last executing test programs:

17m45.644544155s ago: executing program 3 (id=284):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1aa) (async)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1aa)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) (async)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{}], 0x1})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

17m44.940179401s ago: executing program 3 (id=286):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001140)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xbf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

17m43.752314376s ago: executing program 3 (id=291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x76}}, 0x4008)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x21, 0x2, 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

17m36.372710809s ago: executing program 3 (id=308):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x0, 0xfc}}}}}]}}]}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
fanotify_mark(0xffffffffffffffff, 0x305, 0x40009975, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
fcntl$dupfd(r2, 0x203, r2)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
socket(0x10, 0x3, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000180)={0x0, 0x78, 0x1e0, 0x2000, 0x8, 0x2f96, 0x18, 0x1, {0x80000001, 0x1}, {0x62, 0x375, 0x1}, {0x5, 0x56e, 0x1}, {0xfffffff9, 0x1, 0x1}, 0x1, 0x0, 0x8001, 0x0, 0x1, 0x2, 0x4, 0x2, 0x4, 0x10, 0x401, 0x0, 0x23, 0x2, 0x2, 0xc})
syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c)
syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})

17m31.985132903s ago: executing program 3 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5123}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_procfs(r3, &(0x7f0000000040)='net/dev_mcast\x00')
pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c751", 0x44}, {&(0x7f0000000300)="760799c2adefb8d369be7ff80fef01cdc0475effb04db789f81feeddd5e618a7b1b8bcda55dc098caa982fce8df61a381ef652e8381d838b1bf3d5ae80e4880ceed84e4a7b2c376f714cb6d52c1e877000cd285753ee310ff555e639945a8ecc791f28ba26a5e392357a9c5d6b76230fdb946361a59a3f2ccba7332c045af9ce6fb239b5361eb1598a2726b5d535341b32faba5e01e65b949a5317", 0x9b}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc8419859921de1000000000000b0fb3bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ffd9d2dcd088983987e65275e2c67da6f64ee905d59e398097729c5796e8cb005e8b2ea1444709b0dddd74c3adf1", 0x56}], 0x1}}], 0x2, 0x40480d0)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setresgid(0xee00, 0xee01, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
setgid(0x0)
socket(0x2, 0x80805, 0x0)

17m30.892046531s ago: executing program 3 (id=323):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', <r1=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r3}, 0x38)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2e, &(0x7f0000000340)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @alu={0x7, 0x0, 0x9, 0x0, 0x9, 0xfffffffffffffffe, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xff, 0x0, 0x5, 0x401, 0x28b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xce}, @printk={@lld}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}], &(0x7f0000000280)='GPL\x00', 0x4, 0x96, &(0x7f0000000500)=""/150, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0x7, 0x4350}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='f2fs_lookup_start\x00', r4, 0x0, 0xf7}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400001, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@local, @in6=@remote, 0xffff, 0x0, 0x4}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x0, 0x0, 0x10000000}, {0x4, 0x42, 0xfffffffd}, 0x0, 0x0, 0x2, 0x0, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
write$vga_arbiter(r5, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, 0x0)

17m29.927487567s ago: executing program 32 (id=323):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', <r1=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r3}, 0x38)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2e, &(0x7f0000000340)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @alu={0x7, 0x0, 0x9, 0x0, 0x9, 0xfffffffffffffffe, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xff, 0x0, 0x5, 0x401, 0x28b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xce}, @printk={@lld}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}], &(0x7f0000000280)='GPL\x00', 0x4, 0x96, &(0x7f0000000500)=""/150, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0x7, 0x4350}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='f2fs_lookup_start\x00', r4, 0x0, 0xf7}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r3, &(0x7f0000000080), 0x0}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400001, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x25dfdbff, {{@in6=@local, @in6=@remote, 0xffff, 0x0, 0x4}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {0x0, 0x0, 0x0, 0x10000000}, {0x4, 0x42, 0xfffffffd}, 0x0, 0x0, 0x2, 0x0, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
write$vga_arbiter(r5, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11)
ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, 0x0)

11.846660985s ago: executing program 2 (id=3841):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0xee, 0x20102)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r1, &(0x7f0000000b40)=[{0x0}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000}, 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

9.258299079s ago: executing program 5 (id=3850):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
accept4$alg(r0, 0x0, 0x0, 0x80800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, 0x8)
r6 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0)
recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
shutdown(r0, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0xfffffffa)
r8 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x40}})
io_uring_enter(r8, 0x10a40, 0x0, 0x40, 0x0, 0x0)

8.241230306s ago: executing program 5 (id=3854):
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x51, 0x0, 0xffffffffffffffff, 0x0, 0x0})
openat$iommufd(0xffffffffffffff9c, 0x0, 0x2801, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0xe4c, 0x0)
fcntl$setpipe(r1, 0x407, 0x7)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[])
sendmsg$NFNL_MSG_CTHELPER_GET(r1, 0x0, 0x20040840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a80, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000740)=0x5)
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000340)=0xff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @loopback, 0x7}, 0x1c)

7.972350707s ago: executing program 0 (id=3857):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0)
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x10, 0x22, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)="ed71955787f0ec06cb8dfa68632c6e57c229ce6ed937c1347318525974d6a4ce4c34c0c511219546cad36d9ffc57fe60e1706d9aa6f3da1549ec6f7d24c481500f9219fd806497d7cd4af5afa0dd51ee2c496700b51d81b47a8c0cf37c4dac77192e86280b6b229d664b79a17557f20e4491a88f754ae91fb074788d62c6f6bc9d156183314464ec5e603e6f64eddc506f202cfdb4a4a7aaf6abf68affc0a5dc70080000005f06671bcba9538ede7279e1b1543f0ae7e57da36650e4d443c4f17e026d69cb93e96c9495648661da9bc21feec1ee26f7293ef9a7e850caa5055c2fa5dd02c20102e709375c368812039007d61aa83019d7a1", 0xf3, 0x0, 0x1, {0x3, r3}})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x8, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8851}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r4, &(0x7f00000003c0)="7f40227329abcd6499dd542473da7d78e1c2e31bca906a4613d33ef2d1b5da7bb66adbbe3344c68408d7f0d137e55c6be340d4c8608b1248d5347223b208ae30f5c4e8f238124b51479be2a0282e35aabc6dbd4f7b4af7f9d571848f5a10d4539463e9", 0x63)
r5 = socket$inet6(0xa, 0x80002, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000640)=0x2, 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x100088c7}, 0x4000050)

7.187343192s ago: executing program 0 (id=3858):
r0 = gettid()
prlimit64(r0, 0xa, &(0x7f00000000c0)={0x5, 0xf96}, &(0x7f0000000140))
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x8004)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioperm(0x0, 0xf1, 0x7)
r4 = socket(0x1e, 0x4, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r5 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)
sendto$inet(r3, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
shutdown(r1, 0x0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, 0x0)

7.107562417s ago: executing program 2 (id=3859):
socket(0x1d, 0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xf2)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2000, @fd_index=0x4, 0xb, 0x20000003, 0x8020, 0xa, 0x1, {0x2}})
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x40000000000000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, 0x80)

7.033002506s ago: executing program 5 (id=3860):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000300)=0x10)
shutdown(r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r7, &(0x7f0000000000), 0xd)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r8 = timerfd_create(0x8, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setreuid(0x0, 0x0)
timerfd_settime(r8, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x65)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ff13ac1e0001080007400000000104000680"], 0x98}}, 0x0)

5.86864211s ago: executing program 5 (id=3861):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200))

5.855305644s ago: executing program 0 (id=3862):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
sendto$inet(r0, &(0x7f00000000c0)="e1", 0x1, 0x40000, 0x0, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/198, 0xc6}], 0x1}, 0x10101)

5.706731791s ago: executing program 0 (id=3863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x70)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x18)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="0104000051e65d"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r3, 0x7, &(0x7f0000000680)=[r2], &(0x7f00000006c0)=[{0x0, 0x4, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x1}, {0x3, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x6}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x3, 0xc, 0x2}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0xfffffffa, @void, @value}, 0x94)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x80, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @time}], 0x38)
read$snapshot(r6, 0x0, 0xffffffbf)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r7=>0x0, 0x20, 0x8000, 0x80000001, 0xfffffffe, {{0x5, 0x4, 0x0, 0x2f, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @local, @empty}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d2a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274056b5d52dccdd2000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e361f3a082eb8aa4919cd0ec4d53cb4003c9c9cf536658296d715cb2774e9ef4a0ae75e49b697b3d43cf4e1dd51f2abc3c2c44c8c247db07118d594ff9943887d28b4c2ffd59fffa48d314889ca4c4d9459714bfd046b2760ff19500295f4bfb54b92186a4cc8f04f856f86e4849c9be25a6b36e0d1c9d57008bcb73e0d9d6156586b7fbdf0fe262188d091463a18511f7df0488b758729fbe36310b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000780000000000019078ac1e0001ac1414aa03059078030000141400ac1414bb0144440001e0000002000000000a01010000000b00ac1414aa000000000000000000000000ac1e410100000000ac1414aa00000000ac1414aa00000000e000000100000000000000"], 0x0)

5.336637978s ago: executing program 4 (id=3864):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
accept4$alg(r0, 0x0, 0x0, 0x80800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, 0x8)
r6 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0)
recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
shutdown(r0, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000080)=0xfffffffa)
r8 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x40}})
io_uring_enter(r8, 0x10a40, 0x0, 0x40, 0x0, 0x0)

5.252948411s ago: executing program 1 (id=3865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078000019d71010b6f9d350b8a3fc4acdf2a72bfaed997c1ec3fa9718ebd7465d28cbd275b66d60df8e37cdcc06da54559ecb69dbf179eb28e351170001199290389233b182ed07432ce2a037f9a40506fe2882cc0e6c6c6012860156136641"], 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

5.208632586s ago: executing program 0 (id=3866):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082)
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60801, 0x0)
mount$afs(0x0, 0x0, &(0x7f0000000000), 0x200000, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) (fail_nth: 4)

4.111264476s ago: executing program 4 (id=3867):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7})
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
setresuid(0xee01, 0xee00, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4010, r0, 0x0)
r2 = syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x23, 0x803, 0x10000)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
syz_open_procfs(r2, &(0x7f0000000100)='stat\x00')

