7-1: USB disconnect, device number 29
[ 1006.260133][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.274684][ T5868] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1006.285155][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.297712][ T5868] usb 5-1: config 0 descriptor??
[ 1006.470777][   T29] audit: type=1400 audit(2000000073.314:1127): avc:  denied  { relabelfrom } for  pid=15291 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1006.501845][   T29] audit: type=1400 audit(2000000073.314:1128): avc:  denied  { relabelto } for  pid=15291 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 1006.601663][T15297] FAULT_INJECTION: forcing a failure.
[ 1006.601663][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1006.615206][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.3.2383 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1006.625988][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1006.636055][T15297] Call Trace:
[ 1006.639347][T15297]  <TASK>
[ 1006.642284][T15297]  dump_stack_lvl+0x16c/0x1f0
[ 1006.646978][T15297]  should_fail_ex+0x497/0x5b0
[ 1006.651673][T15297]  _copy_from_iter+0x2a1/0x1560
[ 1006.656544][T15297]  ? trace_lock_acquire+0x14e/0x1f0
[ 1006.661764][T15297]  ? __alloc_skb+0x1fe/0x380
[ 1006.666371][T15297]  ? __pfx__copy_from_iter+0x10/0x10
[ 1006.671677][T15297]  ? __virt_addr_valid+0x1a4/0x590
[ 1006.676821][T15297]  ? __virt_addr_valid+0x5e/0x590
[ 1006.681874][T15297]  ? __phys_addr_symbol+0x30/0x80
[ 1006.686922][T15297]  ? __check_object_size+0x488/0x710
[ 1006.692244][T15297]  netlink_sendmsg+0x813/0xd70
[ 1006.697040][T15297]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1006.702361][T15297]  ____sys_sendmsg+0xaaf/0xc90
[ 1006.707150][T15297]  ? copy_msghdr_from_user+0x10b/0x160
[ 1006.712634][T15297]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1006.717943][T15297]  ___sys_sendmsg+0x135/0x1e0
[ 1006.722640][T15297]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1006.727879][T15297]  ? __fget_files+0x206/0x3a0
[ 1006.732571][T15297]  __sys_sendmsg+0x16e/0x220
[ 1006.737192][T15297]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1006.742352][T15297]  do_syscall_64+0xcd/0x250
[ 1006.746897][T15297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1006.752820][T15297] RIP: 0033:0x7f898a37ff19
[ 1006.757268][T15297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1006.777413][T15297] RSP: 002b:00007f898b214058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1006.785845][T15297] RAX: ffffffffffffffda RBX: 00007f898a546160 RCX: 00007f898a37ff19
[ 1006.793827][T15297] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000007
[ 1006.801811][T15297] RBP: 00007f898b2140a0 R08: 0000000000000000 R09: 0000000000000000
[ 1006.809797][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1006.817776][T15297] R13: 0000000000000000 R14: 00007f898a546160 R15: 00007ffe777e3f78
[ 1006.825769][T15297]  </TASK>
[ 1007.026472][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1008.066524][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1009.106370][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1009.687019][ T5865] usbhid 4-1:0.0: can't add hid device: -71
[ 1009.693123][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1009.849404][   T29] audit: type=1400 audit(2000000076.774:1129): avc:  denied  { setopt } for  pid=15310 comm="syz.0.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1009.915871][ T5865] usb 4-1: USB disconnect, device number 47
[ 1010.146315][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1010.902226][   T29] audit: type=1400 audit(2000000077.124:1130): avc:  denied  { getopt } for  pid=15317 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1011.186265][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1011.529031][ T5830] Bluetooth: hci6: unexpected event for opcode 0x0c7a
[ 1012.070407][ T5868] usbhid 5-1:0.0: can't add hid device: -32
[ 1012.143935][   T29] audit: type=1400 audit(2000000079.064:1131): avc:  denied  { bind } for  pid=15331 comm="syz.3.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1012.191537][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 1012.226348][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1012.257876][ T5868] usb 5-1: USB disconnect, device number 58
[ 1012.353046][   T29] audit: type=1400 audit(2000000079.274:1132): avc:  denied  { create } for  pid=15337 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1012.406310][ T5865] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1012.551845][   T29] audit: type=1400 audit(2000000079.444:1133): avc:  denied  { write } for  pid=15335 comm="syz.4.2405" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1013.081626][   T29] audit: type=1400 audit(2000000079.594:1134): avc:  denied  { write } for  pid=15337 comm="syz.0.2402" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1013.121229][   T29] audit: type=1400 audit(2000000079.604:1135): avc:  denied  { create } for  pid=15337 comm="syz.0.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 1013.238519][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1013.251492][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.266168][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1013.294419][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1013.307920][ T5865] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1013.322394][   T29] audit: type=1400 audit(2000000080.244:1136): avc:  denied  { setopt } for  pid=15348 comm="syz.6.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1013.350282][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.378292][ T5865] usb 4-1: config 0 descriptor??
[ 1013.399545][   T29] audit: type=1400 audit(2000000080.244:1137): avc:  denied  { create } for  pid=15348 comm="syz.6.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1013.419522][   T29] audit: type=1400 audit(2000000080.294:1138): avc:  denied  { create } for  pid=15349 comm="syz.2.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1013.440844][   T29] audit: type=1400 audit(2000000080.304:1139): avc:  denied  { write } for  pid=15349 comm="syz.2.2406" path="socket:[44930]" dev="sockfs" ino=44930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[ 1014.030353][ T5865] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[ 1014.306106][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1014.406653][T15365] overlayfs: missing 'lowerdir'
[ 1014.423658][ T5865] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1014.679791][ T9450] usb 4-1: USB disconnect, device number 48
[ 1014.796181][ T5868] usb 7-1: new low-speed USB device number 30 using dummy_hcd
[ 1014.947669][ T5868] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1014.960675][ T5868] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1014.970625][ T5868] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1014.979849][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.213757][ T5868] usb 7-1: string descriptor 0 read error: -71
[ 1015.235635][ T5868] hub 7-1:32.0: USB hub found
[ 1015.251394][ T5868] hub 7-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1015.311827][ T5868] usb 7-1: USB disconnect, device number 30
[ 1015.346335][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1015.566088][   T29] audit: type=1400 audit(2000000082.484:1140): avc:  denied  { getopt } for  pid=15376 comm="syz.3.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1016.046011][ T5868] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1016.151949][T15389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.168461][T15389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.219824][T15386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[ 1016.237369][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1016.262030][ T5868] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1016.280990][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.299198][ T5868] usb 1-1: Product: syz
[ 1016.311456][ T5868] usb 1-1: Manufacturer: syz
[ 1016.324165][ T5868] usb 1-1: SerialNumber: syz
[ 1016.333320][ T5868] usb 1-1: config 0 descriptor??
[ 1016.386035][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1016.393171][ T5865] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1016.555973][ T5865] usb 4-1: Using ep0 maxpacket: 16
[ 1016.567158][ T5865] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1017.157870][ T5865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1017.169282][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.177391][ T5865] usb 4-1: Product: syz
[ 1017.181938][ T5865] usb 4-1: Manufacturer: syz
[ 1017.190226][ T5865] usb 4-1: SerialNumber: syz
[ 1017.426068][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1018.113497][ T5865] cdc_ncm 4-1:1.0: bind() failure
[ 1018.121439][ T5865] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1018.128342][ T5865] cdc_ncm 4-1:1.1: bind() failure
[ 1018.148902][ T5865] usb 4-1: USB disconnect, device number 49
[ 1018.200755][ T5868] usb 1-1: USB disconnect, device number 73
[ 1018.465834][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1019.505887][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1019.746697][T15416] xt_CT: No such helper "pptp"
[ 1020.545798][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1021.585667][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1021.789429][T15430] syz.2.2424: attempt to access beyond end of device
[ 1021.789429][T15430] loop2: rw=0, sector=2, nr_sectors = 1 limit=0
[ 1021.802707][T15430] hfs: can't find a HFS filesystem on dev loop2
[ 1022.082176][T15434] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2427'.
[ 1022.144004][T15434] 0ªX¹¦À: renamed from caif0
[ 1022.300230][T15434] 0ªX¹¦À: entered allmulticast mode
[ 1022.335261][T15434] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 1022.383999][T15439] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2427'.
[ 1022.385251][   T29] kauditd_printk_skb: 7 callbacks suppressed
[ 1022.385308][   T29] audit: type=1400 audit(2000000089.304:1148): avc:  denied  { setopt } for  pid=15441 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1022.405705][T15439] 1ªX¹¦À: renamed from 
60ªX¹¦À
[ 1022.510931][   T29] audit: type=1400 audit(2000000089.355:1149): avc:  denied  { write } for  pid=15441 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1022.538094][   T29] audit: type=1400 audit(2000000089.355:1150): avc:  denied  { read } for  pid=15441 comm="syz.2.2428" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1022.565067][   T29] audit: type=1400 audit(2000000089.365:1151): avc:  denied  { connect } for  pid=15441 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1022.584621][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1022.592628][   T29] audit: type=1400 audit(2000000089.375:1152): avc:  denied  { read append } for  pid=15441 comm="syz.2.2428" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1022.618048][T15439] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 1022.619629][   T29] audit: type=1400 audit(2000000089.375:1153): avc:  denied  { open } for  pid=15441 comm="syz.2.2428" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1022.633888][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1022.658165][   T29] audit: type=1800 audit(2000000089.425:1154): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2426" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1022.696515][   T29] audit: type=1400 audit(2000000089.445:1155): avc:  denied  { write } for  pid=15441 comm="syz.2.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1022.724051][   T29] audit: type=1804 audit(2000000089.455:1156): pid=15440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2426" name="SYSV00000000" dev="hugetlbfs" ino=0 res=1 errno=0
[ 1022.729069][T15442] 9pnet_fd: Insufficient options for proto=fd
[ 1022.752364][   T29] audit: type=1804 audit(2000000089.455:1157): pid=15440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2426" name="SYSV00000000" dev="hugetlbfs" ino=0 res=1 errno=0
[ 1023.096043][   T46] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1023.305635][   T46] usb 4-1: Using ep0 maxpacket: 16
[ 1023.313882][   T46] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[ 1023.365530][   T46] usb 4-1: config 0 has no interface number 0
[ 1023.371674][   T46] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=f5.8a
[ 1023.415361][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.457513][   T46] usb 4-1: config 0 descriptor??
[ 1023.665576][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1023.704728][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1023.716099][T15462] netlink: 'syz.4.2434': attribute type 9 has an invalid length.
[ 1023.723888][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2434'.
[ 1024.705486][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1025.745467][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1025.779735][   T46] usb 4-1: string descriptor 0 read error: -71
[ 1025.786596][ T9450] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 1026.098982][   T46] powermate 4-1:0.120: probe with driver powermate failed with error -22
[ 1026.111345][   T46] usb 4-1: USB disconnect, device number 50
[ 1026.317499][ T9450] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1026.330151][ T9450] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1026.339924][ T9450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.348090][ T5867] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1026.361116][ T9450] usb 7-1: Product: syz
[ 1026.366998][ T9450] usb 7-1: Manufacturer: syz
[ 1026.371630][ T9450] usb 7-1: SerialNumber: syz
[ 1026.383784][ T9450] usb 7-1: config 0 descriptor??
[ 1026.455462][ T5902] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1026.490117][   T46] usb 7-1: USB disconnect, device number 31
[ 1026.525751][ T5867] usb 1-1: Using ep0 maxpacket: 8
[ 1026.532599][ T5867] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1026.548085][ T5867] usb 1-1: config 179 has no interface number 0
[ 1026.554621][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1026.567304][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1026.621124][ T5902] usb 3-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00
[ 1026.676659][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.785391][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1026.810747][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1027.020222][ T5902] usb 3-1: config 0 descriptor??
[ 1027.033514][ T5902] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 1027.041716][ T5867] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1027.056017][ T5902] usb 3-1: Detected FT232B
[ 1027.062163][ T5867] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1027.072544][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.094064][T15466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1027.705829][ T5868] usb 1-1: USB disconnect, device number 74
[ 1027.825319][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1027.906825][T15491] FAULT_INJECTION: forcing a failure.