4.039871867s ago: executing program 1 (id=3868):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r6, 0x82000000)
r7 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg(r7, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="a12fb8b664950fe16de785f594bb4f3a64b9af4afcc7778cb78d8516f242d73ff3be3409d6eab33eed71a6839bd606c4115820f92ab01015991b807aa49d82ddc3fdfab85e517a958aee052abe3a26423db7b9a3e01a4a617ad7089ec7b9a3e79f78e24f543400e69cc4c2b436b52c1df6def7a372135c8f600706192680420e3c54f8a8cb0cb9f5c8d6ded8fed2f12225dbe5844d4a05f5f6026bace24aac8791df794e6348711fbd19b604865f16470479da52159004c656a1243ad029080f82d8acd36994b2b850d0cc6ef1bdd554c6bdd1f1c3cf1586c96cefeefb2de38a630859f103e123dae2eb822e37050ae245f2a4", 0xf3}], 0x1, 0x0, 0x0, 0xf3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001280)="da9a43cc71c4c2894dd78294d7a8af8b218589d490846d1235ebf8dc4caa8f5b384e3df96dc3ff2c8852e07f4fc9dd7dbaa30003", 0x34}, {&(0x7f00000012c0)="96da04fde85d21295db8eab475975f64f65fbcc95dab83b9ff01f1cd15a2ab9eb81b3c", 0x23}, {&(0x7f0000001300)}, {&(0x7f0000001400)="9292000292145d2e63e9a7214d6f1ca61c1b8621f73611577b0280f73430e0b83e86e7a033fe47a61011e8681e2c1b55597bd098867e3fa8f6ce749dcf6289838499110b6fc8ba899feb20f437f8971313743feb024f8f9fe91f46755c537fa2802b6e06d799d63f8131f921566991ad5fce0ac3aeb849a165047204d0a43a98788d7c061da6eb60fe3423e2372df2681ddee923bb3da7b50ab35542dc00303fa9c1804649020da960ea7889a3a078cd5242c686ab0a53bf5e58618cb52c9b45c68f7f5f0f4b2fcfb1ed57ecc5849e1e02f1ad7ba577435f75a7", 0xda}, {&(0x7f0000000180)="640eba21b2654929b1f28db45a1cc8e35d2bcedf6a8904a8ef2296d53a89d93761291e3c46eb624eec5076b0b91426d8ab429f7fb3ecbd37a5bb82519114f7d2cc862e9149a5b9fbeebb335c680a1e063669117b014a30f422e348ea1115ab2f42c2f5594a2fdaf473787598a94844c0952357632dbaafdcf893aa430bfc33", 0x7f}], 0x5}}, {{0x0, 0x0, &(0x7f0000001f40)}}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003500)="bf4d30acc5a8722361b165e0e4814eeb82e4b13ca86eb8444d6ed5536500121acb459f103425234ccba072310881d8b51531eb006ab215feaaada15e6464eac9ab1cdcd92d8f32fb9e794a6f93356fb992423f5fae7f346b1816457e0007", 0x5e}, {&(0x7f0000003580)="1b8fca5fda08dbf067bca70435d3598e01bd2c4b16c516", 0x17}, {&(0x7f00000035c0)="648c1e81cda211fcc3b36ec4db36a1bb94290c95c50c6c2180b139c821be45790c5cd2648f9b062acde938e50f322f24d449d8022bdfef86027fd7adf8c351a4d652d9462dcc6859f373393435f6434649f6eddc98f62646873b", 0x5a}, {&(0x7f0000003640)="1c929796840947ba355acfba09bfa701fcf778fb71e1d5ac575c620a8efaa20a03efb777310d142e9888124278a2e1b45b7edd68c010ebefa789305890eeda51c5ed30f70fb4024c0c41b4346e251b395d82a9b3427d2adcb661793bf9366e96794a161be8cb834f3f14e1c43f36c8e62ae1f81a3a5fa2cb3d9de90af344af7fac61eb379eb9a949fe96fbe4691c1cc579e0cb1714abb55e46c1783e8bc846295e0afa7f575c4f1875cee5cb8137c1f7955eb2ac4207e7ea2381befe3cd122060cee23c9968ee39565f6e8b876fb94bbc14b4d5fb068270b6add66e2ae0b6b6f03a8ef45a5d16d5fcded8df8bdbe658c407507f635f04e3f295542f98dd9ff460cb0316db5aa51840a5974c0d6e15ba1a80857e170c53ec6502ad87556abd7829e9137d69b9270cbc74b12a9f64425a2b9e606c053f3252c0c2add0eb59ce7a874e23c6e8c9d208e3d7da3be3943be38982ab02847f0b71520f7e45ca32e5c2a5b9d2db3973a136d3a75afaae7bfdee1b9dbfb7cfccc4cd13bc2f99200e8a4812a784fcd6e9f60b4e609e2891a276ad3cc77015d68a63a81ff13c7e6e4d3cf32c4248e6c7578109f27f1de5418b8587824fd8344efeb92bed20711242b30b7f663ad74f82b430f9bdd3a9c4dc99bac2be1fc56df719ac3b6eef3f7a5e4c2125ad1c605c6c33c86a8d90cee63a6617a2f4a394aabdacfdd0224d95aaf786ef82daeffbb800392c2b3cfc55b6cc67611e4563fdf5642ff8254afe948fbc256b8099a6c59fbb7c29e85f41d933168c9e40bb895d47d1f91804d64bd72593132f8585bc5cc2113e73e5574cdadb1b7cb934db976e43f7dcbeec0eeb60f43f338e9dbca30c034318eaaed70efb2ee1b4b305822d3989e946ce66ac99c803da489cae2d071522d8a10fae55a4e047135e29d00ff08e00fde598f083d17617377f5782fc0fc6e11116bf347c3b448350cff0d2cb46ed7d1eaa054c701a12dd88b864fd2c33b196b0f723bd2d3b3cb515bf316e2d75cc8af57cd0e4c38c7448f92781a588ccd34f4991ae4c24dead761c201888b3b9dde1a72789bcd6a514b792ced8ad93a44b9a20829e852d109a5dbe73a668d8b60abfe87ea7de5348dc3973de97d1dd3790875e42594e84a98a1bff757127a54e7cb0964dfce09625a00413dd438e7b4a7da7a4e8df14d3bf1b62f1796be38cd62bb0211612767abb6c63b8ab6129ffdeae49ae9cf4ff91a6376e6254ed992e3221131fa7055fa1748640899f2cecfe959aa33310538adb5dc467682ca2c83c8d731a621af3d0710385cba0e1d8a11e23c776dadffe8cc85e1d59ab6362e11597124b601c981133ea710ec64682a69c9e1216e0bfd0d8f3db04c14976a6708aebfb815385c447694cd46cc3a0074415b272a364fb882f5551b505eb6fc4ce6cf8e2a9d9ad39ce4d514d1bc3591334dafca0a53928218c3be49a663328565afd6bd89a88e9ae8ba5ae32ed00b9e30c93b0059d64197855a20d0db8c33e9145e1a29597a10a8dc83db423e868209b1e3405aae8f46eb88a71650bda6a2b8048321fe53b5492b90162795a02e9e10c36c3789e2be94d415f72d06238cb29c9b68dedd4127996c23ffe2625f393cde5774fe3d1dc9f399f54917ab7acdd27dfd8664bdd6cac5b1539c6b283577a87a22874995f8458d5f05b2d5bee91385a16a4388c67bf5389bc0d7839525c8d2a011f94119a65644abb6f103f1952b3795c14c3d6280b5dbf267d72cbdedf09e614d387901ec422633429ec4993f7caed700744a3b370890dec0c00cb68ec8542f2b0ce33e9f3c098d1b5f981e4adebc42bee7bb879bf4f4e7491965ec2132ea815829ebef29991ac96cbb6e253489c32280082504b0b1a44fe3be22645f6e054e41a02c4e1df294f56a2a6eb3a300880a95ec811f742007e1b8f2f961caea932d913ec8daa15bde327e6120cc708769049e4fcde3876aa911ba4984f09e60752fba6ee2e753254d2e546e97842256904e58ac5cca4681a8c2a257a317edb8a10b65b22d3f372557b6ff8e8e21574c0d67b2f0e905970aa7b4c7b0699bf974ca9841682e6c6065c48895da3bf97b4b17ac33f41b524aa0c69aa6ce3a68f92e1e0564aaa6e795b2bb14a01db373336fbbcae5160faba70df2643a52d621534d9939e9e2b0c1a9e40879aa46a1e25145fe8240857e08f4a1058aa15a07a90aaf47e6ac88c9ddf6a6f1027787cab101b89c518a06e8a30562f55e400188b4f26f893863db2f4f3aff69264539d972c3166a5135112e56ecb7c631da403f3f70d892bb5845b68b7307a2", 0x665}], 0x4}}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000047c0)='H', 0x1}], 0x1}}], 0x5, 0x0)
r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCFLSH(r9, 0x5608, 0x0)

3.667649035s ago: executing program 4 (id=3869):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0xee, 0x20102)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000300)=""/62, 0x3e}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, 0x0, 0x0)

3.572675533s ago: executing program 0 (id=3870):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f00000001c0)=0x4)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x801)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003440000c0180600064000000000080004"], 0x7c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000600010401020000000000000000010000050a000200000000050300000005000100010000000a00020000000001020000000500010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0xa000)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={<r10=>0xffffffffffffffff, 0x0, 0x0, 0x3})
read$FUSE(r1, &(0x7f0000000580)={0x2020, 0x0, <r11=>0x0, <r12=>0x0, <r13=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000003240)=ANY=[@ANYBLOB="6806000000000000", @ANYBLOB="603e273da6ab30c10d90339118869491730b512c6331e4ac82e9d70d23334133a7bb736b40e40014885b6d388666933a1ce10eb0", @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r12, @ANYRES32=r2, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000050000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES64=r10, @ANYRES32=r13, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000030000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES16=r3, @ANYRES32=r7, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRESHEX=r9, @ANYRES64=r11, @ANYRES32=r13, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000006000000000000000000000000000000d85d00000000000003000000000000000500000081000000030000000000000001000000010000000500000000000000020000000000000001000000000000000200000000000000060000009e4f5069000000800020000006000000", @ANYRES32=r11, @ANYRESDEC=r4, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000500000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000fb0c0000ff7f0000004000007f000000", @ANYRESHEX=r10, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000005f0000000600000000000000010000800000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000014000000ff03000022f0f5365f43d69f38f55651fc4de0a60175801d000000000500000000000000000000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r13, @ANYRESOCT=r6], 0x668)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
eventfd2(0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)

3.50231063s ago: executing program 2 (id=3871):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

3.340435971s ago: executing program 2 (id=3872):
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0xffffffffffffffff, 0x0, 0x0, 0x0, @vifc_lcl_addr=@loopback, @multicast1}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
gettid()
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, 0x0, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r2, 0x0, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000001a80)="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", 0x2000, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)
syz_usb_ep_write(r0, 0x8d, 0x65, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe5")
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)

3.136051s ago: executing program 1 (id=3873):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e1", 0x1, 0x40000, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20)
recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001740)=""/198, 0xc6}], 0x1}, 0x10101)

3.04810782s ago: executing program 1 (id=3874):
socket$inet(0x2b, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x8010, r0, 0x1a11e000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0x62d40)
pipe(&(0x7f0000000200))
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2})
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x10, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fa, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)

2.969725589s ago: executing program 1 (id=3875):
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3)
syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@loopback, 0x4e22, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010101, 0x1e, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x800000000000001, 0x2cb, 0x6, 0x4000000000000}, {0x0, 0x8}, {0x0, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4055}, 0x4800)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba5, 0xd, 0xa, {0x8, 0xffffffff}, 0xd0, 0x9}})