[ 1027.906825][T15491] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1027.909245][   T29] kauditd_printk_skb: 3 callbacks suppressed
[ 1027.909262][   T29] audit: type=1400 audit(2000000094.835:1161): avc:  denied  { ioctl } for  pid=15490 comm="syz.4.2443" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45183 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1027.921059][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.4.2443 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1027.963548][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1027.973630][T15491] Call Trace:
[ 1027.976925][T15491]  <TASK>
[ 1027.979871][T15491]  dump_stack_lvl+0x16c/0x1f0
[ 1027.984008][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1027.984556][T15491]  should_fail_ex+0x497/0x5b0
[ 1027.993473][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1027.997530][T15491]  ? fs_reclaim_acquire+0xae/0x150
[ 1028.010407][T15491]  should_fail_alloc_page+0xe7/0x130
[ 1028.015727][T15491]  prepare_alloc_pages.constprop.0+0x16f/0x560
[ 1028.021936][T15491]  __alloc_pages_noprof+0x190/0x25b0
[ 1028.027262][T15491]  ? lock_acquire.part.0+0x11b/0x380
[ 1028.032584][T15491]  ? __pfx___alloc_pages_noprof+0x10/0x10
[ 1028.038331][T15491]  ? __mutex_trylock_common+0xea/0x250
[ 1028.043813][T15491]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1028.049739][T15491]  ? rcu_is_watching+0x12/0xc0
[ 1028.054525][T15491]  ? trace_contention_end+0xee/0x140
[ 1028.059833][T15491]  ? __mutex_lock+0x1cc/0xa60
[ 1028.064525][T15491]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1028.070450][T15491]  ? policy_nodemask+0xea/0x4e0
[ 1028.075343][T15491]  alloc_pages_mpol_noprof+0x2c9/0x610
[ 1028.080848][T15491]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[ 1028.086865][T15491]  pipe_write+0xe38/0x1b30
[ 1028.091323][T15491]  ? __pfx_pipe_write+0x10/0x10
[ 1028.096203][T15491]  ? selinux_file_permission+0x11f/0x580
[ 1028.101862][T15491]  ? bpf_lsm_file_permission+0x9/0x10
[ 1028.107267][T15491]  ? security_file_permission+0x71/0x210
[ 1028.110116][ T5902] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1028.112912][T15491]  vfs_write+0x5ae/0x1150
[ 1028.112941][T15491]  ? __pfx_pipe_write+0x10/0x10
[ 1028.112966][T15491]  ? __pfx_vfs_write+0x10/0x10
[ 1028.112988][T15491]  ? __fget_files+0x40/0x3a0
[ 1028.130566][ T5902] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1028.133723][T15491]  ksys_write+0x207/0x250
[ 1028.149036][ T5902] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1028.149442][T15491]  ? __pfx_ksys_write+0x10/0x10
[ 1028.162318][T15491]  do_syscall_64+0xcd/0x250
[ 1028.166785][ T5902] usb 3-1: USB disconnect, device number 79
[ 1028.166848][T15491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.178620][T15491] RIP: 0033:0x7f331977ff19
[ 1028.183080][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1028.186178][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1028.202952][T15491] RSP: 002b:00007f331a5b8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1028.202979][T15491] RAX: ffffffffffffffda RBX: 00007f3319945fa0 RCX: 00007f331977ff19
[ 1028.202992][T15491] RDX: 00000000fffffecc RSI: 0000000020000000 RDI: 0000000000000005
[ 1028.203005][T15491] RBP: 00007f331a5b80a0 R08: 0000000000000000 R09: 0000000000000000
[ 1028.203018][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.203031][T15491] R13: 0000000000000000 R14: 00007f3319945fa0 R15: 00007fff6bc1a1a8
[ 1028.203056][T15491]  </TASK>
[ 1028.203165][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1028.249690][ T5902] ftdi_sio 3-1:0.0: device disconnected
[ 1028.252691][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1028.351196][T15497] FAULT_INJECTION: forcing a failure.
[ 1028.351196][T15497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1028.364506][T15497] CPU: 1 UID: 0 PID: 15497 Comm: syz.3.2441 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1028.375288][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1028.385353][T15497] Call Trace:
[ 1028.388634][T15497]  <TASK>
[ 1028.391567][T15497]  dump_stack_lvl+0x16c/0x1f0
[ 1028.396266][T15497]  should_fail_ex+0x497/0x5b0
[ 1028.400980][T15497]  _copy_from_user+0x2e/0xd0
[ 1028.405593][T15497]  do_hidp_sock_ioctl.constprop.0+0x175/0x520
[ 1028.411671][T15497]  ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10
[ 1028.418331][T15497]  sock_do_ioctl+0x116/0x280
[ 1028.422938][T15497]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1028.428068][T15497]  ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460
[ 1028.434583][T15497]  ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460
[ 1028.441100][T15497]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1028.447981][T15497]  sock_ioctl+0x228/0x6c0
[ 1028.452334][T15497]  ? __pfx_sock_ioctl+0x10/0x10
[ 1028.457210][T15497]  ? selinux_file_ioctl+0x180/0x270
[ 1028.462425][T15497]  ? selinux_file_ioctl+0xb4/0x270
[ 1028.467557][T15497]  ? __pfx_sock_ioctl+0x10/0x10
[ 1028.472425][T15497]  __x64_sys_ioctl+0x190/0x200
[ 1028.477214][T15497]  do_syscall_64+0xcd/0x250
[ 1028.481733][T15497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.487638][T15497] RIP: 0033:0x7f898a37ff19
[ 1028.492059][T15497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1028.511682][T15497] RSP: 002b:00007f898b214058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1028.520127][T15497] RAX: ffffffffffffffda RBX: 00007f898a546160 RCX: 00007f898a37ff19
[ 1028.528114][T15497] RDX: 0000000020000080 RSI: 00000000400448c9 RDI: 0000000000000009
[ 1028.536099][T15497] RBP: 00007f898b2140a0 R08: 0000000000000000 R09: 0000000000000000
[ 1028.544085][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.552071][T15497] R13: 0000000000000000 R14: 00007f898a546160 R15: 00007ffe777e3f78
[ 1028.560069][T15497]  </TASK>
[ 1028.805985][T15505] binder: 15498:15505 ioctl 4018620d 0 returned -22
[ 1028.857334][   T46] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1028.865245][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1029.246838][ T5867] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1029.297955][   T46] usb 4-1: Using ep0 maxpacket: 8
[ 1029.332678][   T46] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1029.345620][   T46] usb 4-1: config 179 has no interface number 0
[ 1029.450322][   T46] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1029.492161][   T46] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1029.517528][   T46] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1029.588559][   T46] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1029.607746][   T46] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1029.623678][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.635298][ T5867] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1029.644840][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.697569][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.713004][ T5867] usb 1-1: config 0 descriptor??
[ 1029.719661][T15497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1029.905235][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1029.977503][   T29] audit: type=1400 audit(2000000000.220:1162): avc:  denied  { getopt } for  pid=15500 comm="syz.0.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1030.019479][ T5867] usbhid 1-1:0.0: can't add hid device: -71
[ 1030.025859][ T5867] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1030.047281][   T29] audit: type=1400 audit(2000000000.280:1163): avc:  denied  { read write } for  pid=15510 comm="syz.2.2446" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1030.080967][ T5867] usb 1-1: USB disconnect, device number 75
[ 1030.106393][   T29] audit: type=1400 audit(2000000000.280:1164): avc:  denied  { open } for  pid=15510 comm="syz.2.2446" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1030.129996][   T29] audit: type=1400 audit(2000000000.280:1165): avc:  denied  { ioctl } for  pid=15510 comm="syz.2.2446" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[ 1030.824250][   T29] audit: type=1400 audit(2000000001.060:1166): avc:  denied  { write } for  pid=15528 comm="syz.2.2452" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1030.851097][   T29] audit: type=1400 audit(2000000001.060:1167): avc:  denied  { ioctl } for  pid=15528 comm="syz.2.2452" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1030.895204][ T5865] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 1030.945311][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1030.992384][   T29] audit: type=1400 audit(2000000001.230:1168): avc:  denied  { listen } for  pid=15531 comm="syz.4.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1031.096776][ T5865] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1031.111950][   T46] usb 4-1: USB disconnect, device number 51
[ 1031.147946][ T5865] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1031.185547][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.195237][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2456'.
[ 1031.211601][ T5865] usb 7-1: Product: syz
[ 1031.223461][ T5865] usb 7-1: Manufacturer: syz
[ 1031.308515][ T5865] usb 7-1: SerialNumber: syz
[ 1031.349429][ T5865] usb 7-1: config 0 descriptor??
[ 1031.425667][   T29] audit: type=1400 audit(2000000001.660:1169): avc:  denied  { mounton } for  pid=15537 comm="syz.3.2455" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[ 1031.449589][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1031.455943][   T29] audit: type=1400 audit(2000000001.660:1170): avc:  denied  { mount } for  pid=15537 comm="syz.3.2455" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1031.985085][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1032.419706][ T5824] Bluetooth: hci0: sending frame failed (-49)
[ 1032.484564][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -49
[ 1032.600697][T15553] ax25_connect(): syz.0.2457 uses autobind, please contact jreuter@yaina.de
[ 1032.969607][   T29] kauditd_printk_skb: 5 callbacks suppressed
[ 1032.969622][   T29] audit: type=1400 audit(2000000003.210:1176): avc:  denied  { create } for  pid=15554 comm="syz.2.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1033.025720][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1033.027953][   T29] audit: type=1400 audit(2000000003.270:1177): avc:  denied  { execute } for  pid=15554 comm="syz.2.2460" name="file0" dev="tmpfs" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1033.083722][   T29] audit: type=1400 audit(2000000003.270:1178): avc:  denied  { execute_no_trans } for  pid=15554 comm="syz.2.2460" path="/503/file0" dev="tmpfs" ino=2692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1033.234684][ T5867] usb 7-1: USB disconnect, device number 32
[ 1033.249183][   T29] audit: type=1400 audit(2000000003.320:1179): avc:  denied  { name_bind } for  pid=15554 comm="syz.2.2460" src=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[ 1033.500037][ T5830] Bluetooth: hci4: unexpected event for opcode 0x0c7a
[ 1034.064967][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1034.424319][   T29] audit: type=1400 audit(2000000004.660:1180): avc:  denied  { write } for  pid=15568 comm="syz.0.2464" name="igmp" dev="proc" ino=4026532976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1034.663928][T15576] autofs: Unknown parameter 'dx	Device    : Count Querier	Group    Users Time'
[ 1035.104911][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1035.430252][   T29] audit: type=1400 audit(2000000005.620:1181): avc:  denied  { mount } for  pid=15581 comm="syz.6.2467" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1035.452076][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.458627][   T29] audit: type=1400 audit(2000000005.660:1182): avc:  denied  { unmount } for  pid=11258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1035.494241][T15569] syz.0.2464: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[ 1035.559212][T15569] CPU: 1 UID: 0 PID: 15569 Comm: syz.0.2464 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1035.570036][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1035.580114][T15569] Call Trace:
[ 1035.583410][T15569]  <TASK>
[ 1035.586357][T15569]  dump_stack_lvl+0x16c/0x1f0
[ 1035.591055][T15569]  warn_alloc+0x24d/0x3a0
[ 1035.595405][T15569]  ? __pfx_warn_alloc+0x10/0x10
[ 1035.600286][T15569]  ? __get_vm_area_node+0x1b0/0x2f0
[ 1035.605495][T15569]  ? __get_vm_area_node+0x1dc/0x2f0
[ 1035.610720][T15569]  __vmalloc_node_range_noprof+0x1105/0x1530
[ 1035.616732][T15569]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[ 1035.621871][T15569]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1035.628222][T15569]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[ 1035.633348][T15569]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 1035.638827][T15569]  vmalloc_user_noprof+0x6b/0x90
[ 1035.643782][T15569]  ? vb2_vmalloc_alloc+0x11e/0x3d0
[ 1035.648915][T15569]  vb2_vmalloc_alloc+0x11e/0x3d0
[ 1035.653854][T15569]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 1035.659309][T15569]  __vb2_queue_alloc+0x896/0x1230
[ 1035.664348][T15569]  vb2_core_reqbufs+0xa73/0xfb0
[ 1035.669205][T15569]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 1035.674571][T15569]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1035.680469][T15569]  ? trace_lock_acquire+0x14e/0x1f0
[ 1035.685677][T15569]  ? __video_do_ioctl+0x4a2/0xf00
[ 1035.690708][T15569]  ? trace_contention_end+0xee/0x140
[ 1035.695991][T15569]  ? __mutex_lock+0x1cc/0xa60
[ 1035.700668][T15569]  vb2_reqbufs+0x1a5/0x1f0
[ 1035.705087][T15569]  ? __pfx_vb2_reqbufs+0x10/0x10
[ 1035.710023][T15569]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1035.715915][T15569]  v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0
[ 1035.721203][T15569]  v4l_reqbufs+0x14c/0x1e0
[ 1035.725718][T15569]  __video_do_ioctl+0xaf0/0xf00
[ 1035.730587][T15569]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1035.735964][T15569]  ? __might_fault+0xe3/0x190
[ 1035.740656][T15569]  video_usercopy+0x4d2/0x1620
[ 1035.745427][T15569]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1035.750806][T15569]  ? __pfx_video_usercopy+0x10/0x10
[ 1035.756023][T15569]  v4l2_ioctl+0x1ba/0x250
[ 1035.760358][T15569]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1035.765209][T15569]  __x64_sys_ioctl+0x190/0x200
[ 1035.769990][T15569]  do_syscall_64+0xcd/0x250
[ 1035.774504][T15569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1035.780395][T15569] RIP: 0033:0x7f339557ff19
[ 1035.784808][T15569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1035.804433][T15569] RSP: 002b:00007f33963bb058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1035.813023][T15569] RAX: ffffffffffffffda RBX: 00007f3395745fa0 RCX: 00007f339557ff19
[ 1035.820986][T15569] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000004
[ 1035.828964][T15569] RBP: 00007f33955f3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 1035.836928][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1035.844890][T15569] R13: 0000000000000000 R14: 00007f3395745fa0 R15: 00007fffdb077ea8
[ 1035.852882][T15569]  </TASK>
[ 1035.858513][T15569] Mem-Info:
[ 1035.859543][   T29] audit: type=1400 audit(2000000006.100:1183): avc:  denied  { open } for  pid=15579 comm="syz.3.2466" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1035.861634][T15569] active_anon:11847 inactive_anon:0 isolated_anon:0
[ 1035.861634][T15569]  active_file:22041 inactive_file:38853 isolated_file:0
[ 1035.861634][T15569]  unevictable:769 dirty:202 writeback:0
[ 1035.861634][T15569]  slab_reclaimable:11782 slab_unreclaimable:104458
[ 1035.861634][T15569]  mapped:37301 shmem:7794 pagetables:1242
[ 1035.861634][T15569]  sec_pagetables:0 bounce:0
[ 1035.861634][T15569]  kernel_misc_reclaimable:0
[ 1035.861634][T15569]  free:1293348 free_pcp:3756 free_cma:0
[ 1035.885281][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.080780][T15569] Node 0 active_anon:44864kB inactive_anon:0kB active_file:88164kB inactive_file:155340kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:149180kB dirty:840kB writeback:0kB shmem:27132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11436kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no
[ 1036.113209][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.144877][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1036.337280][T15569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1036.367546][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1036.565013][T15569] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1036.608743][T15569] lowmem_reserve[]: 0 2459 2459 0 0
[ 1036.614047][T15569] Node 0 DMA32 free:1258612kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:47560kB inactive_anon:0kB active_file:88164kB inactive_file:155240kB unevictable:1540kB writepending:884kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:5824kB local_pcp:5076kB free_cma:0kB
[ 1036.644424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.064514][T15569] lowmem_reserve[]: 0 0 0 0 0
[ 1037.146011][T15569] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 1037.172721][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1037.184791][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1037.293275][T15569] lowmem_reserve[]: 0 0 0 0 0
[ 1037.382529][T15569] Node 1 Normal free:3906792kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1037.413859][T15569] lowmem_reserve[]: 0 0 0 0 0
[ 1037.418968][T15569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1037.434372][T15569] Node 0 DMA32: 305*4kB (UME) 671*8kB (UM) 360*16kB (UME) 224*32kB (UME) 330*64kB (UME) 162*128kB (UME) 104*256kB (UME) 55*512kB (UME) 38*1024kB (UME) 15*2048kB (UM) 263*4096kB (UM) = 1263036kB
[ 1037.463150][T15569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1037.574918][T15569] Node 1 Normal: 170*4kB (UME) 48*8kB (UME) 46*16kB (UME) 201*32kB (UME) 85*64kB (UME) 29*128kB (UME) 17*256kB (UME) 12*512kB (UM) 4*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3906792kB
[ 1037.596893][T15569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1037.620920][T15569] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1037.640968][T15569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1037.651127][T15569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1037.660534][T15569] 69689 total pagecache pages
[ 1037.665641][T15569] 0 pages in swap cache
[ 1037.669807][T15569] Free swap  = 124416kB
[ 1037.674144][T15569] Total swap = 124996kB
[ 1037.678477][T15569] 2097051 pages RAM
[ 1037.682315][T15569] 0 pages HighMem/MovableOnly
[ 1037.687051][T15569] 428606 pages reserved
[ 1037.691584][T15569] 0 pages cma reserved
[ 1037.695918][  T970] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1038.025088][  T970] usb 5-1: device descriptor read/64, error -71
[ 1038.224761][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1038.264826][  T970] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1038.404711][  T970] usb 5-1: device descriptor read/64, error -71
[ 1038.616336][  T970] usb usb5-port1: attempt power cycle
[ 1038.954781][  T970] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1038.987285][  T970] usb 5-1: device descriptor read/8, error -71
[ 1039.264670][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1039.344821][  T970] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1039.379253][  T970] usb 5-1: device descriptor read/8, error -71
[ 1039.505072][  T970] usb usb5-port1: unable to enumerate USB device
[ 1039.603104][   T29] audit: type=1400 audit(2000000009.840:1184): avc:  denied  { write } for  pid=15618 comm="syz.3.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1039.658525][   T29] audit: type=1400 audit(2000000009.900:1185): avc:  denied  { read } for  pid=15618 comm="syz.3.2477" path="socket:[45488]" dev="sockfs" ino=45488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1040.304633][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1041.344600][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1041.847284][T15644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1041.860910][T15644] netlink: 'syz.4.2483': attribute type 9 has an invalid length.
[ 1041.872133][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2483'.
[ 1041.968585][  T970] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[ 1042.190346][  T970] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1042.284496][  T970] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.325769][  T970] usb 7-1: config 0 descriptor??
[ 1042.384528][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1043.424458][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1043.443154][T15668] binder: 15665:15668 ioctl 4018620d 0 returned -22
[ 1044.325818][   T29] audit: type=1400 audit(2000000013.610:1186): avc:  denied  { create } for  pid=15648 comm="syz.6.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1044.347017][   T29] audit: type=1400 audit(2000000013.610:1187): avc:  denied  { setopt } for  pid=15648 comm="syz.6.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1044.439102][  T970] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[ 1044.464397][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1044.504431][  T970] [drm] Initialized udl on minor 2
[ 1044.707540][  T970] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1044.729101][  T970] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 1044.742382][ T5865] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1044.760007][  T970] usb 7-1: USB disconnect, device number 33
[ 1044.767525][ T5865] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[ 1045.504361][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1046.254813][ T5867] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1046.404354][ T5902] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 1046.426102][ T5867] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[ 1046.442168][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.458061][ T5867] usb 3-1: config 0 has no interface number 0
[ 1046.464721][ T5867] usb 3-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1046.498140][ T5867] usb 3-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1046.544302][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1046.685330][ T5867] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad
[ 1046.694540][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.702556][ T5867] usb 3-1: Product: syz
[ 1046.706879][ T5867] usb 3-1: Manufacturer: syz
[ 1046.711496][ T5867] usb 3-1: SerialNumber: syz
[ 1046.718503][ T5902] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1046.728998][ T5867] usb 3-1: config 0 descriptor??
[ 1046.734605][ T5902] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1046.744530][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.752558][ T5902] usb 7-1: Product: syz
[ 1046.754395][  T970] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1046.756950][ T5902] usb 7-1: Manufacturer: syz
[ 1046.769548][ T5902] usb 7-1: SerialNumber: syz
[ 1046.770335][ T5867] port100 3-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint
[ 1046.795747][ T5902] usb 7-1: config 0 descriptor??
[ 1046.926027][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1046.952836][  T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.984181][  T970] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1046.993352][  T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.015182][  T970] usb 5-1: config 0 descriptor??
[ 1047.032593][T15680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1047.041459][T15680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.584216][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1047.679594][  T970] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0
[ 1047.887294][ T5865] usb 7-1: USB disconnect, device number 34
[ 1048.422391][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.434534][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.573159][  T970] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device
[ 1048.581224][  T970] pyra 0003:1E7D:2CF6.000C: couldn't install mouse
[ 1048.605457][  T970] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71
[ 1048.614234][ T5865] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1048.624246][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1048.632228][  T970] usb 5-1: USB disconnect, device number 63
[ 1048.650593][ T5902] usb 3-1: USB disconnect, device number 80
[ 1048.654181][ T5868] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1048.881834][T15716] binder: 15713:15716 ioctl 4018620d 0 returned -22
[ 1049.664093][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1049.774610][ T5868] usb 1-1: Using ep0 maxpacket: 32
[ 1049.779966][ T5865] usb 4-1: Using ep0 maxpacket: 8
[ 1049.786943][ T5868] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1049.876407][ T5868] usb 1-1: config 0 has no interface number 0
[ 1049.882979][ T5868] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1049.894282][ T5868] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1049.906700][ T5868] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1049.918556][ T5868] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1049.929894][ T5868] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1049.941847][ T5868] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1049.951939][ T5868] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1049.962138][ T5868] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024
[ 1049.973628][ T5868] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1049.984290][ T5868] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1050.003868][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1050.013032][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.022002][ T5865] usb 4-1: Product: syz
[ 1050.034861][ T5865] usb 4-1: Manufacturer: syz
[ 1050.050528][ T5865] usb 4-1: SerialNumber: syz
[ 1050.050658][ T5868] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1050.704071][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1050.713647][ T5865] usb 4-1: config 0 descriptor??
[ 1050.718706][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.726940][ T5868] usb 1-1: Product: syz
[ 1050.731184][ T5868] usb 1-1: Manufacturer: syz
[ 1050.736265][ T5868] usb 1-1: SerialNumber: syz
[ 1050.751405][ T5868] usb 1-1: config 0 descriptor??
[ 1050.763850][T15709] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[ 1050.771242][T15709] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[ 1050.800598][ T5868] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1050.823970][ T5868] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1050.918597][   T29] audit: type=1400 audit(2000000002.190:1188): avc:  denied  { wake_alarm } for  pid=15731 comm="syz.2.2507" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1051.054700][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.055805][ T5868] scsi host1: microtekX6
[ 1051.074313][ T5865] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1051.093748][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.143334][   T29] audit: type=1400 audit(2000000002.410:1189): avc:  denied  { read write } for  pid=15742 comm="syz.2.2510" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1051.150396][ T9450] usb 1-1: USB disconnect, device number 76
[ 1051.167501][   T98] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1051.181589][   T29] audit: type=1400 audit(2000000002.410:1190): avc:  denied  { open } for  pid=15742 comm="syz.2.2510" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[ 1051.283470][   T98] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1051.445350][   T10] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1051.744081][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1052.074165][ T5902] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1052.094532][   T46] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1052.383958][   T46] usb 3-1: Using ep0 maxpacket: 32
[ 1052.391048][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1052.402895][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1052.413406][   T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1052.422776][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1052.431779][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1052.443579][   T46] usb 3-1: config 0 descriptor??
[ 1052.450318][ T5902] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1052.459443][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.468420][   T46] hub 3-1:0.0: USB hub found
[ 1052.473153][ T5902] usb 5-1: Product: syz
[ 1052.478098][ T5902] usb 5-1: Manufacturer: syz
[ 1052.482753][ T5902] usb 5-1: SerialNumber: syz
[ 1052.489660][ T5902] usb 5-1: config 0 descriptor??
[ 1052.494087][    T8] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 1052.653922][    T8] usb 7-1: Using ep0 maxpacket: 32
[ 1052.665881][    T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.676726][    T8] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1052.688706][    T8] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1052.698891][    T8] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1052.710317][    T8] usb 7-1: config 1 interface 1 has no altsetting 0
[ 1052.770006][    T8] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1052.784973][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1052.847677][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.970442][    T8] usb 7-1: Product: syz
[ 1052.974735][    T8] usb 7-1: Manufacturer: syz
[ 1052.979378][    T8] usb 7-1: SerialNumber: syz
[ 1053.373890][   T29] audit: type=1400 audit(2000000001.230:1191): avc:  denied  { connect } for  pid=15758 comm="syz.6.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1053.393589][   T29] audit: type=1400 audit(2000000001.230:1192): avc:  denied  { connect } for  pid=15753 comm="syz.2.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1053.529464][    T8] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1053.537493][    T8] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1053.659492][ T5865] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1053.672662][ T5868] usb 5-1: USB disconnect, device number 64
[ 1053.823911][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1054.237878][ T5865] usb 4-1: USB disconnect, device number 52
[ 1054.358563][    T8] usb 7-1: USB disconnect, device number 35
[ 1054.477191][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.485439][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.636248][T15052] udevd[15052]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1054.794709][   T29] audit: type=1400 audit(2000000002.650:1193): avc:  denied  { read } for  pid=15794 comm="syz.6.2518" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1054.863853][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1055.023976][   T29] audit: type=1400 audit(2000000002.650:1194): avc:  denied  { open } for  pid=15794 comm="syz.6.2518" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1055.446957][   T46] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1055.474979][   T46] usbhid 3-1:0.0: can't add hid device: -71
[ 1055.482230][   T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1055.623822][   T46] usb 3-1: USB disconnect, device number 81
[ 1055.629894][   T29] audit: type=1400 audit(2000000003.480:1195): avc:  denied  { read } for  pid=15803 comm="syz.3.2520" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1055.903856][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1056.429626][T15819] ax25_connect(): syz.6.2523 uses autobind, please contact jreuter@yaina.de
[ 1056.943908][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1057.666204][ T5830] Bluetooth: hci3: unexpected event for opcode 0x0c7a
[ 1057.983685][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1058.072930][   T29] audit: type=1400 audit(2000000000.670:1196): avc:  denied  { create } for  pid=15826 comm="syz.0.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1058.203473][   T29] audit: type=1400 audit(2000000000.800:1197): avc:  denied  { bind } for  pid=15826 comm="syz.0.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1058.325378][   T29] audit: type=1400 audit(2000000000.800:1198): avc:  denied  { write } for  pid=15826 comm="syz.0.2527" path="socket:[46846]" dev="sockfs" ino=46846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1059.023602][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1059.433377][   T29] audit: type=1326 audit(2000000002.030:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.3.2532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898a37ff19 code=0x0
[ 1059.537083][ T5902] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1059.545012][   T46] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1059.833844][   T46] usb 7-1: Using ep0 maxpacket: 16
[ 1059.841870][ T5902] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[ 1059.911681][   T46] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1059.916436][   T29] audit: type=1400 audit(2000000002.520:1200): avc:  denied  { setopt } for  pid=15855 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1059.920058][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.940988][T15856] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1059.956785][   T46] usb 7-1: config 0 has no interface number 0
[ 1059.968039][   T46] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1059.981112][   T46] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.993002][ T5902] usb 3-1: config 0 has no interface number 0
[ 1060.000079][   T46] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1060.010148][ T5902] usb 3-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1060.020119][   T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.028299][ T5902] usb 3-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1060.060617][   T46] usb 7-1: config 0 descriptor??