2.154622684s ago: executing program 5 (id=3876):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000001800)='mm_page_free_batched\x00', r2}, 0x18)
r3 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r9 = accept4$unix(r7, 0x0, 0x0, 0x0)
recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeec, 0x50, 0xffffffffffffffff, 0x1080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33)

1.059421733s ago: executing program 4 (id=3877):
socket$inet(0x2b, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x8010, r0, 0x1a11e000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
syz_open_dev$cec(&(0x7f00000009c0), 0x0, 0x62d40)
pipe(&(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2})
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x10, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fa, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)

882.195999ms ago: executing program 4 (id=3878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x70)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x18)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="0104000051e65d"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r3, 0x7, &(0x7f0000000680)=[r2], &(0x7f00000006c0)=[{0x0, 0x4, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x1}, {0x3, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x6}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x3, 0xc, 0x2}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0xfffffffa, @void, @value}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r6 = fcntl$dupfd(r5, 0x0, r5)
write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x80, 0x0, 0x0, 0x0, @tick=0x3, {}, {}, @time}], 0x38)
read$snapshot(r6, 0x0, 0xffffffbf)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r7=>0x0, 0x20, 0x8000, 0x80000001, 0xfffffffe, {{0x5, 0x4, 0x0, 0x2f, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @local, @empty}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000780000000000019078ac1e0001ac1414aa03059078030000141400ac1414bb0144440001e0000002000000000a01010000000b00ac1414aa000000000000000000000000ac1e410100000000ac1414aa00000000ac1414aa00000000e000000100000000000000"], 0x0)

859.221218ms ago: executing program 1 (id=3879):
syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x121100)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x40, 0x97, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x7, 0x83, 0x1, {0x22, 0xa50}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7f, 0x8, 0xc}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x3, 0x0, 0x9, 0x40, 0x9}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x4, 0x67, 0x400, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9a, 0x1, 0x3f, 0xfff, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "cb1552829098df47326ae5917e33ced3"}]}, 0x4, [{0x2d, &(0x7f0000000140)=@string={0x2d, 0x3, "28cfb8bf2bc24fec2def4c5dbc92abdca88ee75840ee534feba315c551c4ef42473346f8855bf996d0abdd"}}, {0xd3, &(0x7f00000002c0)=@string={0xd3, 0x3, "7cc043329d9d646aa4d738f1f712e950baa4a45bbf7e2b403ffcc6a7bc702217e2bfb9a3f36847cdd61d6f18823d676a1cd0fa7b677918954dc601fa872196869729bca6d0570bc5ed9e4fd812a3821a2a4060e690208121a83dfaf3478d2d2e7452f458287239ce08e9d06c90f98b919e404f67a3856a189550fd1d966fc02a2fff7f8769cc2aa022ef2aa11cb3aa587485be3dffb1d5c30f0d5b664a375689d3ced72aa558186aeb8ff8e6a5a6b954a3e284c9cac60be4d9e5f9276ac32506e87d27dfb21b22a43d56f732c5029e41a7"}}, {0x3c, &(0x7f0000000180)=@string={0x3c, 0x3, "deac0b2ef04a28a63d6b709f552f0bd4fd33377f76518255ae6ad4e72d08aaa82a00e4a3ee55e6be452ffa4fedb1c5b24c2626ae8e45eedc406c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c09}}]})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0xc)
socket(0xa, 0x3, 0x2)
syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

797.900146ms ago: executing program 2 (id=3880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

261.172532ms ago: executing program 2 (id=3881):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x70)
timerfd_create(0x9, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}], 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r2}, 0x18)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
socket$igmp(0x2, 0x3, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)={0x180, r5, 0x500, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x14}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0xffffffffffffff73, 0x3, 0x51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
socket$kcm(0x2, 0x3, 0x2)
pread64(r4, &(0x7f0000000040)=""/211, 0xd3, 0x76)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, r1, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r2, 0x7, &(0x7f0000000680)=[r1], &(0x7f00000006c0)=[{0x0, 0x4, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x1}, {0x3, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x6}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x3, 0xc, 0x2}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0xfffffffa, @void, @value}, 0x94)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001800)={0x1, @pix={0x200, 0x7fffffff, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x6, 0x1, 0x5, 0x0, 0x6}})

174.743906ms ago: executing program 4 (id=3882):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timerfd_create(0x8, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff0500000000000000000000200000010800080002040000"], 0x34}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x480, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc4c}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7a21}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x69}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x836}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x480}}, 0x4044054)
r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14)
ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000004c0)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x1, 0x10, "649f130063a0921768d2836c5bd00eeff8433c7b78ac9fa9c3cea4f17119f71a8a7b052165879db2ab924147b037d58173d7cfad51c2cd6cc3ef605cf0758a59", "7cff0291dee1b69a812ad4a176535a23b30d787735ecf61ff594f4d0c9b39a03", [0x4, 0x1]})

0s ago: executing program 5 (id=3883):
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e00010069703667"], 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