[ 1060.063514][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1060.065835][ T5902] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad
[ 1060.130775][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.170033][ T5902] usb 3-1: Product: syz
[ 1060.174452][ T5902] usb 3-1: Manufacturer: syz
[ 1060.179115][ T5902] usb 3-1: SerialNumber: syz
[ 1060.205961][ T5902] usb 3-1: config 0 descriptor??
[ 1060.213630][ T5902] port100 3-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint
[ 1060.475983][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.484805][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.760974][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.953396][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.059717][   T46] uclogic 0003:28BD:0071.000D: pen parameters not found
[ 1061.066812][   T46] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring
[ 1061.103559][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1061.322175][   T29] audit: type=1400 audit(2000000003.920:1201): avc:  denied  { map } for  pid=15837 comm="syz.6.2529" path="socket:[47188]" dev="sockfs" ino=47188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1061.344532][ T5867] usb 7-1: USB disconnect, device number 36
[ 1061.346349][   T29] audit: type=1400 audit(2000000003.920:1202): avc:  denied  { read accept } for  pid=15837 comm="syz.6.2529" path="socket:[47188]" dev="sockfs" ino=47188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1061.973171][ T5902] usb 3-1: USB disconnect, device number 82
[ 1062.101618][   T46] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1062.143446][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1062.403685][   T29] audit: type=1400 audit(2000000005.010:1203): avc:  denied  { getopt } for  pid=15877 comm="syz.2.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1062.472643][T15878] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1062.481864][T15878] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1062.490710][T15878] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1062.499521][T15878] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1062.508694][T15878] geneve2: entered promiscuous mode
[ 1062.514335][T15878] geneve2: entered allmulticast mode
[ 1062.547638][   T46] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32
[ 1062.557018][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.573408][    T8] usb 1-1: new low-speed USB device number 77 using dummy_hcd
[ 1062.582618][   T46] usb 4-1: Product: syz
[ 1062.587644][   T46] usb 4-1: Manufacturer: syz
[ 1062.592328][   T46] usb 4-1: SerialNumber: syz
[ 1062.619198][   T46] usb 4-1: config 0 descriptor??
[ 1062.652181][   T46] pwc: Logitech/Cisco VT Camera webcam detected.
[ 1062.728367][    T8] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1062.739820][    T8] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1062.779495][    T8] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1062.799445][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.899210][   T46] pwc: Failed to set LED on/off time (-71)
[ 1062.908708][   T46] pwc: send_video_command error -71
[ 1062.914411][   T46] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1062.928708][   T46] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 1062.951945][   T46] usb 4-1: USB disconnect, device number 53
[ 1062.993548][ T5867] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1063.048190][    T8] usb 1-1: string descriptor 0 read error: -71
[ 1063.080054][    T8] hub 1-1:32.0: USB hub found
[ 1063.103878][    T8] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1063.166425][ T5867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1063.166756][    T8] usb 1-1: USB disconnect, device number 77
[ 1063.183353][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1063.405944][T15127] udevd[15127]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1063.646027][ T5867] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1063.655291][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.663383][ T5867] usb 3-1: Product: syz
[ 1063.667572][ T5867] usb 3-1: Manufacturer: syz
[ 1063.672173][ T5867] usb 3-1: SerialNumber: syz
[ 1063.681808][ T5867] usb 3-1: config 0 descriptor??
[ 1064.223294][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1064.238297][ T5865] usb 3-1: USB disconnect, device number 83
[ 1064.443368][ T5867] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 1065.116930][T15907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1065.124690][T15907] IPv6: NLM_F_CREATE should be set when creating new route
[ 1065.275436][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1065.310818][ T5867] usb 7-1: Using ep0 maxpacket: 32
[ 1065.834724][ T5867] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[ 1065.844000][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.867031][ T5867] usb 7-1: Product: syz
[ 1065.873185][ T5867] usb 7-1: Manufacturer: syz
[ 1065.877851][ T5867] usb 7-1: SerialNumber: syz
[ 1065.887300][T15907] Invalid option length (1048372) for dns_resolver key
[ 1065.895252][ T5865] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1065.896089][ T5867] usb 7-1: config 0 descriptor??
[ 1066.069021][ T5865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1066.080762][ T5865] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1066.097669][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.112655][ T5865] usb 4-1: Product: syz
[ 1066.119744][ T5865] usb 4-1: Manufacturer: syz
[ 1066.132423][ T5865] usb 4-1: SerialNumber: syz
[ 1066.157889][ T5865] usb 4-1: config 0 descriptor??
[ 1066.159282][T15905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1066.234034][T15922] binder: 15919:15922 ioctl 4018620d 0 returned -22
[ 1066.303154][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1066.317787][T15923] binder: 15919:15923 ioctl c0306201 0 returned -14
[ 1066.362405][T15905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1066.892557][T15905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.098585][T15905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.343367][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1068.139137][ T5867] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[ 1068.149982][ T5867] peak_usb 7-1:0.0 can0: sending command failure: -22
[ 1068.157262][ T5867] peak_usb 7-1:0.0 can0: sending command failure: -22
[ 1068.250765][ T5867] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22
[ 1068.393048][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1068.560381][ T5867] usb 7-1: USB disconnect, device number 37
[ 1069.433077][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1069.831131][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1069.872928][    T8] usb 4-1: USB disconnect, device number 54
[ 1070.273137][    T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1070.415020][T15967] binder: 15963:15967 ioctl 4018620d 0 returned -22
[ 1070.463010][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1071.502948][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1072.542854][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1072.683475][    T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1072.695045][    T8] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1072.704550][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.712564][    T8] usb 4-1: Product: syz
[ 1072.717023][    T8] usb 4-1: Manufacturer: syz
[ 1072.721646][    T8] usb 4-1: SerialNumber: syz
[ 1073.149951][    T8] usb 4-1: config 0 descriptor??
[ 1073.242846][    T8] usb 4-1: can't set config #0, error -71
[ 1073.251623][    T8] usb 4-1: USB disconnect, device number 55
[ 1073.582766][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1074.332634][   T29] audit: type=1400 audit(2000000016.900:1204): avc:  denied  { setopt } for  pid=15991 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1074.623028][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1074.772509][T16002] FAULT_INJECTION: forcing a failure.
[ 1074.772509][T16002] name failslab, interval 1, probability 0, space 0, times 0
[ 1074.785592][T16002] CPU: 1 UID: 0 PID: 16002 Comm: syz.2.2573 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1074.796473][T16002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1074.806521][T16002] Call Trace:
[ 1074.809805][T16002]  <TASK>
[ 1074.812738][T16002]  dump_stack_lvl+0x16c/0x1f0
[ 1074.817437][T16002]  should_fail_ex+0x497/0x5b0
[ 1074.822113][T16002]  ? fs_reclaim_acquire+0xae/0x150
[ 1074.827233][T16002]  should_failslab+0xc2/0x120
[ 1074.831912][T16002]  __kmalloc_noprof+0xcb/0x510
[ 1074.836672][T16002]  tomoyo_encode2+0x100/0x3e0
[ 1074.841364][T16002]  tomoyo_encode+0x29/0x50
[ 1074.845779][T16002]  tomoyo_path_perm+0x3a7/0x460
[ 1074.850626][T16002]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1074.856007][T16002]  ? hlock_class+0x4e/0x130
[ 1074.860544][T16002]  ? mark_held_locks+0x9f/0xe0
[ 1074.865302][T16002]  ? irqentry_exit+0x3b/0x90
[ 1074.869890][T16002]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1074.875096][T16002]  tomoyo_path_symlink+0x98/0xe0
[ 1074.880024][T16002]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[ 1074.885659][T16002]  ? security_path_symlink+0x135/0x2e0
[ 1074.891108][T16002]  security_path_symlink+0x152/0x2e0
[ 1074.896384][T16002]  do_symlinkat+0x10e/0x310
[ 1074.900899][T16002]  ? __pfx_do_symlinkat+0x10/0x10
[ 1074.905952][T16002]  ? getname_flags.part.0+0xd9/0x550
[ 1074.911233][T16002]  __x64_sys_symlinkat+0x93/0xc0
[ 1074.916159][T16002]  do_syscall_64+0xcd/0x250
[ 1074.920653][T16002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1074.926640][T16002] RIP: 0033:0x7f7c6bb7ff19
[ 1074.931039][T16002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1074.950674][T16002] RSP: 002b:00007f7c6c8e0058 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 1074.959079][T16002] RAX: ffffffffffffffda RBX: 00007f7c6bd46080 RCX: 00007f7c6bb7ff19
[ 1074.967040][T16002] RDX: 00000000200000c0 RSI: 0000000000000009 RDI: 0000000020000140
[ 1074.974994][T16002] RBP: 00007f7c6c8e00a0 R08: 0000000000000000 R09: 0000000000000000
[ 1074.982961][T16002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1074.990916][T16002] R13: 0000000000000000 R14: 00007f7c6bd46080 R15: 00007fff482540d8
[ 1074.998888][T16002]  </TASK>
[ 1075.221840][   T29] audit: type=1400 audit(2000000017.320:1205): avc:  denied  { mount } for  pid=15999 comm="syz.2.2573" name="/" dev="ramfs" ino=48139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1075.662644][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1076.694672][   T29] audit: type=1400 audit(2000000019.071:1206): avc:  denied  { connect } for  pid=15994 comm="syz.0.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1076.714976][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1076.802585][ T5865] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1077.742520][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1077.760052][ T5865] usb 4-1: config 0 has an invalid interface number: 100 but max is 0
[ 1077.770239][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.782121][ T5865] usb 4-1: config 0 has no interface number 0
[ 1077.788522][ T5865] usb 4-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1078.143313][ T5865] usb 4-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1078.326168][ T5865] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad
[ 1078.343680][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.360439][ T5865] usb 4-1: Product: syz
[ 1078.540927][   T29] audit: type=1400 audit(2000000020.961:1207): avc:  denied  { create } for  pid=16030 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[ 1078.687475][ T5830] Bluetooth: hci1: unexpected event for opcode 0x0c7a
[ 1078.718564][ T5830] Bluetooth: hci6: command 0x0406 tx timeout
[ 1078.782538][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1079.246870][ T5865] usb 4-1: config 0 descriptor??
[ 1079.252429][ T5865] usb 4-1: can't set config #0, error -71
[ 1079.260000][ T5865] usb 4-1: USB disconnect, device number 56
[ 1079.492457][ T5868] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1079.593613][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'.
[ 1079.612488][   T29] audit: type=1400 audit(2000000022.191:1208): avc:  denied  { write } for  pid=16041 comm="syz.4.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1079.633272][ T5868] usb 7-1: device descriptor read/64, error -71
[ 1079.822491][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1079.892810][ T5868] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 1080.004731][T16045] ax25_connect(): syz.2.2584 uses autobind, please contact jreuter@yaina.de
[ 1080.619950][ T5868] usb 7-1: device descriptor read/64, error -71
[ 1080.862735][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1080.922000][T16058] ax25_connect(): syz.2.2588 uses autobind, please contact jreuter@yaina.de
[ 1080.980706][ T5868] usb usb7-port1: attempt power cycle
[ 1081.264280][T16049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1081.274374][T16031] delete_channel: no stack
[ 1081.281168][T16049] netlink: 'syz.3.2586': attribute type 9 has an invalid length.