set [1, 0] type 2 family 0 port 6081 - 0
[ 1127.495836][T19352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1127.512964][T19368] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1127.564606][T19352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.015153][   T30] audit: type=1400 audit(1742805645.515:1279): avc:  denied  { append } for  pid=19372 comm="syz.4.3341" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1128.038092][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1128.068742][T19352] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.093482][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3343'.
[ 1128.138699][T19352] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.151028][T19352] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.206094][T19380] team0: Port device team_slave_1 removed
[ 1128.219189][T19352] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.243163][T18401] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1128.301901][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3345'.
[ 1128.418547][   T30] audit: type=1400 audit(1742805645.915:1280): avc:  denied  { write } for  pid=19392 comm="syz.4.3349" name="tcp" dev="proc" ino=4026532851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[ 1128.451398][T18401] usb 2-1: Using ep0 maxpacket: 32
[ 1128.482702][T18401] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1128.539289][T19395] siw: device registration error -23
[ 1128.633275][T18401] usb 2-1: config 0 has no interface number 0
[ 1128.751514][T18401] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1128.763177][T18401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.786823][T18401] usb 2-1: Product: syz
[ 1128.791339][T18401] usb 2-1: Manufacturer: syz
[ 1128.796684][T18401] usb 2-1: SerialNumber: syz
[ 1128.884387][T18401] usb 2-1: config 0 descriptor??
[ 1128.890976][T18401] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1128.942445][   T30] audit: type=1400 audit(1742805646.435:1281): avc:  denied  { listen } for  pid=19396 comm="syz.0.3350" lport=52148 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1129.172454][T19374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1129.183287][T19374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1129.224045][T18401] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1129.437310][T18401] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[ 1129.524109][T18401] usb 2-1: USB disconnect, device number 94
[ 1129.735344][   T30] audit: type=1400 audit(1742805647.235:1282): avc:  denied  { append } for  pid=19410 comm="syz.5.3354" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[ 1129.762117][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3354'.
[ 1129.775707][   T30] audit: type=1400 audit(1742805647.255:1283): avc:  denied  { create } for  pid=19410 comm="syz.5.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1129.797661][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3354'.
[ 1129.821742][   T30] audit: type=1400 audit(1742805647.315:1284): avc:  denied  { connect } for  pid=19410 comm="syz.5.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1130.007355][T19417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3357'.
[ 1130.030785][T19418] xt_TCPMSS: Only works on TCP SYN packets
[ 1130.111991][T19423] bio_check_eod: 2 callbacks suppressed
[ 1130.112007][T19423] syz.5.3358: attempt to access beyond end of device
[ 1130.112007][T19423] nbd5: rw=0, sector=1, nr_sectors = 1 limit=0
[ 1130.133217][T19423] VFS: could not find a valid V7 on nbd5.
[ 1130.152783][T16799] Bluetooth: hci5: unexpected event for opcode 0x1408
[ 1130.854918][T19436] FAULT_INJECTION: forcing a failure.
[ 1130.854918][T19436] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1130.868105][T19436] CPU: 0 UID: 0 PID: 19436 Comm: syz.1.3362 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1130.868127][T19436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1130.868137][T19436] Call Trace:
[ 1130.868143][T19436]  <TASK>
[ 1130.868150][T19436]  dump_stack_lvl+0x16c/0x1f0
[ 1130.868178][T19436]  should_fail_ex+0x50a/0x650
[ 1130.868207][T19436]  _copy_from_user+0x2e/0xd0
[ 1130.868226][T19436]  copy_msghdr_from_user+0x99/0x160
[ 1130.868252][T19436]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1130.868281][T19436]  ? __pfx___lock_acquire+0x10/0x10
[ 1130.868313][T19436]  ___sys_recvmsg+0xdc/0x1a0
[ 1130.868338][T19436]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1130.868369][T19436]  ? __pfx_lock_release+0x10/0x10
[ 1130.868392][T19436]  ? trace_lock_acquire+0x14e/0x1f0
[ 1130.868428][T19436]  do_recvmmsg+0x2f8/0x740
[ 1130.868457][T19436]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1130.868481][T19436]  ? vfs_write+0x306/0x1150
[ 1130.868511][T19436]  ? __mutex_unlock_slowpath+0x164/0x6a0
[ 1130.868543][T19436]  ? __fget_files+0x206/0x3a0
[ 1130.868567][T19436]  __x64_sys_recvmmsg+0x239/0x290
[ 1130.868584][T19436]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1130.868609][T19436]  do_syscall_64+0xcd/0x250
[ 1130.868634][T19436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1130.868658][T19436] RIP: 0033:0x7f0fda78d169
[ 1130.868672][T19436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1130.868688][T19436] RSP: 002b:00007f0fd85f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1130.868704][T19436] RAX: ffffffffffffffda RBX: 00007f0fda9a6160 RCX: 00007f0fda78d169
[ 1130.868716][T19436] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000005
[ 1130.868726][T19436] RBP: 00007f0fd85f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1130.868737][T19436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1130.868747][T19436] R13: 0000000000000000 R14: 00007f0fda9a6160 R15: 00007ffd10188168
[ 1130.868769][T19436]  </TASK>
[ 1131.881658][   T30] audit: type=1400 audit(1742805649.345:1285): avc:  denied  { ioctl } for  pid=19446 comm="syz.1.3366" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[ 1132.129337][ T9712] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1132.129661][   T30] audit: type=1400 audit(1742805649.595:1286): avc:  denied  { name_bind } for  pid=19448 comm="syz.2.3367" src=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[ 1132.354782][ T9712] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1132.382142][ T9712] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1132.412151][ T9712] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1132.437443][T12735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1132.448216][ T9712] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1132.448844][T12735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1132.470639][ T9712] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1132.470703][T12735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1132.488654][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'.
[ 1132.499339][ T9712] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1132.503686][T12735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1132.515612][ T9712] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1132.524177][ T9712] usb 2-1: Product: syz
[ 1132.528436][ T9712] usb 2-1: Manufacturer: syz
[ 1132.533500][T12735] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1132.539396][ T9712] cdc_wdm 2-1:1.0: skipping garbage
[ 1132.540633][T12735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1132.564680][ T9712] cdc_wdm 2-1:1.0: skipping garbage
[ 1132.580569][ T9712] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1132.589128][T19455] lo speed is unknown, defaulting to 1000
[ 1132.600841][ T9712] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1132.663496][T18401] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1132.873095][T18401] usb 5-1: Using ep0 maxpacket: 32
[ 1132.947207][T13978] usb 2-1: USB disconnect, device number 95
[ 1132.954048][T18401] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 1132.962141][T18401] usb 5-1: config 0 has no interface number 0
[ 1132.974402][T18401] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1133.002654][T18401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.017690][T18401] usb 5-1: Product: syz
[ 1133.029770][T18401] usb 5-1: Manufacturer: syz
[ 1133.040740][T18401] usb 5-1: SerialNumber: syz
[ 1133.059687][T19455] chnl_net:caif_netlink_parms(): no params data found
[ 1133.067745][T18401] usb 5-1: config 0 descriptor??
[ 1133.074495][T18401] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1133.114955][T19455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.122055][T19455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.129353][T19455] bridge_slave_0: entered allmulticast mode
[ 1133.136961][T19455] bridge_slave_0: entered promiscuous mode
[ 1133.144770][T19455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.151872][T19455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.159901][T19455] bridge_slave_1: entered allmulticast mode
[ 1133.166847][T19455] bridge_slave_1: entered promiscuous mode
[ 1133.198189][T19455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1133.209620][T19455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1133.242219][T19455] team0: Port device team_slave_0 added
[ 1133.255446][T19455] team0: Port device team_slave_1 added
[ 1133.279062][T19456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1133.287736][T19456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1133.320890][T18401] usb 5-1: qt2_attach - failed to power on unit: -71
[ 1133.333195][T18401] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[ 1133.356966][T19455] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1133.364399][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.406367][T18401] usb 5-1: USB disconnect, device number 85
[ 1133.407337][ T9712] usb 3-1: new low-speed USB device number 103 using dummy_hcd
[ 1133.414088][T19455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1133.435848][T19455] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1133.442938][T19455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1133.470548][T19455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1133.497853][T19455] hsr_slave_0: entered promiscuous mode
[ 1133.505071][T19455] hsr_slave_1: entered promiscuous mode
[ 1133.510835][T19455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1133.518519][T19455] Cannot create hsr debugfs directory
[ 1133.567443][ T9712] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1133.590577][ T9712] usb 3-1: config 1 interface 0 altsetting 180 endpoint 0x82 is Bulk; changing to Interrupt
[ 1133.601483][ T9712] usb 3-1: config 1 interface 0 altsetting 180 endpoint 0x3 is Bulk; changing to Interrupt
[ 1133.640771][ T9712] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1133.686671][ T9712] usb 3-1: string descriptor 0 read error: -22
[ 1133.729327][ T9712] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1133.813403][ T9712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.949538][T19467] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1133.993221][T19467] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1134.023764][ T9712] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1134.171594][T19455] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.188352][T12735] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1134.199427][T12735] Bluetooth: hci5: Injecting HCI hardware error event
[ 1134.208453][T16799] Bluetooth: hci5: hardware error 0x00
[ 1134.225552][   T30] audit: type=1400 audit(1742805651.725:1287): avc:  denied  { read } for  pid=19488 comm="syz.0.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1134.309210][T18401] usb 3-1: USB disconnect, device number 103
[ 1134.577954][T19455] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.590401][T19492] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1134.682651][T12735] Bluetooth: hci1: command tx timeout
[ 1134.921087][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'.
[ 1135.247336][T19455] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.254002][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'.
[ 1135.328737][T19494] bond1: entered promiscuous mode
[ 1135.339544][   T30] audit: type=1400 audit(1742805652.825:1288): avc:  denied  { read } for  pid=19496 comm="syz.2.3379" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1135.369044][T19494] bond1: entered allmulticast mode
[ 1135.384964][T19501] fuse: Bad value for 'user_id'
[ 1135.411535][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3378'.
[ 1135.421456][T19501] fuse: Bad value for 'user_id'
[ 1135.426734][   T30] audit: type=1400 audit(1742805652.825:1289): avc:  denied  { open } for  pid=19496 comm="syz.2.3379" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1135.451301][   T30] audit: type=1400 audit(1742805652.825:1290): avc:  denied  { map } for  pid=19496 comm="syz.2.3379" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1135.543534][T19455] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.580082][T19494] batadv1: entered promiscuous mode
[ 1135.605683][T19494] batadv1: entered allmulticast mode
[ 1135.642453][T19495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=19495 comm=syz.4.3378
[ 1135.739966][T19494] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1135.750039][T19494] bond1: (slave batadv1): Enslaving as an active interface with an up link
[ 1136.013989][T19455] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1136.028264][T19455] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1136.037692][T19507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1136.059133][T19455] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1136.088799][T19455] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1136.169092][T19455] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1136.269822][T16799] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1136.317637][T19455] 8021q: adding VLAN 0 to HW filter on device team0
[ 1136.354087][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.361200][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1136.399681][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1136.406816][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1136.419997][   T30] audit: type=1400 audit(1742805653.915:1291): avc:  denied  { execute } for  pid=19512 comm="syz.0.3384" path=2F6D656D66643A70726F644DB0EA0706BEAE6E2FCE34B7C1EFBA219D0D5374A23409202864656C6574656429 dev="hugetlbfs" ino=71944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 1136.643501][ T5871] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 1136.743212][T16799] Bluetooth: hci1: command tx timeout
[ 1136.778548][T19455] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1136.940844][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1137.518720][ T5871] usb 5-1: not running at top speed; connect to a high speed hub
[ 1137.527737][ T5871] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[ 1137.536929][ T5871] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.581109][T19532] lo speed is unknown, defaulting to 1000
[ 1137.614811][ T5871] usb 5-1: config 4 has no interface number 0
[ 1137.624402][ T5871] usb 5-1: string descriptor 0 read error: -22
[ 1137.630856][ T5871] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1137.640173][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1137.660538][ T5871] usb 5-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[ 1137.667647][ T5871] usb 5-1: No valid video chain found.
[ 1137.741564][T19455] veth0_vlan: entered promiscuous mode
[ 1137.770551][T19455] veth1_vlan: entered promiscuous mode
[ 1137.812044][T19455] veth0_macvtap: entered promiscuous mode
[ 1137.836192][T19455] veth1_macvtap: entered promiscuous mode
[ 1137.857863][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.916299][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.958138][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.958162][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.958173][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.958187][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.958197][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.958211][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.958223][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1137.958235][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1137.959184][T19455] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1137.963228][ T5871] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1137.968244][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.087928][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.101951][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.120051][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.129911][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.163190][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.178890][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.191407][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.203439][T19455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1138.214227][T19455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1138.225017][T19455] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1138.236153][T19455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.244922][T19455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.245719][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1138.255879][T19455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.279453][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1138.289546][T19455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.293332][ T5871] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[ 1138.304796][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[ 1138.312982][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.316647][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'.
[ 1138.330604][ T5871] usb 3-1: config 0 descriptor??
[ 1138.344220][   T26] usb 5-1: USB disconnect, device number 86
[ 1138.462371][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.483701][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1138.537719][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1138.553223][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1138.609677][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[ 1138.615999][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1138.626428][ T5871] usb 3-1: USB disconnect, device number 104
[ 1138.823911][T16799] Bluetooth: hci1: command tx timeout
[ 1139.115970][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3395'.
[ 1139.125381][T19564] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3395'.
[ 1139.280522][   T30] audit: type=1400 audit(1742805656.775:1292): avc:  denied  { open } for  pid=19552 comm="syz.2.3393" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1139.306627][   T30] audit: type=1400 audit(1742805656.775:1293): avc:  denied  { ioctl } for  pid=19552 comm="syz.2.3393" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x541d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[ 1139.448313][T13124] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1139.619875][T19575] 9pnet: p9_errstr2errno: server reported unknown error 184467440737
[ 1140.174451][ T5871] usb 5-1: new full-speed USB device number 87 using dummy_hcd
[ 1140.255184][T19574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3398'.
[ 1140.266182][T19574] bridge_slave_1: left allmulticast mode
[ 1140.271824][T19574] bridge_slave_1: left promiscuous mode
[ 1140.277562][T19574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.308545][T19574] bridge_slave_0: left allmulticast mode
[ 1140.314553][T19574] bridge_slave_0: left promiscuous mode
[ 1140.320233][T19574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.395217][ T5871] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1140.412348][ T5871] usb 5-1: not running at top speed; connect to a high speed hub
[ 1140.421145][ T5871] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[ 1140.429559][ T5871] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1140.443943][ T5871] usb 5-1: config 4 has no interface number 0
[ 1140.452814][ T5871] usb 5-1: string descriptor 0 read error: -22
[ 1140.456375][T19578] lo speed is unknown, defaulting to 1000
[ 1140.459228][ T5871] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1140.476072][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.488974][ T5871] usb 5-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[ 1140.496448][ T5871] usb 5-1: No valid video chain found.
[ 1140.563275][T18401] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1140.940430][T19587] Cannot find add_set index 0 as target
[ 1140.943928][T16799] Bluetooth: hci1: command tx timeout
[ 1140.970066][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'.
[ 1140.973121][T18401] usb 3-1: Using ep0 maxpacket: 8
[ 1140.978928][T18401] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[ 1140.978952][T18401] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1140.978970][T18401] usb 3-1: config 0 has no interface number 0
[ 1140.989677][T18401] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1140.989694][T18401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1140.989705][T18401] usb 3-1: Product: syz
[ 1140.989713][T18401] usb 3-1: Manufacturer: syz
[ 1140.989722][T18401] usb 3-1: SerialNumber: syz
[ 1140.995690][T18401] usb 3-1: config 0 descriptor??
[ 1141.076135][T18401] usb 5-1: USB disconnect, device number 87
[ 1141.242587][ T5871] usb 3-1: USB disconnect, device number 105
[ 1142.203131][   T30] audit: type=1400 audit(1742805659.465:1294): avc:  denied  { connect } for  pid=19596 comm="syz.0.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1142.421960][T19606] netlink: 'syz.5.3407': attribute type 1 has an invalid length.
[ 1142.429959][T19606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3407'.
[ 1142.742074][T19608] 9pnet_fd: Insufficient options for proto=fd
[ 1142.853983][T19614] siw: device registration error -23
[ 1143.270287][   T30] audit: type=1400 audit(1742805660.745:1295): avc:  denied  { connect } for  pid=19618 comm="syz.4.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1143.315963][   T30] audit: type=1400 audit(1742805660.795:1296): avc:  denied  { shutdown } for  pid=19618 comm="syz.4.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1143.391418][   T30] audit: type=1400 audit(1742805660.825:1297): avc:  denied  { ioctl } for  pid=19618 comm="syz.4.3411" path="socket:[73292]" dev="sockfs" ino=73292 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1143.416239][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1144.401999][   T30] audit: type=1400 audit(1742805661.895:1298): avc:  denied  { write } for  pid=19638 comm="syz.4.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1144.595019][T19646] (syz.4.3416,19646,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1144.605489][   T30] audit: type=1326 audit(1742805661.925:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19639 comm="syz.1.3417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fda78d169 code=0x0
[ 1144.605646][   T30] audit: type=1400 audit(1742805661.925:1300): avc:  denied  { connect } for  pid=19638 comm="syz.4.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1144.605754][   T30] audit: type=1400 audit(1742805661.925:1301): avc:  denied  { listen } for  pid=19638 comm="syz.4.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[ 1144.669441][T19646] (syz.4.3416,19646,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1144.988085][T19640] netlink: 'syz.4.3416': attribute type 1 has an invalid length.
[ 1144.995859][T19640] netlink: 'syz.4.3416': attribute type 4 has an invalid length.
[ 1145.003624][T19640] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3416'.
[ 1145.026659][   T30] audit: type=1400 audit(1742805662.525:1302): avc:  denied  { connect } for  pid=19623 comm="syz.0.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1145.046223][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1145.649925][T19657] netlink: 'syz.2.3421': attribute type 2 has an invalid length.
[ 1145.660470][T19659] netlink: 'syz.4.3420': attribute type 1 has an invalid length.
[ 1145.668222][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'.
[ 1146.908922][T19684] SELinux:  Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped).
[ 1147.002309][T19685] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3428'.
[ 1148.084732][   T30] audit: type=1400 audit(1742805665.575:1303): avc:  denied  { relabelto } for  pid=19683 comm="syz.1.3429" name="syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0"
[ 1148.334183][   T30] audit: type=1400 audit(1742805665.615:1304): avc:  denied  { associate } for  pid=19683 comm="syz.1.3429" name="syz1" dev="cgroup2" ino=38 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:kmsg_device_t:s0"
[ 1148.655430][T19692] siw: device registration error -23
[ 1148.829532][T19684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19684 comm=syz.1.3429
[ 1148.876428][   T30] audit: type=1400 audit(1742805666.375:1305): avc:  denied  { read } for  pid=19700 comm="syz.4.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1148.923261][ T5871] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1149.143264][ T5871] usb 6-1: Using ep0 maxpacket: 32
[ 1149.152624][ T5871] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.163119][ T5871] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1149.248369][   T30] audit: type=1400 audit(1742805666.715:1306): avc:  denied  { setopt } for  pid=19702 comm="syz.2.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1149.384530][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1149.449133][ T5871] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1149.601835][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.612497][ T5871] usb 6-1: config 0 descriptor??
[ 1149.617927][T15267] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1149.895298][T15267] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1149.906333][T15267] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1149.915444][T15267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1149.925527][T15267] usb 2-1: config 0 descriptor??
[ 1150.079660][   T26] usb 5-1: new full-speed USB device number 88 using dummy_hcd
[ 1150.097342][T15267] pwc: Askey VC010 type 2 USB webcam detected.
[ 1150.105579][ T5871] corsair-cpro 0003:1B1C:0C10.002C: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0
[ 1150.122555][   T30] audit: type=1400 audit(1742805667.615:1307): avc:  denied  { write } for  pid=19713 comm="syz.0.3440" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1150.214234][ T5871] corsair-cpro 0003:1B1C:0C10.002C: probe with driver corsair-cpro failed with error -38
[ 1150.362701][   T26] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1150.579333][T15267] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1150.593207][   T26] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1150.606384][T15267] pwc: recv_control_msg error -32 req 02 val 2700
[ 1150.612940][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1150.619730][T15267] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1150.626345][   T26] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[ 1150.635465][   T30] audit: type=1400 audit(1742805668.095:1308): avc:  denied  { map } for  pid=19696 comm="syz.5.3433" path="/dev/swradio0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1150.669019][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.731563][T18401] usb 6-1: USB disconnect, device number 87
[ 1150.743913][   T26] usb 5-1: config 0 descriptor??
[ 1150.752023][T19717] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1150.851323][T15267] pwc: recv_control_msg error -32 req 04 val 1000
[ 1150.859155][T15267] pwc: recv_control_msg error -32 req 04 val 1300
[ 1150.869233][T15267] pwc: recv_control_msg error -32 req 04 val 1400
[ 1150.882710][T15267] pwc: recv_control_msg error -32 req 02 val 2000
[ 1150.883367][T19712] tmpfs: Bad value for 'nr_inodes'
[ 1150.893090][   T30] audit: type=1400 audit(1742805668.385:1309): avc:  denied  { mounton } for  pid=19710 comm="syz.1.3438" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:kmsg_device_t:s0"
[ 1150.922173][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1150.937450][T15267] pwc: recv_control_msg error -32 req 02 val 2100
[ 1151.150870][T15267] pwc: recv_control_msg error -32 req 02 val 2500
[ 1151.164265][T19717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.172897][T19717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.196106][   T26] wacom 0003:056A:0301.002D: item fetching failed at offset 4/5
[ 1151.222918][   T26] wacom 0003:056A:0301.002D: parse failed
[ 1151.235788][   T26] wacom 0003:056A:0301.002D: probe with driver wacom failed with error -22
[ 1151.416242][T15267] pwc: recv_control_msg error -71 req 02 val 2600
[ 1151.443349][T15267] pwc: recv_control_msg error -71 req 02 val 2900