[ 1081.289329][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'.
[ 1081.902292][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1082.636450][T16074] binder: 16068:16074 ioctl 4018620d 0 returned -22
[ 1082.713390][    T8] usb 3-1: new low-speed USB device number 84 using dummy_hcd
[ 1082.942239][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1083.536275][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1083.547191][    T8] usb 3-1: string descriptor 0 read error: -22
[ 1083.555883][    T8] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=ad.c0
[ 1083.592113][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.628557][    T8] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[ 1083.887812][   T29] audit: type=1400 audit(2000000000.080:1209): avc:  denied  { read } for  pid=16064 comm="syz.2.2590" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1083.992358][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1084.382507][   T29] audit: type=1400 audit(2000000000.080:1210): avc:  denied  { open } for  pid=16064 comm="syz.2.2590" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1085.022151][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1085.066483][   T29] audit: type=1400 audit(2000000000.080:1211): avc:  denied  { ioctl } for  pid=16064 comm="syz.2.2590" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1085.091969][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1085.107481][    T8] cxusb: set interface failed
[ 1085.132685][    T8] dvb-usb: bulk message failed: -22 (1/0)
[ 1085.147449][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1085.232411][    T8] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[ 1085.250130][    T8] usb 3-1: media controller created
[ 1085.252740][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2597'.
[ 1085.280427][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.781908][    T8] DVB: Unable to find symbol lgdt330x_attach()
[ 1085.788193][    T8] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[ 1085.953223][    T8] dvb-usb: bulk message failed: -22 (1/0)
[ 1085.961308][    T8] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[ 1085.989176][    T8] usb 3-1: USB disconnect, device number 84
[ 1086.018778][    T8] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[ 1086.072071][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1087.112036][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1088.142498][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1088.726771][T16112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1088.741546][T16112] netlink: 'syz.3.2602': attribute type 9 has an invalid length.
[ 1088.749466][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'.
[ 1089.190579][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1090.221895][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1090.650937][   T29] audit: type=1400 audit(2000000006.840:1212): avc:  denied  { connect } for  pid=16136 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1090.771884][   T29] audit: type=1400 audit(2000000006.950:1213): avc:  denied  { write } for  pid=16141 comm="syz.4.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1090.905653][   T29] audit: type=1400 audit(2000000007.100:1214): avc:  denied  { create } for  pid=16137 comm="syz.6.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1090.971810][   T29] audit: type=1400 audit(2000000007.160:1215): avc:  denied  { bind } for  pid=16137 comm="syz.6.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[ 1091.261821][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1091.972576][T16156] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1091.974199][T16157] hpfs: Unknown parameter 'tra'
[ 1092.047735][   T29] audit: type=1400 audit(2000000008.170:1216): avc:  denied  { mounton } for  pid=16148 comm="syz.0.2612" path="/545/file0" dev="tmpfs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[ 1092.301728][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1092.489404][T16150] syz.0.2612 (16150): drop_caches: 0
[ 1093.341651][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1094.038698][T16170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1094.050680][T16170] netlink: 'syz.3.2613': attribute type 9 has an invalid length.
[ 1094.058530][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'.
[ 1094.393297][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1094.824394][   T29] audit: type=1400 audit(2000000010.800:1217): avc:  denied  { ioctl } for  pid=16177 comm="syz.2.2620" path="socket:[47818]" dev="sockfs" ino=47818 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1095.421988][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1095.568874][   T29] audit: type=1400 audit(2000000000.110:1218): avc:  denied  { unmount } for  pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1096.327246][T16192] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2619'.
[ 1096.353307][T16196] FAULT_INJECTION: forcing a failure.
[ 1096.353307][T16196] name failslab, interval 1, probability 0, space 0, times 0
[ 1096.431552][T16196] CPU: 1 UID: 0 PID: 16196 Comm: syz.2.2624 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1096.442350][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1096.452396][T16196] Call Trace:
[ 1096.455666][T16196]  <TASK>
[ 1096.458575][T16196]  dump_stack_lvl+0x16c/0x1f0
[ 1096.463240][T16196]  should_fail_ex+0x497/0x5b0
[ 1096.467901][T16196]  ? fs_reclaim_acquire+0xae/0x150
[ 1096.473258][T16196]  should_failslab+0xc2/0x120
[ 1096.477914][T16196]  __kmalloc_noprof+0xcb/0x510
[ 1096.482658][T16196]  ? skcipher_recvmsg+0xb5/0x1020
[ 1096.487677][T16196]  sock_kmalloc+0x111/0x170
[ 1096.491630][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1096.492158][T16196]  af_alg_alloc_areq+0xbc/0x2e0
[ 1096.503833][T16196]  skcipher_recvmsg+0x326/0x1020
[ 1096.508775][T16196]  ? find_held_lock+0x2d/0x110
[ 1096.513530][T16196]  ? __pfx_skcipher_recvmsg+0x10/0x10
[ 1096.518887][T16196]  sock_recvmsg+0x1f6/0x250
[ 1096.523370][T16196]  ____sys_recvmsg+0x219/0x6b0
[ 1096.528115][T16196]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1096.533390][T16196]  ___sys_recvmsg+0x115/0x1a0
[ 1096.538052][T16196]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1096.543238][T16196]  ? __pfx_lock_release+0x10/0x10
[ 1096.548243][T16196]  ? trace_lock_acquire+0x14e/0x1f0
[ 1096.553439][T16196]  do_recvmmsg+0x2f8/0x740
[ 1096.557839][T16196]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1096.562760][T16196]  ? vfs_write+0x306/0x1150
[ 1096.567249][T16196]  ? __mutex_unlock_slowpath+0x164/0x690
[ 1096.572866][T16196]  ? __fget_files+0x206/0x3a0
[ 1096.577525][T16196]  __x64_sys_recvmmsg+0x239/0x290
[ 1096.582528][T16196]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1096.588055][T16196]  do_syscall_64+0xcd/0x250
[ 1096.592541][T16196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1096.598416][T16196] RIP: 0033:0x7f7c6bb7ff19
[ 1096.602821][T16196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1096.622415][T16196] RSP: 002b:00007f7c6c8bf058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1096.630808][T16196] RAX: ffffffffffffffda RBX: 00007f7c6bd46160 RCX: 00007f7c6bb7ff19
[ 1096.638763][T16196] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000006
[ 1096.646729][T16196] RBP: 00007f7c6c8bf0a0 R08: 0000000000000000 R09: 0000000000000000
[ 1096.654677][T16196] R10: 0000000040002041 R11: 0000000000000246 R12: 0000000000000001
[ 1096.662638][T16196] R13: 0000000000000000 R14: 00007f7c6bd46160 R15: 00007fff482540d8
[ 1096.670603][T16196]  </TASK>
[ 1096.709553][T16191] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1097.490993][ T5824] Bluetooth: hci6: unexpected event for opcode 0x0c7a
[ 1097.501459][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1097.973136][   T29] audit: type=1400 audit(2000000002.560:1219): avc:  denied  { connect } for  pid=16198 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1098.363048][    T8] usb 3-1: new low-speed USB device number 85 using dummy_hcd
[ 1098.551653][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1098.980945][    T8] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[ 1098.999324][    T8] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1099.019565][    T8] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1099.045559][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.363183][T16216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1099.472058][T16229] netlink: 'syz.6.2633': attribute type 8 has an invalid length.
[ 1099.480407][T16229] netlink: 163260 bytes leftover after parsing attributes in process `syz.6.2633'.
[ 1099.581341][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1100.000182][T16220] netlink: 'syz.4.2629': attribute type 9 has an invalid length.
[ 1100.008711][    T8] usb 3-1: string descriptor 0 read error: -71
[ 1100.019179][    T8] hub 3-1:32.0: USB hub found
[ 1100.028341][    T8] hub 3-1:32.0: config failed, can't read hub descriptor (err -22)
[ 1100.037647][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'.
[ 1100.217038][    T8] usb 3-1: USB disconnect, device number 85
[ 1100.386941][T16090] udevd[16090]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1100.621240][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1100.636823][ T5830] Bluetooth: hci6: unexpected event for opcode 0x0c7a
[ 1101.307758][   T29] audit: type=1400 audit(2000000005.890:1220): avc:  denied  { create } for  pid=16242 comm="syz.6.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[ 1101.661243][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1102.386115][   T46] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 1102.503196][T16247] binder: 16246:16247 ioctl 4018620d 0 returned -22
[ 1102.582943][   T46] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1102.594729][   T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.645650][   T46] usb 7-1: config 0 descriptor??
[ 1102.682057][   T46] cp210x 7-1:0.0: cp210x converter detected
[ 1102.701149][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1102.901902][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.910486][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1103.182847][   T46] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 1103.190515][   T46] cp210x 7-1:0.0: querying part number failed
[ 1103.251588][   T46] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1103.741098][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1104.781031][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1105.830931][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1106.072813][ T9450] usb 7-1: USB disconnect, device number 41
[ 1106.080228][ T9450] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1106.113683][ T9450] cp210x 7-1:0.0: device disconnected
[ 1106.316704][T16275] hpfs: Unknown parameter 'tra'
[ 1106.322722][T16275] syz.2.2643 (16275): drop_caches: 0
[ 1106.407781][T16278] netlink: 'syz.6.2644': attribute type 8 has an invalid length.
[ 1106.415726][T16278] netlink: 163260 bytes leftover after parsing attributes in process `syz.6.2644'.
[ 1106.860930][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1107.607389][T16291] binder: 16286:16291 ioctl 4018620d 0 returned -22
[ 1107.910896][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1108.950794][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1109.980719][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1110.502092][ T9450] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1111.020664][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1111.194955][ T9450] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1111.212553][ T9450] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[ 1111.239718][ T9450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.250822][ T9450] usb 3-1: Product: syz
[ 1111.255629][ T9450] usb 3-1: Manufacturer: syz
[ 1111.260393][ T9450] usb 3-1: SerialNumber: syz
[ 1111.272772][ T9450] usb 3-1: config 0 descriptor??