[ 1151.459114][T15267] pwc: recv_control_msg error -71 req 02 val 2800
[ 1151.525951][T15267] pwc: recv_control_msg error -71 req 04 val 1100
[ 1151.533310][T15267] pwc: recv_control_msg error -71 req 04 val 1200
[ 1151.571860][T15267] pwc: Registered as video103.
[ 1151.602673][T15267] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input141
[ 1151.638870][T15267] usb 2-1: USB disconnect, device number 96
[ 1152.325218][T19745] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1152.880702][T18401] usb 5-1: USB disconnect, device number 88
[ 1153.280479][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'.
[ 1153.803128][   T26] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[ 1153.920452][T19782] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1154.094573][   T26] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1154.121668][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1154.190230][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1154.217206][ T8030] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1154.280994][   T26] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1154.310146][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.343330][T13978] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1154.352242][   T26] usb 6-1: Product: syz
[ 1154.361642][   T26] usb 6-1: Manufacturer: syz
[ 1154.400582][   T30] audit: type=1400 audit(1742805671.895:1310): avc:  denied  { listen } for  pid=19791 comm="syz.1.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1154.432535][   T26] usb 6-1: SerialNumber: syz
[ 1154.462258][   T26] usb 6-1: config 0 descriptor??
[ 1154.492140][T19770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1154.553109][   T26] rc_core: IR keymap rc-streamzap not found
[ 1154.554233][T13978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1154.559017][   T26] Registered IR keymap rc-empty
[ 1154.588836][T13978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1154.604270][T13978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1154.622326][T19792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19792 comm=syz.1.3464
[ 1154.640693][T13978] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1154.643527][   T26] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1154.649923][T13978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.684279][   T30] audit: type=1400 audit(1742805672.185:1311): avc:  denied  { read } for  pid=19791 comm="syz.1.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1154.693860][   T26] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input142
[ 1154.731468][T13978] usb 3-1: config 0 descriptor??
[ 1154.850932][   T30] audit: type=1400 audit(1742805672.345:1312): avc:  denied  { ioctl } for  pid=19769 comm="syz.5.3458" path="socket:[72402]" dev="sockfs" ino=72402 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1155.054039][T19803] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3466'.
[ 1155.106109][T19803] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1155.127879][   T30] audit: type=1400 audit(1742805672.625:1313): avc:  denied  { create } for  pid=19802 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1155.165460][T13978] waltop 0003:172F:0501.002E: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0
[ 1155.179082][   T30] audit: type=1400 audit(1742805672.625:1314): avc:  denied  { bind } for  pid=19802 comm="syz.4.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[ 1155.264868][   T30] audit: type=1400 audit(1742805672.745:1315): avc:  denied  { getopt } for  pid=19805 comm="syz.1.3467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1155.612550][T19813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1155.621395][T19813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1155.642512][T13978] usb 3-1: USB disconnect, device number 106
[ 1155.649418][T19814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1155.658392][T19814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1156.157151][   T30] audit: type=1326 audit(1742805673.645:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.5.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3838d169 code=0x7fc00000
[ 1156.309349][T13978] usb 6-1: USB disconnect, device number 88
[ 1156.484786][T19827] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1156.810553][   T30] audit: type=1400 audit(1742805674.085:1317): avc:  denied  { write } for  pid=19823 comm="syz.0.3472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1157.376922][T13978] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1157.784875][T13978] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1158.425352][T13978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.471427][T13978] usb 5-1: config 0 descriptor??
[ 1158.713909][T13978] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[ 1158.741959][T13978] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1159.152753][T13978] [drm:udl_init] *ERROR* Selecting channel failed
[ 1159.202068][T13978] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[ 1159.227756][T13978] [drm] Initialized udl on minor 2
[ 1159.251412][T13978] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1159.267100][T13978] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1159.274996][ T5937] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1159.283932][ T5937] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1159.292217][T13978] usb 5-1: USB disconnect, device number 89
[ 1159.584886][   T30] audit: type=1400 audit(1742805677.085:1318): avc:  denied  { read } for  pid=19860 comm="syz.0.3484" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1159.616125][   T30] audit: type=1400 audit(1742805677.085:1319): avc:  denied  { open } for  pid=19860 comm="syz.0.3484" path="/106/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[ 1159.663177][ T5937] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1159.728557][   T30] audit: type=1326 audit(1742805677.215:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff8d169 code=0x7ffc0000
[ 1159.800636][   T30] audit: type=1326 audit(1742805677.215:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0ff8d169 code=0x7ffc0000
[ 1159.830812][   T30] audit: type=1326 audit(1742805677.215:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19865 comm="syz.0.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbb0ff8d169 code=0x7ffc0000
[ 1159.858727][ T5937] usb 2-1: Using ep0 maxpacket: 8
[ 1159.872940][ T5937] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1159.881466][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1159.893158][ T5937] usb 2-1: config 0 has no interface number 0
[ 1159.901244][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1159.910558][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.923156][ T5937] usb 2-1: Product: syz
[ 1159.928098][ T5937] usb 2-1: Manufacturer: syz
[ 1159.932898][ T5937] usb 2-1: SerialNumber: syz
[ 1159.943697][ T5937] usb 2-1: config 0 descriptor??
[ 1160.017166][T19871] x_tables: duplicate underflow at hook 2
[ 1160.063451][T18401] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1160.112142][T19873] netlink: 'syz.5.3488': attribute type 1 has an invalid length.
[ 1160.219468][T18401] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1160.235329][ T5903] usb 2-1: USB disconnect, device number 97
[ 1160.251607][T19873] block device autoloading is deprecated and will be removed.
[ 1160.259329][T18401] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1160.264474][T19873] syz.5.3488: attempt to access beyond end of device
[ 1160.264474][T19873] md0: rw=2048, sector=521328, nr_sectors = 8 limit=0
[ 1160.270542][T18401] usb 5-1: New USB device found, idVendor=89b7, idProduct=4050, bcdDevice= 0.11
[ 1160.291239][T18401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1160.301210][T18401] usb 5-1: SerialNumber: syz
[ 1160.594202][T18401] usb 5-1: unknown interface protocol 0xff, assuming v1
[ 1160.601730][T18401] usb 5-1: cannot find UAC_HEADER
[ 1161.196720][T19882] FAULT_INJECTION: forcing a failure.
[ 1161.196720][T19882] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1161.209991][T19882] CPU: 0 UID: 0 PID: 19882 Comm: syz.2.3491 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1161.210012][T19882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1161.210023][T19882] Call Trace:
[ 1161.210028][T19882]  <TASK>
[ 1161.210035][T19882]  dump_stack_lvl+0x16c/0x1f0
[ 1161.210065][T19882]  should_fail_ex+0x50a/0x650
[ 1161.210095][T19882]  _copy_to_user+0x32/0xd0
[ 1161.210114][T19882]  simple_read_from_buffer+0xd0/0x160
[ 1161.210140][T19882]  proc_fail_nth_read+0x198/0x270
[ 1161.210165][T19882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1161.210196][T19882]  ? rw_verify_area+0xcf/0x680
[ 1161.210218][T19882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1161.210240][T19882]  vfs_read+0x1df/0xbf0
[ 1161.210266][T19882]  ? __fget_files+0x1fc/0x3a0
[ 1161.210284][T19882]  ? __pfx___mutex_lock+0x10/0x10
[ 1161.210309][T19882]  ? __pfx_vfs_read+0x10/0x10
[ 1161.210342][T19882]  ? __fget_files+0x206/0x3a0
[ 1161.210367][T19882]  ksys_read+0x12b/0x250
[ 1161.210392][T19882]  ? __pfx_ksys_read+0x10/0x10
[ 1161.210425][T19882]  do_syscall_64+0xcd/0x250
[ 1161.210451][T19882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.210479][T19882] RIP: 0033:0x7f0b4738bb7c
[ 1161.210493][T19882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1161.210509][T19882] RSP: 002b:00007f0b4810e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1161.210526][T19882] RAX: ffffffffffffffda RBX: 00007f0b475a6080 RCX: 00007f0b4738bb7c
[ 1161.210538][T19882] RDX: 000000000000000f RSI: 00007f0b4810e0a0 RDI: 0000000000000006
[ 1161.210549][T19882] RBP: 00007f0b4810e090 R08: 0000000000000000 R09: 0000000000000000
[ 1161.210559][T19882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1161.210569][T19882] R13: 0000000000000000 R14: 00007f0b475a6080 R15: 00007fff10556b78
[ 1161.210593][T19882]  </TASK>
[ 1161.707283][T18401] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1161.718373][T18401] usb 5-1: USB disconnect, device number 90
[ 1164.293130][ T5903] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1164.714319][ T5903] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1164.726261][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1164.738530][ T5903] usb 6-1: config 0 descriptor??
[ 1164.747892][ T5903] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1165.151759][ T5903] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[ 1165.242224][T19925] syzkaller1: entered promiscuous mode
[ 1165.268144][T19925] syzkaller1: entered allmulticast mode
[ 1165.294392][T19927] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3504'.
[ 1165.459286][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1165.459302][   T30] audit: type=1400 audit(1742805682.955:1333): avc:  denied  { read } for  pid=19928 comm="syz.0.3505" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1165.519608][   T30] audit: type=1400 audit(1742805683.005:1334): avc:  denied  { open } for  pid=19928 comm="syz.0.3505" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1165.519647][   T30] audit: type=1400 audit(1742805683.005:1335): avc:  denied  { ioctl } for  pid=19928 comm="syz.0.3505" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1165.542408][T19934] FAULT_INJECTION: forcing a failure.
[ 1165.542408][T19934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1165.542436][T19934] CPU: 1 UID: 0 PID: 19934 Comm: syz.4.3508 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1165.542454][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1165.542463][T19934] Call Trace:
[ 1165.542468][T19934]  <TASK>
[ 1165.542475][T19934]  dump_stack_lvl+0x16c/0x1f0
[ 1165.542502][T19934]  should_fail_ex+0x50a/0x650
[ 1165.542530][T19934]  _copy_from_user+0x2e/0xd0
[ 1165.542547][T19934]  copy_msghdr_from_user+0x99/0x160
[ 1165.542571][T19934]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1165.542606][T19934]  ___sys_sendmsg+0xff/0x1e0
[ 1165.542631][T19934]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1165.542664][T19934]  ? __pfx_lock_release+0x10/0x10
[ 1165.542687][T19934]  ? trace_lock_acquire+0x14e/0x1f0
[ 1165.542713][T19934]  ? __fget_files+0x206/0x3a0
[ 1165.542736][T19934]  __sys_sendmsg+0x16e/0x220
[ 1165.542760][T19934]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1165.542799][T19934]  do_syscall_64+0xcd/0x250
[ 1165.542823][T19934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.542845][T19934] RIP: 0033:0x7f56f198d169
[ 1165.542859][T19934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1165.542876][T19934] RSP: 002b:00007f56f2869038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1165.542892][T19934] RAX: ffffffffffffffda RBX: 00007f56f1ba5fa0 RCX: 00007f56f198d169
[ 1165.542910][T19934] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 0000000000000003
[ 1165.542921][T19934] RBP: 00007f56f2869090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.542931][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1165.542941][T19934] R13: 0000000000000000 R14: 00007f56f1ba5fa0 R15: 00007fff4db78f58
[ 1165.542964][T19934]  </TASK>
[ 1165.598266][ T5903] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[ 1166.034182][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1166.081516][ T9712] usb 6-1: USB disconnect, device number 89
[ 1167.213118][T18401] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1167.343232][T18401] usb 6-1: device descriptor read/64, error -71
[ 1167.583693][T18401] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1167.646575][   T30] audit: type=1400 audit(1742805685.145:1336): avc:  denied  { ioctl } for  pid=19964 comm="syz.4.3516" path="socket:[72638]" dev="sockfs" ino=72638 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1167.733149][T18401] usb 6-1: device descriptor read/64, error -71
[ 1167.843451][T18401] usb usb6-port1: attempt power cycle
[ 1167.873101][   T52] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1168.043079][   T52] usb 3-1: Using ep0 maxpacket: 32
[ 1168.049530][   T52] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 1168.073157][   T52] usb 3-1: config 0 has no interface number 0
[ 1168.083463][   T30] audit: type=1400 audit(1742805685.575:1337): avc:  denied  { ioctl } for  pid=19971 comm="syz.1.3518" path="socket:[74361]" dev="sockfs" ino=74361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[ 1168.122843][   T52] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1168.132048][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.140317][   T52] usb 3-1: Product: syz
[ 1168.144564][   T52] usb 3-1: Manufacturer: syz
[ 1168.149166][   T52] usb 3-1: SerialNumber: syz
[ 1168.155676][   T52] usb 3-1: config 0 descriptor??
[ 1168.161749][   T52] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1168.183288][T13978] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[ 1168.193148][T18401] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1168.226221][T18401] usb 6-1: device descriptor read/8, error -71
[ 1168.344795][T13978] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1168.374977][T19963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1168.383673][T19963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1168.400477][   T52] usb 3-1: qt2_attach - failed to power on unit: -71
[ 1168.402403][T13978] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1168.407371][   T52] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[ 1168.421486][T13978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.427159][   T52] usb 3-1: USB disconnect, device number 107
[ 1168.438679][T13978] usb 5-1: Product: syz
[ 1168.438697][T13978] usb 5-1: Manufacturer: syz
[ 1168.438712][T13978] usb 5-1: SerialNumber: syz
[ 1168.441829][T13978] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1168.584761][T19978] mkiss: ax0: crc mode is auto.
[ 1169.067923][T18401] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1169.093508][T18401] usb 6-1: device descriptor read/8, error -71
[ 1169.203859][T18401] usb usb6-port1: unable to enumerate USB device
[ 1169.685796][T13978] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 1169.703875][T13978] usb 5-1: USB disconnect, device number 91
[ 1169.774834][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3523'.
[ 1169.832735][   T30] audit: type=1400 audit(1742805687.325:1338): avc:  denied  { ioctl } for  pid=19996 comm="syz.5.3525" path="socket:[72690]" dev="sockfs" ino=72690 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1169.860921][T19997] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[ 1169.888476][T19997] audit: out of memory in audit_log_start
[ 1170.047220][   T30] audit: type=1400 audit(1742805687.545:1339): avc:  denied  { bind } for  pid=19999 comm="syz.5.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1170.142985][   T30] audit: type=1400 audit(1742805687.545:1340): avc:  denied  { name_bind } for  pid=19999 comm="syz.5.3526" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[ 1170.163976][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.276079][   T30] audit: type=1400 audit(1742805687.545:1341): avc:  denied  { node_bind } for  pid=19999 comm="syz.5.3526" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1171.332763][   T30] audit: type=1400 audit(1742805688.795:1342): avc:  denied  { bind } for  pid=20005 comm="syz.1.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1171.836906][T20018] tls_set_device_offload_rx: netdev not found
[ 1172.031774][T20027] can0: slcan on ptm0.
[ 1172.105491][T20026] can0 (unregistered): slcan off ptm0.
[ 1173.572461][   T30] audit: type=1400 audit(1742805691.065:1343): avc:  denied  { mounton } for  pid=20058 comm="syz.0.3543" path="/117/file0" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[ 1173.618654][T13978] IPVS: starting estimator thread 0...
[ 1173.627751][T20031] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1173.713269][T20065] IPVS: using max 53 ests per chain, 127200 per kthread
[ 1174.949090][T20080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1175.413309][   T30] audit: type=1400 audit(1742805692.865:1344): avc:  denied  { create } for  pid=20089 comm="syz.0.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1176.517911][T20100] siw: device registration error -23
[ 1177.167727][T20126] netlink: 'syz.1.3560': attribute type 2 has an invalid length.
[ 1177.227731][   T30] audit: type=1400 audit(1742805694.715:1345): avc:  denied  { ioctl } for  pid=20120 comm="syz.5.3561" path="/dev/usbmon7" dev="devtmpfs" ino=742 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1177.588156][T20138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3564'.
[ 1177.710567][T20140] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1178.308263][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'.
[ 1178.784376][T20157] NILFS (nullb0): couldn't find nilfs on the device
[ 1180.093245][   T52] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1180.273381][   T52] usb 5-1: Using ep0 maxpacket: 32
[ 1180.284775][   T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1180.360524][   T52] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 1180.392448][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.458756][   T52] usb 5-1: Product: syz
[ 1180.476207][   T52] usb 5-1: Manufacturer: syz
[ 1180.482073][   T52] usb 5-1: SerialNumber: syz
[ 1180.502948][   T52] usb 5-1: config 0 descriptor??
[ 1180.526377][T20169] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1180.534966][T20176] lo speed is unknown, defaulting to 1000
[ 1180.542907][   T52] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1180.566060][   T52] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1180.581208][   T52] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input143
[ 1180.752809][ T5903] usb 5-1: USB disconnect, device number 92
[ 1180.752925][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1180.852551][T20190] Option '    ' to dns_resolver key: bad/missing value
[ 1180.868468][T20188] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1180.954401][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[ 1181.215976][T20190] lo speed is unknown, defaulting to 1000
[ 1181.455462][   T30] audit: type=1400 audit(1742805698.955:1346): avc:  denied  { bind } for  pid=20207 comm="syz.4.3587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1181.793395][T13978] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1181.930260][   T30] audit: type=1400 audit(1742805699.425:1347): avc:  denied  { getopt } for  pid=20213 comm="syz.2.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1181.951199][   T30] audit: type=1400 audit(1742805699.425:1348): avc:  denied  { ioctl } for  pid=20213 comm="syz.2.3588" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1181.974250][T13978] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1181.987752][T13978] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1181.996920][T13978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1182.022684][T13978] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1182.237215][T20204] input: syz0 as /devices/virtual/input/input144
[ 1182.279427][   T30] audit: type=1400 audit(1742805699.775:1349): avc:  denied  { read } for  pid=20225 comm="syz.2.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1182.721899][   T30] audit: type=1400 audit(1742805700.215:1350): avc:  denied  { mount } for  pid=20231 comm="syz.4.3594" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[ 1183.069694][T13978] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1183.085317][T13978] stv0680 2-1:4.0: STV(e): camera ping failed!!
[ 1183.102215][T13978] stv0680 2-1:4.0: last error: 0,  command = 0x0
[ 1183.230991][T20238] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1183.321658][T13978] usb 2-1: USB disconnect, device number 98
[ 1183.846789][   T30] audit: type=1400 audit(1742805701.335:1351): avc:  denied  { map } for  pid=20242 comm="syz.0.3597" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1183.883345][   T30] audit: type=1400 audit(1742805701.335:1352): avc:  denied  { execute } for  pid=20242 comm="syz.0.3597" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1184.167113][   T52] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1184.373286][   T52] usb 3-1: Using ep0 maxpacket: 8
[ 1184.403492][   T52] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[ 1184.431911][   T52] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1184.453098][   T52] usb 3-1: config 0 has no interface number 0
[ 1184.461358][   T52] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1184.473049][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.497813][   T30] audit: type=1400 audit(1742805701.995:1353): avc:  denied  { ioctl } for  pid=20255 comm="syz.1.3602" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 1184.532624][   T52] usb 3-1: Product: syz
[ 1184.537235][   T52] usb 3-1: Manufacturer: syz
[ 1184.541835][   T52] usb 3-1: SerialNumber: syz
[ 1184.558944][   T52] usb 3-1: config 0 descriptor??
[ 1184.573232][   T30] audit: type=1400 audit(1742805701.995:1354): avc:  denied  { ioctl } for  pid=20255 comm="syz.1.3602" path="socket:[75951]" dev="sockfs" ino=75951 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1184.711893][T20263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3605'.
[ 1184.784375][   T52] usb 3-1: USB disconnect, device number 108
[ 1184.908798][   T30] audit: type=1400 audit(1742805702.405:1355): avc:  denied  { watch } for  pid=20273 comm="syz.0.3607" path="/125/file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 1184.943206][   T30] audit: type=1400 audit(1742805702.425:1356): avc:  denied  { watch_sb watch_reads } for  pid=20273 comm="syz.0.3607" path="/125/file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1185.016699][T20280] netlink: 1608 bytes leftover after parsing attributes in process `syz.4.3609'.
[ 1185.027366][   T30] audit: type=1400 audit(1742805702.515:1357): avc:  denied  { read } for  pid=20279 comm="syz.4.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1185.057938][T20280] netlink: zone id is out of range
[ 1185.057951][T20280] netlink: zone id is out of range
[ 1185.057958][T20280] netlink: zone id is out of range
[ 1185.059133][T20280] netlink: del zone limit has 4 unknown bytes
[ 1185.096062][   T30] audit: type=1400 audit(1742805702.515:1358): avc:  denied  { bind } for  pid=20279 comm="syz.4.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1185.128066][T20284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3607'.
[ 1185.333209][ T9712] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1185.553417][ T9712] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1185.593165][ T9712] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1185.621613][ T9712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.671091][ T9712] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1185.743962][    C1] hrtimer: interrupt took 316659 ns
[ 1185.894132][T20283] input: syz0 as /devices/virtual/input/input145
[ 1186.003620][T13978] usb 5-1: new full-speed USB device number 93 using dummy_hcd
[ 1186.095698][T20308] siw: device registration error -23
[ 1186.602017][T13978] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1186.674866][T13978] usb 5-1: not running at top speed; connect to a high speed hub
[ 1186.707502][T13978] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[ 1186.731618][T13978] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.746849][ T9712] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1186.759547][T13978] usb 5-1: config 4 has no interface number 0
[ 1186.760727][ T9712] stv0680 6-1:4.0: STV(e): camera ping failed!!
[ 1186.771120][T13978] usb 5-1: string descriptor 0 read error: -22
[ 1186.779112][T13978] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1186.875123][T13978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.947215][T13978] usb 5-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[ 1186.984095][T13978] usb 5-1: No valid video chain found.
[ 1187.112281][ T9712] stv0680 6-1:4.0: last error: 0,  command = 0x0
[ 1187.355360][ T9712] usb 6-1: USB disconnect, device number 94
[ 1187.702403][   T52] usb 5-1: USB disconnect, device number 93
[ 1188.303236][ T9712] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1188.463296][ T9712] usb 6-1: Using ep0 maxpacket: 8
[ 1188.478488][ T9712] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1188.515431][ T9712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.533426][ T9712] usb 6-1: config 0 has no interface number 0
[ 1188.541915][ T9712] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1188.549200][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1188.549213][   T30] audit: type=1400 audit(1742805706.045:1360): avc:  denied  { bind } for  pid=20335 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1188.584154][ T9712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.584968][   T30] audit: type=1400 audit(1742805706.075:1361): avc:  denied  { listen } for  pid=20335 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1188.900080][   T30] audit: type=1400 audit(1742805706.395:1362): avc:  denied  { read } for  pid=20335 comm="syz.2.3628" path="socket:[76164]" dev="sockfs" ino=76164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1188.923512][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1189.246942][T20343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20343 comm=syz.4.3629
[ 1189.552612][ T9712] usb 6-1: Product: syz
[ 1189.571532][ T9712] usb 6-1: Manufacturer: syz
[ 1189.583100][ T9712] usb 6-1: SerialNumber: syz
[ 1189.586293][T13978] libceph: connect (1)[c::]:6789 error -101
[ 1189.598494][ T9712] usb 6-1: config 0 descriptor??
[ 1189.603391][T13978] libceph: mon0 (1)[c::]:6789 connect error
[ 1189.832133][T18401] usb 6-1: USB disconnect, device number 95
[ 1189.893094][ T5903] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1190.026102][T13978] libceph: connect (1)[c::]:6789 error -101
[ 1190.032276][T13978] libceph: mon0 (1)[c::]:6789 connect error
[ 1190.545626][T18401] libceph: connect (1)[c::]:6789 error -101
[ 1190.556885][T18401] libceph: mon0 (1)[c::]:6789 connect error
[ 1190.743194][ T9712] usb 2-1: new full-speed USB device number 99 using dummy_hcd
[ 1190.806448][   T30] audit: type=1400 audit(1742805708.305:1363): avc:  denied  { append } for  pid=20373 comm="syz.5.3637" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1191.040206][ T9712] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1191.203294][ T9712] usb 2-1: config 1 interface 0 altsetting 254 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1191.220979][ T9712] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1191.231193][ T9712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1191.258419][ T9712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.266572][ T9712] usb 2-1: Product: syz
[ 1191.270844][ T9712] usb 2-1: Manufacturer: ��г램畂ᒄ㽈ᇔ䒼쓮Նస뗅�Ԟᗾꑸ湷ﲆΘ⌖蟠뚥Җプ禗ᤎ춉਑ཕ쑲࣡骯䊖騌탘䖀�騷Ҫ掉퇬�狧骡ㆎ壺客��⧴쌴㨿丕�᠋챘혗���侔줗㛛�몑㤭㥋�좳�藋꧷ᘯ�줱⾸㋯䂑皶쀥��쓳쑧⌴湄�꘼乪嵥�ㅉ㞆㽓휓�꜄橈㾒㩴