[ 1112.070609][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1113.100709][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1113.645345][ T6211] Bluetooth: Error in BCSP hdr checksum
[ 1114.140654][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[ 1114.189203][   T29] audit: type=1400 audit(2000000018.771:1221): avc:  denied  { read } for  pid=16339 comm="syz.4.2660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1219.264499][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1219.264531][    C1] rcu: 	0-...!: (1 GPs behind) idle=6a2c/1/0x4000000000000000 softirq=68762/68763 fqs=15
[ 1219.265409][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P16345/1:b..l P5814/1:b..l
[ 1219.265482][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=65025, q=77 ncpus=2)
[ 1219.265508][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1219.265536][    C0] NMI backtrace for cpu 0
[ 1219.265550][    C0] CPU: 0 UID: 0 PID: 16336 Comm: syz.6.2659 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1219.265573][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1219.265585][    C0] RIP: 0010:do_raw_spin_unlock+0xa0/0x230
[ 1219.265618][    C0] Code: d2 0f 85 6c 01 00 00 8b 03 85 c0 0f 84 f5 00 00 00 4c 8d 63 10 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 67 01 00 00 65 48 8b 05 c2 af 8c 7e 48 39 43 10 0f 85 d8 00
[ 1219.265636][    C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000046
[ 1219.265651][    C0] RAX: dffffc0000000000 RBX: ffffffff9aacdde8 RCX: ffffffff817728e3
[ 1219.265665][    C0] RDX: 1ffffffff3559bbf RSI: 0000000000000004 RDI: ffffffff9aacdde8
[ 1219.265678][    C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff3559bbd
[ 1219.265691][    C0] R10: ffffffff9aacddeb R11: 0000000000000006 R12: ffffffff9aacddf8
[ 1219.265704][    C0] R13: dffffc0000000000 R14: ffff88805b88c340 R15: 1ffff92000000faa
[ 1219.265717][    C0] FS:  00007f415779d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1219.265737][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1219.265750][    C0] CR2: 0000001b2f41eff8 CR3: 0000000027c4a000 CR4: 00000000003526f0
[ 1219.265763][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1219.265775][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1219.265787][    C0] Call Trace:
[ 1219.265793][    C0]  <NMI>
[ 1219.265802][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1219.265835][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1219.265855][    C0]  ? nmi_handle+0x1ac/0x5d0
[ 1219.265876][    C0]  ? do_raw_spin_unlock+0xa0/0x230
[ 1219.265901][    C0]  ? default_do_nmi+0x6a/0x160
[ 1219.265928][    C0]  ? exc_nmi+0x170/0x1e0
[ 1219.265954][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1219.265981][    C0]  ? do_raw_spin_unlock+0x53/0x230
[ 1219.266006][    C0]  ? do_raw_spin_unlock+0xa0/0x230
[ 1219.266031][    C0]  ? do_raw_spin_unlock+0xa0/0x230
[ 1219.266056][    C0]  ? do_raw_spin_unlock+0xa0/0x230
[ 1219.266080][    C0]  </NMI>
[ 1219.266086][    C0]  <IRQ>
[ 1219.266093][    C0]  _raw_spin_unlock_irqrestore+0x22/0x80
[ 1219.266115][    C0]  debug_object_deactivate+0x1ef/0x370
[ 1219.266137][    C0]  ? __pfx_debug_object_deactivate+0x10/0x10
[ 1219.266160][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1219.266177][    C0]  ? timerqueue_add+0x1c2/0x330
[ 1219.266206][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1219.266228][    C0]  __hrtimer_run_queues+0x47c/0xae0
[ 1219.266258][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1219.266283][    C0]  ? read_tsc+0x9/0x20
[ 1219.266312][    C0]  hrtimer_interrupt+0x392/0x8e0
[ 1219.266342][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[ 1219.266367][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1219.266388][    C0]  </IRQ>
[ 1219.266394][    C0]  <TASK>
[ 1219.266400][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1219.266425][    C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90
[ 1219.266448][    C0] Code: df 55 65 48 8b 2d f4 d0 d9 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f 66 3e f6 e8 fa ac 77 f6 fb bf 01 00 00 00 <e8> 0f 9d ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 ed 15 3e
[ 1219.266465][    C0] RSP: 0018:ffffc9000d2ff458 EFLAGS: 00000202
[ 1219.266481][    C0] RAX: 0000000000002115 RBX: ffffed100d5b9000 RCX: 1ffffffff2dc9b22
[ 1219.266494][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: 0000000000000001
[ 1219.266506][    C0] RBP: ffff88806adc8000 R08: 0000000000000001 R09: fffffbfff2dc9998
[ 1219.266519][    C0] R10: ffffffff96e4ccc7 R11: 0000000000000006 R12: 0000000000000000
[ 1219.266531][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1219.266549][    C0]  ? preempt_schedule_irq+0x46/0x90
[ 1219.266569][    C0]  irqentry_exit+0x36/0x90
[ 1219.266590][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[ 1219.266614][    C0] RIP: 0010:queue_work_on+0x98/0x140
[ 1219.266637][    C0] Code: e8 0d e5 36 00 48 85 ed 75 44 e8 93 e2 36 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 f1 e4 36 00 48 85 db 0f 85 8d 00 00 00 <e8> 73 e2 36 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8
[ 1219.266654][    C0] RSP: 0018:ffffc9000d2ff528 EFLAGS: 00000246
[ 1219.266668][    C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900123b4000
[ 1219.266680][    C0] RDX: 0000000000080000 RSI: ffffffff81632152 RDI: 0000000000000007
[ 1219.266693][    C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 1219.266705][    C0] R10: 0000000000000000 R11: 0000000000000009 R12: 0000000000000001
[ 1219.266716][    C0] R13: 0000000000000008 R14: ffff88801b078800 R15: 0000000000000000
[ 1219.266732][    C0]  ? queue_work_on+0xe2/0x140
[ 1219.266754][    C0]  ? queue_work_on+0xe2/0x140
[ 1219.266775][    C0]  drm_fb_helper_damage_area+0xaa/0xd0
[ 1219.266802][    C0]  bit_putcs+0x90e/0xdf0
[ 1219.266830][    C0]  ? __pfx_bit_putcs+0x10/0x10
[ 1219.266854][    C0]  ? fb_get_color_depth+0x120/0x250
[ 1219.266874][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1219.266901][    C0]  ? __pfx_bit_putcs+0x10/0x10
[ 1219.266921][    C0]  fbcon_putcs+0x364/0x480
[ 1219.266942][    C0]  fbcon_redraw+0x473/0x500
[ 1219.266964][    C0]  fbcon_scroll+0x43e/0x670
[ 1219.266985][    C0]  con_scroll+0x45e/0x690
[ 1219.267013][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80
[ 1219.267038][    C0]  lf+0x270/0x2c0
[ 1219.267063][    C0]  ? __pfx_lf+0x10/0x10
[ 1219.267088][    C0]  ? __pfx_fbcon_putcs+0x10/0x10
[ 1219.267106][    C0]  ? __rcu_read_unlock+0x2b4/0x580
[ 1219.267129][    C0]  ? __pfx_fbcon_putcs+0x10/0x10
[ 1219.267147][    C0]  do_con_write+0xc28/0x7bb0
[ 1219.267172][    C0]  ? __pfx_do_con_write+0x10/0x10
[ 1219.267191][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1219.267224][    C0]  con_write+0x23/0xb0
[ 1219.267241][    C0]  n_tty_write+0x419/0x1140
[ 1219.267269][    C0]  ? __pfx_n_tty_write+0x10/0x10
[ 1219.267290][    C0]  ? __virt_addr_valid+0x1a4/0x590
[ 1219.267315][    C0]  ? __pfx_woken_wake_function+0x10/0x10
[ 1219.267343][    C0]  ? __virt_addr_valid+0x5e/0x590
[ 1219.267367][    C0]  ? __phys_addr_symbol+0x30/0x80
[ 1219.267391][    C0]  ? __check_object_size+0x488/0x710
[ 1219.267415][    C0]  ? __pfx_n_tty_write+0x10/0x10
[ 1219.267437][    C0]  file_tty_write.constprop.0+0x506/0x9a0
[ 1219.267469][    C0]  vfs_write+0x5ae/0x1150
[ 1219.267488][    C0]  ? __pfx_tty_write+0x10/0x10
[ 1219.267516][    C0]  ? __pfx_vfs_write+0x10/0x10
[ 1219.267533][    C0]  ? do_futex+0x123/0x350
[ 1219.267551][    C0]  ? __fget_files+0x40/0x3a0
[ 1219.267577][    C0]  ksys_write+0x12b/0x250
[ 1219.267595][    C0]  ? __pfx_ksys_write+0x10/0x10
[ 1219.267620][    C0]  do_syscall_64+0xcd/0x250
[ 1219.267643][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.267667][    C0] RIP: 0033:0x7f415697ff19
[ 1219.267682][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1219.267701][    C0] RSP: 002b:00007f415779d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1219.267718][    C0] RAX: ffffffffffffffda RBX: 00007f4156b45fa0 RCX: 00007f415697ff19
[ 1219.267732][    C0] RDX: 0000000000001006 RSI: 0000000020000000 RDI: 0000000000000004
[ 1219.267744][    C0] RBP: 00007f41569f3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 1219.267757][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1219.267769][    C0] R13: 0000000000000000 R14: 00007f4156b45fa0 R15: 00007fffcabf7e98
[ 1219.267787][    C0]  </TASK>
[ 1219.268530][    C1] task:syz-executor    state:R  running task     stack:23424 pid:5814  tgid:5814  ppid:5809   flags:0x00004000
[ 1219.268603][    C1] Call Trace:
[ 1219.268611][    C1]  <TASK>
[ 1219.268624][    C1]  __schedule+0xe58/0x5ad0
[ 1219.268652][    C1]  ? mark_lock+0x70/0xc60
[ 1219.268676][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1219.268710][    C1]  ? __pfx___schedule+0x10/0x10
[ 1219.268733][    C1]  ? find_held_lock+0x2d/0x110
[ 1219.268778][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[ 1219.268804][    C1]  preempt_schedule_common+0x44/0xc0
[ 1219.268831][    C1]  preempt_schedule_thunk+0x1a/0x30
[ 1219.268861][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1219.268884][    C1]  copy_page_range+0x1e15/0x57d0
[ 1219.268939][    C1]  ? __pfx_copy_page_range+0x10/0x10
[ 1219.268964][    C1]  ? find_held_lock+0x2d/0x110
[ 1219.269001][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1219.269027][    C1]  ? lock_acquire+0x2f/0xb0
[ 1219.269050][    C1]  ? copy_process+0x7dc5/0x8df0
[ 1219.269085][    C1]  ? down_write+0x14e/0x200
[ 1219.269118][    C1]  ? up_write+0x1b2/0x520
[ 1219.269149][    C1]  copy_process+0x7e77/0x8df0
[ 1219.269178][    C1]  ? hlock_class+0x4e/0x130
[ 1219.269226][    C1]  ? __pfx_copy_process+0x10/0x10
[ 1219.269283][    C1]  kernel_clone+0xfd/0x960
[ 1219.269316][    C1]  ? __pfx_kernel_clone+0x10/0x10
[ 1219.269356][    C1]  ? find_held_lock+0x59/0x110
[ 1219.269386][    C1]  ? find_held_lock+0x2d/0x110
[ 1219.269422][    C1]  __do_sys_clone+0xba/0x100
[ 1219.269453][    C1]  ? __pfx___do_sys_clone+0x10/0x10
[ 1219.269500][    C1]  ? do_user_addr_fault+0x83d/0x13f0
[ 1219.269532][    C1]  do_syscall_64+0xcd/0x250
[ 1219.269562][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.269590][    C1] RIP: 0033:0x7f898a376793
[ 1219.269608][    C1] RSP: 002b:00007ffe777e41f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1219.269631][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f898a376793
[ 1219.269647][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1219.269663][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1219.269678][    C1] R10: 00005555777027d0 R11: 0000000000000246 R12: 0000000000000000
[ 1219.269694][    C1] R13: 000000000010ffd3 R14: 000000000010ff12 R15: 00007ffe777e4380
[ 1219.269724][    C1]  </TASK>
[ 1219.269734][    C1] task:syz.4.2660      state:R  running task     stack:28608 pid:16345 tgid:16339 ppid:5812   flags:0x00004000
[ 1219.269812][    C1] Call Trace:
[ 1219.269819][    C1]  <TASK>
[ 1219.269832][    C1]  __schedule+0xe58/0x5ad0
[ 1219.269855][    C1]  ? find_held_lock+0x2d/0x110
[ 1219.269885][    C1]  ? find_held_lock+0x2d/0x110
[ 1219.269923][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1219.269953][    C1]  ? __pfx___schedule+0x10/0x10
[ 1219.269990][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[ 1219.270015][    C1]  preempt_schedule_common+0x44/0xc0
[ 1219.270042][    C1]  preempt_schedule_thunk+0x1a/0x30
[ 1219.270072][    C1]  _raw_spin_unlock_irqrestore+0x61/0x80
[ 1219.270097][    C1]  timerfd_clock_was_set+0x164/0x310
[ 1219.270126][    C1]  clock_was_set+0x67c/0x850
[ 1219.270163][    C1]  ? __pfx_clock_was_set+0x10/0x10
[ 1219.270198][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1219.270226][    C1]  timekeeping_inject_offset+0x402/0x520
[ 1219.270249][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1219.270278][    C1]  ? __pfx_timekeeping_inject_offset+0x10/0x10
[ 1219.270305][    C1]  ? bpf_lsm_capable+0x9/0x10
[ 1219.270337][    C1]  ? security_capable+0x7e/0x260
[ 1219.270377][    C1]  do_adjtimex+0x369/0xaa0
[ 1219.270404][    C1]  ? __pfx_do_adjtimex+0x10/0x10
[ 1219.270433][    C1]  ? __might_fault+0x13b/0x190
[ 1219.270471][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[ 1219.270511][    C1]  ? __might_fault+0xe3/0x190
[ 1219.270547][    C1]  ? __pfx_posix_clock_realtime_adj+0x10/0x10
[ 1219.270574][    C1]  __do_sys_clock_adjtime+0x173/0x290
[ 1219.270602][    C1]  ? __pfx___do_sys_clock_adjtime+0x10/0x10
[ 1219.270628][    C1]  ? __pfx_do_futex+0x10/0x10
[ 1219.270668][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1219.270709][    C1]  do_syscall_64+0xcd/0x250
[ 1219.270739][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1219.270767][    C1] RIP: 0033:0x7f331977ff19
[ 1219.270784][    C1] RSP: 002b:00007f331a597058 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[ 1219.270807][    C1] RAX: ffffffffffffffda RBX: 00007f3319946080 RCX: 00007f331977ff19
[ 1219.270824][    C1] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000
[ 1219.270839][    C1] RBP: 00007f33197f3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 1219.270856][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1219.270871][    C1] R13: 0000000000000000 R14: 00007f3319946080 R15: 00007fff6bc1a1a8
[ 1219.270901][    C1]  </TASK>
[ 1219.270911][    C1] rcu: rcu_preempt kthread starved for 10472 jiffies! g65025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1219.270937][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1219.270949][    C1] rcu: RCU grace-period kthread stack dump:
[ 1219.270956][    C1] task:rcu_preempt     state:R  running task     stack:28424 pid:17    tgid:17    ppid:2      flags:0x00004000
[ 1219.271033][    C1] Call Trace:
[ 1219.271041][    C1]  <TASK>
[ 1219.271054][    C1]  __schedule+0xe58/0x5ad0
[ 1219.271077][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1219.271115][    C1]  ? __pfx___schedule+0x10/0x10
[ 1219.271139][    C1]  ? schedule+0x298/0x350
[ 1219.271162][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1219.271192][    C1]  ? lock_acquire+0x2f/0xb0
[ 1219.271215][    C1]  ? schedule+0x1fd/0x350
[ 1219.271241][    C1]  schedule+0xe7/0x350
[ 1219.271270][    C1]  schedule_timeout+0x124/0x280
[ 1219.271304][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1219.271339][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1219.271376][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1219.271402][    C1]  ? prepare_to_swait_event+0xf3/0x470
[ 1219.271438][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[ 1219.271473][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1219.271499][    C1]  ? rcu_gp_init+0xc82/0x1630
[ 1219.271529][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1219.271558][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1219.271586][    C1]  rcu_gp_kthread+0x271/0x380
[ 1219.271615][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1219.271644][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1219.271672][    C1]  ? __kthread_parkme+0x148/0x220
[ 1219.271705][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1219.271732][    C1]  kthread+0x2c1/0x3a0
[ 1219.271761][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1219.271785][    C1]  ? __pfx_kthread+0x10/0x10
[ 1219.271816][    C1]  ret_from_fork+0x45/0x80
[ 1219.271839][    C1]  ? __pfx_kthread+0x10/0x10
[ 1219.271869][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1219.271914][    C1]  </TASK>
[ 1219.271923][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1219.271932][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1219.271958][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1219.271972][    C1] RIP: 0010:acpi_safe_halt+0x1a/0x20
[ 1219.272002][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 b8 d5 da 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 48 67 b4 00 fb f4 <fa> c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1219.272024][    C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246
[ 1219.272043][    C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b28e679
[ 1219.272058][    C1] RDX: 0000000000000001 RSI: ffff888143a8b000 RDI: ffff888143a8b064
[ 1219.272074][    C1] RBP: ffff888143a8b064 R08: 0000000000000001 R09: ffffed10170e6fed
[ 1219.272091][    C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff888140f54000
[ 1219.272107][    C1] R13: ffffffff8ee14e20 R14: 0000000000000001 R15: 0000000000000000
[ 1219.272122][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1219.272145][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1219.272161][    C1] CR2: 00007f331a596fb8 CR3: 00000000288d8000 CR4: 00000000003526f0
[ 1219.272177][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1219.272192][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1219.272207][    C1] Call Trace:
[ 1219.272214][    C1]  <IRQ>
[ 1219.272223][    C1]  ? rcu_check_gp_kthread_starvation+0x31b/0x450
[ 1219.272257][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1219.272289][    C1]  ? rcu_sched_clock_irq+0x247a/0x3310
[ 1219.272332][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 1219.272363][    C1]  ? tmigr_requires_handle_remote+0x141/0x480
[ 1219.272398][    C1]  ? __pfx_tmigr_requires_handle_remote+0x10/0x10
[ 1219.272440][    C1]  ? hrtimer_run_queues+0x97/0x500
[ 1219.272481][    C1]  ? update_process_times+0x178/0x2d0
[ 1219.272510][    C1]  ? __pfx_update_process_times+0x10/0x10
[ 1219.272538][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1219.272571][    C1]  ? update_wall_time+0x1c/0x40
[ 1219.272598][    C1]  ? tick_nohz_handler+0x376/0x530
[ 1219.272633][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1219.272664][    C1]  ? __hrtimer_run_queues+0x5fb/0xae0
[ 1219.272703][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1219.272733][    C1]  ? read_tsc+0x9/0x20
[ 1219.272770][    C1]  ? hrtimer_interrupt+0x392/0x8e0
[ 1219.272811][    C1]  ? __sysvec_apic_timer_interrupt+0x10f/0x400
[ 1219.272840][    C1]  ? sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1219.272865][    C1]  </IRQ>
[ 1219.272873][    C1]  <TASK>
[ 1219.272883][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1219.272919][    C1]  ? ct_kernel_exit+0x139/0x190
[ 1219.272946][    C1]  ? acpi_safe_halt+0x1a/0x20
[ 1219.272978][    C1]  acpi_idle_enter+0xc5/0x160
[ 1219.273010][    C1]  cpuidle_enter_state+0xaa/0x4f0
[ 1219.273040][    C1]  ? __pfx_tsc_verify_tsc_adjust+0x10/0x10
[ 1219.273067][    C1]  cpuidle_enter+0x4e/0xa0
[ 1219.273100][    C1]  do_idle+0x310/0x3f0
[ 1219.273124][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1219.273155][    C1]  cpu_startup_entry+0x4f/0x60
[ 1219.273179][    C1]  start_secondary+0x222/0x2b0
[ 1219.273213][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 1219.273252][    C1]  common_startup_64+0x13e/0x148
[ 1219.273293][    C1]  </TASK>
[ 1266.931974][   T30] INFO: task khugepaged:37 blocked for more than 143 seconds.
[ 1266.932003][   T30]       Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1266.932018][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1266.932027][   T30] task:khugepaged      state:D stack:27584 pid:37    tgid:37    ppid:2      flags:0x00004000
[ 1266.932097][   T30] Call Trace:
[ 1266.932106][   T30]  <TASK>
[ 1266.932122][   T30]  __schedule+0xe58/0x5ad0
[ 1266.932152][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1266.932176][   T30]  ? hlock_class+0x4e/0x130
[ 1266.932218][   T30]  ? __pfx___schedule+0x10/0x10
[ 1266.932242][   T30]  ? schedule+0x298/0x350
[ 1266.932264][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1266.932292][   T30]  ? lock_acquire+0x2f/0xb0
[ 1266.932314][   T30]  ? schedule+0x1fd/0x350
[ 1266.932340][   T30]  schedule+0xe7/0x350
[ 1266.932363][   T30]  schedule_timeout+0x244/0x280
[ 1266.932394][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1266.932431][   T30]  ? mark_held_locks+0x9f/0xe0
[ 1266.932456][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.932482][   T30]  __wait_for_common+0x3e1/0x600
[ 1266.932506][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1266.932540][   T30]  ? __pfx___wait_for_common+0x10/0x10
[ 1266.932566][   T30]  ? touch_wq_lockdep_map+0xa7/0x1c0
[ 1266.932597][   T30]  ? touch_wq_lockdep_map+0xa7/0x1c0
[ 1266.932632][   T30]  __flush_work+0x776/0xc30
[ 1266.932661][   T30]  ? __pfx___flush_work+0x10/0x10
[ 1266.932686][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1266.932711][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1266.932751][   T30]  ? mark_held_locks+0x9f/0xe0
[ 1266.932789][   T30]  ? __pfx___might_resched+0x10/0x10
[ 1266.932815][   T30]  ? queue_work_on+0xc6/0x140
[ 1266.932839][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1266.932867][   T30]  __lru_add_drain_all+0x50a/0x6f0
[ 1266.932897][   T30]  khugepaged+0x10f/0x15e0
[ 1266.932936][   T30]  ? __pfx_khugepaged+0x10/0x10
[ 1266.932962][   T30]  ? lock_acquire.part.0+0x11b/0x380
[ 1266.932986][   T30]  ? __print_lock_name+0x1b1/0x260
[ 1266.933019][   T30]  ? __kthread_parkme+0xb7/0x220
[ 1266.933048][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1266.933082][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1266.933108][   T30]  ? __kthread_parkme+0x148/0x220
[ 1266.933138][   T30]  ? __pfx_khugepaged+0x10/0x10
[ 1266.933165][   T30]  kthread+0x2c1/0x3a0
[ 1266.933190][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.933212][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.933241][   T30]  ret_from_fork+0x45/0x80
[ 1266.933263][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.933291][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1266.933343][   T30]  </TASK>
[ 1266.933469][   T30] INFO: task syz.2.2650:16300 blocked for more than 143 seconds.
[ 1266.933484][   T30]       Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1266.933498][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1266.933506][   T30] task:syz.2.2650      state:D stack:26048 pid:16300 tgid:16300 ppid:5823   flags:0x00004004
[ 1266.933570][   T30] Call Trace:
[ 1266.933579][   T30]  <TASK>
[ 1266.933592][   T30]  __schedule+0xe58/0x5ad0
[ 1266.933615][   T30]  ? __pfx___lock_acquire+0x10/0x10
[ 1266.933652][   T30]  ? __pfx___schedule+0x10/0x10
[ 1266.933676][   T30]  ? schedule+0x298/0x350
[ 1266.933697][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1266.933726][   T30]  ? lock_acquire+0x2f/0xb0
[ 1266.933748][   T30]  ? schedule+0x1fd/0x350
[ 1266.933780][   T30]  schedule+0xe7/0x350
[ 1266.933803][   T30]  schedule_timeout+0x244/0x280
[ 1266.933833][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1266.933871][   T30]  ? mark_held_locks+0x9f/0xe0
[ 1266.933896][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.933921][   T30]  __wait_for_common+0x3e1/0x600
[ 1266.933945][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[ 1266.933979][   T30]  ? __pfx___wait_for_common+0x10/0x10
[ 1266.934009][   T30]  ? lock_acquire+0x2f/0xb0
[ 1266.934030][   T30]  ? __flush_work+0x46d/0xc30
[ 1266.934060][   T30]  __flush_work+0x776/0xc30
[ 1266.934086][   T30]  ? rcu_is_watching+0x12/0xc0
[ 1266.934116][   T30]  ? __pfx___flush_work+0x10/0x10
[ 1266.934144][   T30]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1266.934185][   T30]  ? do_raw_write_lock+0x11d/0x3a0
[ 1266.934213][   T30]  ? __pfx___might_resched+0x10/0x10
[ 1266.934238][   T30]  ? __pfx_do_raw_write_lock+0x10/0x10
[ 1266.934266][   T30]  ? lock_acquire+0x2f/0xb0
[ 1266.934293][   T30]  disable_work_sync+0xc9/0x100
[ 1266.934321][   T30]  hci_unregister_dev+0x1a4/0x620
[ 1266.934353][   T30]  hci_uart_tty_close+0x24c/0x2a0
[ 1266.934385][   T30]  ? __pfx_hci_uart_tty_close+0x10/0x10
[ 1266.934418][   T30]  tty_ldisc_close+0x111/0x1a0
[ 1266.934449][   T30]  tty_ldisc_kill+0x8e/0x150
[ 1266.934477][   T30]  tty_ldisc_release+0x116/0x2a0
[ 1266.934509][   T30]  tty_release_struct+0x23/0xe0
[ 1266.934541][   T30]  tty_release+0xe25/0x1410
[ 1266.934570][   T30]  ? __pfx_tty_release+0x10/0x10
[ 1266.934590][   T30]  ? __pfx_tty_fasync+0x10/0x10
[ 1266.934619][   T30]  __fput+0x3f8/0xb60
[ 1266.934648][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.934674][   T30]  task_work_run+0x14e/0x250
[ 1266.934698][   T30]  ? __pfx_task_work_run+0x10/0x10
[ 1266.934723][   T30]  ? __pfx___do_sys_close_range+0x10/0x10
[ 1266.934755][   T30]  syscall_exit_to_user_mode+0x27b/0x2a0
[ 1266.934786][   T30]  do_syscall_64+0xda/0x250
[ 1266.934814][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.934841][   T30] RIP: 0033:0x7f7c6bb7ff19
[ 1266.934859][   T30] RSP: 002b:00007fff48254238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1266.934882][   T30] RAX: 0000000000000000 RBX: 00007f7c6bd47ba0 RCX: 00007f7c6bb7ff19
[ 1266.934898][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1266.934913][   T30] RBP: 00007f7c6bd47ba0 R08: 0000000000034fb4 R09: 00007fff4825451f
[ 1266.934929][   T30] R10: 00000000005c927c R11: 0000000000000246 R12: 00000000001109b1
[ 1266.934945][   T30] R13: 00007f7c6bd45fa0 R14: 0000000000000032 R15: ffffffffffffffff
[ 1266.934975][   T30]  </TASK>
[ 1266.934988][   T30] 
[ 1266.934988][   T30] Showing all locks held in the system:
[ 1266.935001][   T30] 1 lock held by khungtaskd/30:
[ 1266.935015][   T30]  #0: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[ 1266.935075][   T30] 1 lock held by khugepaged/37:
[ 1266.935088][   T30]  #0: ffffffff8e2ebce8 (lock#3){+.+.}-{4:4}, at: __lru_add_drain_all+0x69/0x6f0
[ 1266.935178][   T30] 2 locks held by getty/5571:
[ 1266.935191][   T30]  #0: ffff8880356300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1266.935251][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[ 1266.935311][   T30] 2 locks held by syz-executor/5801:
[ 1266.935325][   T30] 4 locks held by syz-executor/5814:
[ 1266.935340][   T30] 3 locks held by kworker/u9:7/5830:
[ 1266.935361][   T30] 2 locks held by syz.2.2650/16300:
[ 1266.935375][   T30]  #0: ffff8880129390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x1b5/0x2a0
[ 1266.935436][   T30]  #1: ffff88801293c0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x1df/0x2a0
[ 1266.935505][   T30] 5 locks held by syz.6.2659/16336:
[ 1266.935518][   T30] 1 lock held by syz.0.2658/16341:
[ 1266.935533][   T30] 1 lock held by syz.4.2660/16345:
[ 1266.935546][   T30] 
[ 1266.935553][   T30] =============================================
[ 1266.935553][   T30] 
[ 1266.935563][   T30] NMI backtrace for cpu 1
[ 1266.935573][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1266.935597][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1266.935610][   T30] Call Trace:
[ 1266.935618][   T30]  <TASK>
[ 1266.935627][   T30]  dump_stack_lvl+0x116/0x1f0
[ 1266.935653][   T30]  nmi_cpu_backtrace+0x27b/0x390
[ 1266.935684][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1266.935706][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1266.935738][   T30]  watchdog+0xf14/0x1240
[ 1266.935774][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1266.935798][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1266.935823][   T30]  ? __kthread_parkme+0x148/0x220
[ 1266.935851][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1266.935876][   T30]  kthread+0x2c1/0x3a0
[ 1266.935900][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.935921][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.935948][   T30]  ret_from_fork+0x45/0x80
[ 1266.935968][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.935995][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1266.936035][   T30]  </TASK>
[ 1266.936043][   T30] Sending NMI from CPU 1 to CPUs 0:
[ 1266.936069][    C0] NMI backtrace for cpu 0
[ 1266.936079][    C0] CPU: 0 UID: 0 PID: 16336 Comm: syz.6.2659 Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1266.936102][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1266.936113][    C0] RIP: 0010:__lock_acquire+0x4ed/0x3c40
[ 1266.936136][    C0] Code: 00 48 8b 74 24 30 84 c0 48 ba 00 00 00 00 00 fc ff df 0f 44 c5 48 c1 ee 03 0f b6 14 16 84 d2 74 09 80 fa 03 0f 8e 04 10 00 00 <45> 8b 85 d8 0a 00 00 44 89 c3 83 eb 01 0f 88 7c 1b 00 00 48 bd 00
[ 1266.936154][    C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00000046
[ 1266.936169][    C0] RAX: 0000000000000002 RBX: 0000000000080000 RCX: 0000000000000001
[ 1266.936182][    C0] RDX: 0000000000000000 RSI: 1ffff1100d5b915b RDI: ffff88806adc8bc9
[ 1266.936195][    C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff2dc9999
[ 1266.936207][    C0] R10: ffffffff96e4cccf R11: 0000000000000005 R12: 0000000000000002
[ 1266.936219][    C0] R13: ffff88806adc8000 R14: 0000000000000040 R15: ffff88806adc8ba8
[ 1266.936233][    C0] FS:  00007f415779d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1266.936253][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1266.936267][    C0] CR2: 0000001b2f41eff8 CR3: 0000000027c4a000 CR4: 00000000003526f0
[ 1266.936280][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1266.936292][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1266.936305][    C0] Call Trace:
[ 1266.936311][    C0]  <NMI>
[ 1266.936318][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1266.936348][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1266.936366][    C0]  ? nmi_handle+0x1ac/0x5d0
[ 1266.936387][    C0]  ? __lock_acquire+0x4ed/0x3c40
[ 1266.936408][    C0]  ? default_do_nmi+0x6a/0x160
[ 1266.936434][    C0]  ? exc_nmi+0x170/0x1e0
[ 1266.936460][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1266.936487][    C0]  ? __lock_acquire+0x4ed/0x3c40
[ 1266.936513][    C0]  ? __lock_acquire+0x4ed/0x3c40
[ 1266.936534][    C0]  ? __lock_acquire+0x4ed/0x3c40
[ 1266.936555][    C0]  </NMI>
[ 1266.936561][    C0]  <IRQ>
[ 1266.936571][    C0]  ? lock_acquire.part.0+0x11b/0x380
[ 1266.936592][    C0]  ? __pfx___lock_acquire+0x10/0x10
[ 1266.936614][    C0]  ? advance_sched+0x6d2/0xc60
[ 1266.936633][    C0]  lock_acquire.part.0+0x11b/0x380
[ 1266.936654][    C0]  ? __hrtimer_run_queues+0x2be/0xae0
[ 1266.936681][    C0]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1266.936703][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1266.936728][    C0]  ? trace_lock_acquire+0x14e/0x1f0
[ 1266.936755][    C0]  ? __hrtimer_run_queues+0x2be/0xae0
[ 1266.936785][    C0]  ? lock_acquire+0x2f/0xb0
[ 1266.936804][    C0]  ? __hrtimer_run_queues+0x2be/0xae0
[ 1266.936830][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1266.936847][    C0]  _raw_spin_lock_irq+0x36/0x50
[ 1266.936865][    C0]  ? __hrtimer_run_queues+0x2be/0xae0
[ 1266.936890][    C0]  __hrtimer_run_queues+0x2be/0xae0
[ 1266.936918][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1266.936943][    C0]  ? read_tsc+0x9/0x20
[ 1266.936971][    C0]  hrtimer_interrupt+0x392/0x8e0
[ 1266.937001][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[ 1266.937025][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1266.937046][    C0]  </IRQ>
[ 1266.937052][    C0]  <TASK>
[ 1266.937059][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1266.937084][    C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90
[ 1266.937105][    C0] Code: df 55 65 48 8b 2d f4 d0 d9 74 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 8f 66 3e f6 e8 fa ac 77 f6 fb bf 01 00 00 00 <e8> 0f 9d ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 ed 15 3e
[ 1266.937123][    C0] RSP: 0018:ffffc9000d2ff458 EFLAGS: 00000202
[ 1266.937138][    C0] RAX: 0000000000002115 RBX: ffffed100d5b9000 RCX: 1ffffffff2dc9b22
[ 1266.937152][    C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: 0000000000000001
[ 1266.937164][    C0] RBP: ffff88806adc8000 R08: 0000000000000001 R09: fffffbfff2dc9998
[ 1266.937177][    C0] R10: ffffffff96e4ccc7 R11: 0000000000000006 R12: 0000000000000000
[ 1266.937189][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1266.937207][    C0]  ? preempt_schedule_irq+0x46/0x90
[ 1266.937227][    C0]  irqentry_exit+0x36/0x90
[ 1266.937247][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[ 1266.937272][    C0] RIP: 0010:queue_work_on+0x98/0x140
[ 1266.937293][    C0] Code: e8 0d e5 36 00 48 85 ed 75 44 e8 93 e2 36 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 f1 e4 36 00 48 85 db 0f 85 8d 00 00 00 <e8> 73 e2 36 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8
[ 1266.937311][    C0] RSP: 0018:ffffc9000d2ff528 EFLAGS: 00000246
[ 1266.937325][    C0] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900123b4000
[ 1266.937337][    C0] RDX: 0000000000080000 RSI: ffffffff81632152 RDI: 0000000000000007
[ 1266.937350][    C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
[ 1266.937362][    C0] R10: 0000000000000000 R11: 0000000000000009 R12: 0000000000000001
[ 1266.937373][    C0] R13: 0000000000000008 R14: ffff88801b078800 R15: 0000000000000000
[ 1266.937389][    C0]  ? queue_work_on+0xe2/0x140
[ 1266.937411][    C0]  ? queue_work_on+0xe2/0x140
[ 1266.937432][    C0]  drm_fb_helper_damage_area+0xaa/0xd0
[ 1266.937459][    C0]  bit_putcs+0x90e/0xdf0
[ 1266.937486][    C0]  ? __pfx_bit_putcs+0x10/0x10
[ 1266.937514][    C0]  ? fb_get_color_depth+0x120/0x250
[ 1266.937534][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1266.937560][    C0]  ? __pfx_bit_putcs+0x10/0x10
[ 1266.937580][    C0]  fbcon_putcs+0x364/0x480
[ 1266.937601][    C0]  fbcon_redraw+0x473/0x500
[ 1266.937623][    C0]  fbcon_scroll+0x43e/0x670
[ 1266.937643][    C0]  con_scroll+0x45e/0x690
[ 1266.937671][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80
[ 1266.937695][    C0]  lf+0x270/0x2c0
[ 1266.937720][    C0]  ? __pfx_lf+0x10/0x10
[ 1266.937745][    C0]  ? __pfx_fbcon_putcs+0x10/0x10
[ 1266.937763][    C0]  ? __rcu_read_unlock+0x2b4/0x580
[ 1266.937786][    C0]  ? __pfx_fbcon_putcs+0x10/0x10
[ 1266.937803][    C0]  do_con_write+0xc28/0x7bb0
[ 1266.937828][    C0]  ? __pfx_do_con_write+0x10/0x10
[ 1266.937846][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1266.937874][    C0]  con_write+0x23/0xb0
[ 1266.937892][    C0]  n_tty_write+0x419/0x1140
[ 1266.937917][    C0]  ? __pfx_n_tty_write+0x10/0x10
[ 1266.937938][    C0]  ? __virt_addr_valid+0x1a4/0x590
[ 1266.937963][    C0]  ? __pfx_woken_wake_function+0x10/0x10
[ 1266.937992][    C0]  ? __virt_addr_valid+0x5e/0x590
[ 1266.938016][    C0]  ? __phys_addr_symbol+0x30/0x80
[ 1266.938040][    C0]  ? __check_object_size+0x488/0x710
[ 1266.938062][    C0]  ? __pfx_n_tty_write+0x10/0x10
[ 1266.938084][    C0]  file_tty_write.constprop.0+0x506/0x9a0
[ 1266.938116][    C0]  vfs_write+0x5ae/0x1150
[ 1266.938134][    C0]  ? __pfx_tty_write+0x10/0x10
[ 1266.938162][    C0]  ? __pfx_vfs_write+0x10/0x10
[ 1266.938179][    C0]  ? do_futex+0x123/0x350
[ 1266.938197][    C0]  ? __fget_files+0x40/0x3a0
[ 1266.938221][    C0]  ksys_write+0x12b/0x250
[ 1266.938240][    C0]  ? __pfx_ksys_write+0x10/0x10
[ 1266.938261][    C0]  do_syscall_64+0xcd/0x250
[ 1266.938283][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.938307][    C0] RIP: 0033:0x7f415697ff19
[ 1266.938322][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1266.938339][    C0] RSP: 002b:00007f415779d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1266.938356][    C0] RAX: ffffffffffffffda RBX: 00007f4156b45fa0 RCX: 00007f415697ff19
[ 1266.938369][    C0] RDX: 0000000000001006 RSI: 0000000020000000 RDI: 0000000000000004
[ 1266.938382][    C0] RBP: 00007f41569f3cc8 R08: 0000000000000000 R09: 0000000000000000
[ 1266.938394][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1266.938406][    C0] R13: 0000000000000000 R14: 00007f4156b45fa0 R15: 00007fffcabf7e98
[ 1266.938424][    C0]  </TASK>
[ 1266.939067][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1266.939079][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00031-gf92f4749861b #0
[ 1266.939102][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1266.939114][   T30] Call Trace:
[ 1266.939121][   T30]  <TASK>
[ 1266.939130][   T30]  dump_stack_lvl+0x3d/0x1f0
[ 1266.939154][   T30]  panic+0x71d/0x800
[ 1266.939183][   T30]  ? __pfx_panic+0x10/0x10
[ 1266.939209][   T30]  ? __pfx__printk+0x10/0x10
[ 1266.939230][   T30]  ? ret_from_fork_asm+0x1a/0x30
[ 1266.939261][   T30]  ? __irq_work_queue_local+0xdd/0x460
[ 1266.939287][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1266.939308][   T30]  ? irq_work_queue+0x2a/0x80
[ 1266.939331][   T30]  ? watchdog+0xd7e/0x1240
[ 1266.939355][   T30]  ? watchdog+0xd71/0x1240
[ 1266.939382][   T30]  watchdog+0xd8f/0x1240
[ 1266.939411][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1266.939434][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1266.939458][   T30]  ? __kthread_parkme+0x148/0x220
[ 1266.939486][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1266.939510][   T30]  kthread+0x2c1/0x3a0
[ 1266.939534][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1266.939554][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.939581][   T30]  ret_from_fork+0x45/0x80
[ 1266.939601][   T30]  ? __pfx_kthread+0x10/0x10
[ 1266.939627][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1266.939666][   T30]  </TASK>
[ 1268.035083][   T30] Shutting down cpus with NMI
[ 1268.035357][   T30] Kernel Offset: disabled