[ 1191.315706][ T9712] usb 2-1: SerialNumber: syz
[ 1191.349681][T20364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1191.357078][T20364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1191.543741][ T5937] libceph: connect (1)[c::]:6789 error -101
[ 1191.549847][ T5937] libceph: mon0 (1)[c::]:6789 connect error
[ 1191.585955][ T9712] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 99 if 0 alt 254 proto 2 vid 0x0525 pid 0xA4A8
[ 1191.728364][ T9712] usb 2-1: USB disconnect, device number 99
[ 1191.900150][ T9712] usblp0: removed
[ 1192.494903][T13120] bridge_slave_1: left allmulticast mode
[ 1192.511637][T13120] bridge_slave_1: left promiscuous mode
[ 1192.563139][T20345] ceph: No mds server is up or the cluster is laggy
[ 1192.582380][   T30] audit: type=1800 audit(1742805710.075:1364): pid=20388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3640" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[ 1193.502868][T13120] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1193.507682][ T5937] libceph: connect (1)[c::]:6789 error -101
[ 1193.526149][ T5937] libceph: mon0 (1)[c::]:6789 connect error
[ 1193.628117][T13120] ÿÿÿÿÿÿ: left allmulticast mode
[ 1193.643146][T13120] ÿÿÿÿÿÿ: left promiscuous mode
[ 1193.648177][T13120] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state
[ 1193.719621][   T30] audit: type=1400 audit(1742805711.215:1365): avc:  denied  { write } for  pid=20398 comm="syz.0.3644" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1193.963137][   T52] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1194.143084][   T52] usb 6-1: Using ep0 maxpacket: 8
[ 1194.187129][   T52] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1194.218846][   T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1194.255137][   T52] usb 6-1: config 0 has no interface number 0
[ 1194.280965][   T52] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1194.302489][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.311509][T13120] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1194.347245][   T52] usb 6-1: Product: syz
[ 1194.360301][   T52] usb 6-1: Manufacturer: syz
[ 1194.380051][   T52] usb 6-1: SerialNumber: syz
[ 1194.447754][   T52] usb 6-1: config 0 descriptor??
[ 1194.712695][ T5937] usb 6-1: USB disconnect, device number 96
[ 1195.693201][ T5937] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1195.735824][T13120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1195.793835][T13120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1195.854807][ T5937] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1195.873433][T13120] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1195.898031][ T5937] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1195.917338][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.929877][T13120] bond0 (unregistering): Released all slaves
[ 1195.940216][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1196.370260][T20421] input: syz0 as /devices/virtual/input/input146
[ 1196.618468][T13120] bond1 (unregistering): Released all slaves
[ 1196.730070][   T30] audit: type=1400 audit(1742805714.215:1366): avc:  denied  { read } for  pid=20431 comm="syz.0.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1196.752492][T20432] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1196.802952][   T30] audit: type=1400 audit(1742805714.275:1367): avc:  denied  { append } for  pid=20437 comm="syz.4.3657" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1196.871612][   T30] audit: type=1400 audit(1742805714.295:1368): avc:  denied  { write } for  pid=20437 comm="syz.4.3657" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[ 1196.993309][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1197.001501][ T5937] stv0680 6-1:4.0: STV(e): camera ping failed!!
[ 1197.039360][T13120] hsr_slave_0: left promiscuous mode
[ 1197.039577][ T5937] stv0680 6-1:4.0: last error: 0,  command = 0x0
[ 1197.063111][T13120] hsr_slave_1: left promiscuous mode
[ 1197.077372][T13120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.089344][T13120] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1197.103559][T13120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1197.111195][T13120] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1197.202017][T13120] veth1_to_team: left promiscuous mode
[ 1197.210444][T13120] veth1_macvtap: left promiscuous mode
[ 1197.242085][T13120] veth0_macvtap: left promiscuous mode
[ 1197.267937][T13120] veth1_vlan: left promiscuous mode
[ 1197.288055][T13120] veth0_vlan: left promiscuous mode
[ 1197.327180][T20455] FAULT_INJECTION: forcing a failure.
[ 1197.327180][T20455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1197.347611][T20455] CPU: 1 UID: 0 PID: 20455 Comm: syz.4.3662 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1197.347636][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1197.347647][T20455] Call Trace:
[ 1197.347652][T20455]  <TASK>
[ 1197.347659][T20455]  dump_stack_lvl+0x16c/0x1f0
[ 1197.347695][T20455]  should_fail_ex+0x50a/0x650
[ 1197.347725][T20455]  _copy_from_iter+0x2a1/0x1560
[ 1197.347744][T20455]  ? trace_lock_acquire+0x14e/0x1f0
[ 1197.347764][T20455]  ? __alloc_skb+0x1fe/0x380
[ 1197.347789][T20455]  ? __pfx__copy_from_iter+0x10/0x10
[ 1197.347805][T20455]  ? __virt_addr_valid+0x1a4/0x590
[ 1197.347827][T20455]  ? __virt_addr_valid+0x5e/0x590
[ 1197.347843][T20455]  ? __phys_addr_symbol+0x30/0x80
[ 1197.347860][T20455]  ? __check_object_size+0x488/0x710
[ 1197.347884][T20455]  netlink_sendmsg+0x813/0xd70
[ 1197.347914][T20455]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1197.347946][T20455]  ____sys_sendmsg+0xaaf/0xc90
[ 1197.347967][T20455]  ? copy_msghdr_from_user+0x10b/0x160
[ 1197.347991][T20455]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1197.348022][T20455]  ___sys_sendmsg+0x135/0x1e0
[ 1197.348049][T20455]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1197.348083][T20455]  ? __pfx_lock_release+0x10/0x10
[ 1197.348106][T20455]  ? trace_lock_acquire+0x14e/0x1f0
[ 1197.348132][T20455]  ? __fget_files+0x206/0x3a0
[ 1197.348156][T20455]  __sys_sendmsg+0x16e/0x220
[ 1197.348182][T20455]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1197.348222][T20455]  do_syscall_64+0xcd/0x250
[ 1197.348248][T20455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1197.348272][T20455] RIP: 0033:0x7f56f198d169
[ 1197.348285][T20455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1197.348303][T20455] RSP: 002b:00007f56f2869038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1197.348319][T20455] RAX: ffffffffffffffda RBX: 00007f56f1ba5fa0 RCX: 00007f56f198d169
[ 1197.348330][T20455] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1197.348341][T20455] RBP: 00007f56f2869090 R08: 0000000000000000 R09: 0000000000000000
[ 1197.348351][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1197.348362][T20455] R13: 0000000000000000 R14: 00007f56f1ba5fa0 R15: 00007fff4db78f58
[ 1197.348384][T20455]  </TASK>
[ 1199.113669][T15267] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1199.299899][T15267] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1199.317003][T15267] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1199.353341][T15267] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1199.391809][T15267] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1199.431938][T15267] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1199.479884][T15267] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1199.498978][T15267] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1199.534378][T15267] usb 2-1: Product: syz
[ 1199.538704][T15267] usb 2-1: Manufacturer: syz
[ 1199.558582][T15267] cdc_wdm 2-1:1.0: skipping garbage
[ 1199.573100][T15267] cdc_wdm 2-1:1.0: skipping garbage
[ 1199.744276][T15267] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1199.750257][T15267] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1199.861602][ T5903] usb 2-1: USB disconnect, device number 100
[ 1200.378991][T13120] team0 (unregistering): Port device team_slave_1 removed
[ 1200.535749][T13120] team0 (unregistering): Port device team_slave_0 removed
[ 1200.898187][   T30] audit: type=1400 audit(1742805718.355:1369): avc:  denied  { ioctl } for  pid=20489 comm="syz.0.3671" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1201.761072][ T5937] lo speed is unknown, defaulting to 1000
[ 1201.807417][ T5937] infiniband syz2: ib_query_port failed (-19)
[ 1201.864637][T15267] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1201.896981][   T52] usb 6-1: USB disconnect, device number 97
[ 1202.048475][T15267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1202.082523][T15267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1202.138517][T15267] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00
[ 1202.197940][T15267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.263537][   T52] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1202.300738][T15267] usb 5-1: config 0 descriptor??
[ 1202.553125][   T52] usb 6-1: Using ep0 maxpacket: 32
[ 1202.562213][   T52] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1202.587573][   T52] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1202.620089][   T52] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1202.631124][   T52] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1202.639643][   T52] usb 6-1: Product: syz
[ 1202.643839][   T52] usb 6-1: Manufacturer: syz
[ 1202.648468][   T52] usb 6-1: SerialNumber: syz
[ 1202.658216][   T52] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input147
[ 1202.688357][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3680'.
[ 1202.699776][T20515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3680'.
[ 1202.792559][T20515] bond1: entered promiscuous mode
[ 1202.842397][T20515] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1203.229505][T15267] hid-led 0003:1D34:0004.002F: unknown main item tag 0x0
[ 1203.589639][   T30] audit: type=1400 audit(1742805721.075:1370): avc:  denied  { setopt } for  pid=20498 comm="syz.4.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1203.593051][T15267] hid-led 0003:1D34:0004.002F: unknown main item tag 0x0
[ 1203.693975][ T5903] usb 6-1: USB disconnect, device number 98
[ 1203.721962][ T5903] appletouch 6-1:1.0: input: appletouch disconnected
[ 1203.739081][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'.
[ 1203.759171][T15267] hid-led 0003:1D34:0004.002F: unknown main item tag 0x0
[ 1203.787556][T15267] hid-led 0003:1D34:0004.002F: item fetching failed at offset 6/7
[ 1203.818900][T15267] hid-led 0003:1D34:0004.002F: probe with driver hid-led failed with error -22
[ 1203.820819][T20526] tmpfs: Bad value for 'mpol'
[ 1203.835884][T15267] usb 5-1: USB disconnect, device number 94
[ 1203.855612][   T30] audit: type=1400 audit(1742805721.355:1371): avc:  denied  { bind } for  pid=20525 comm="syz.0.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1204.166329][T20534] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3686'.
[ 1204.866981][   T30] audit: type=1400 audit(1742805722.365:1372): avc:  denied  { connect } for  pid=20541 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1205.043364][   T30] audit: type=1400 audit(1742805722.365:1373): avc:  denied  { accept } for  pid=20541 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1205.155913][ T5903] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1205.722916][   T30] audit: type=1400 audit(1742805722.625:1374): avc:  denied  { shutdown } for  pid=20541 comm="syz.5.3690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1205.893206][T18401] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1205.921554][ T5903] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1205.930328][ T5903] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1205.941516][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1205.950878][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1205.962226][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1205.994967][ T5903] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1206.018433][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1206.033195][ T5903] usb 2-1: Product: syz
[ 1206.037608][ T5903] usb 2-1: Manufacturer: syz
[ 1206.050244][ T5903] cdc_wdm 2-1:1.0: skipping garbage
[ 1206.055703][T18401] usb 3-1: Using ep0 maxpacket: 16
[ 1206.061870][ T5903] cdc_wdm 2-1:1.0: skipping garbage
[ 1206.068148][T18401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1206.081847][T18401] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1206.092098][T18401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.103669][ T5903] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1206.109573][ T5903] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1206.115637][T18401] usb 3-1: Product: syz
[ 1206.121488][T18401] usb 3-1: Manufacturer: syz
[ 1206.134574][T18401] usb 3-1: SerialNumber: syz
[ 1206.158674][T18401] usb 3-1: config 0 descriptor??
[ 1206.167478][T18401] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1206.175298][T18401] hub 3-1:0.0: probe with driver hub failed with error -5
[ 1206.186911][T18401] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input148
[ 1206.255153][ T5903] usb 2-1: USB disconnect, device number 101
[ 1206.515938][   T30] audit: type=1400 audit(1742805724.015:1375): avc:  denied  { ioctl } for  pid=20565 comm="syz.4.3695" path="socket:[76921]" dev="sockfs" ino=76921 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1206.764935][T18401] usb 3-1: USB disconnect, device number 110
[ 1206.875297][T20569] FAULT_INJECTION: forcing a failure.
[ 1206.875297][T20569] name failslab, interval 1, probability 0, space 0, times 0
[ 1206.888276][T20569] CPU: 0 UID: 0 PID: 20569 Comm: syz.4.3696 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1206.888297][T20569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1206.888307][T20569] Call Trace:
[ 1206.888311][T20569]  <TASK>
[ 1206.888316][T20569]  dump_stack_lvl+0x16c/0x1f0
[ 1206.888343][T20569]  should_fail_ex+0x50a/0x650
[ 1206.888367][T20569]  ? fs_reclaim_acquire+0xae/0x150
[ 1206.888393][T20569]  should_failslab+0xc2/0x120
[ 1206.888411][T20569]  __kmalloc_node_track_caller_noprof+0xcf/0x510
[ 1206.888431][T20569]  ? ovl_mount_dir+0x26/0x1f0
[ 1206.888450][T20569]  kstrdup+0x53/0x100
[ 1206.888473][T20569]  ovl_mount_dir+0x26/0x1f0
[ 1206.888491][T20569]  ovl_parse_param+0xf33/0x13d0
[ 1206.888513][T20569]  ? __pfx_ovl_parse_param+0x10/0x10
[ 1206.888533][T20569]  ? static_key_count+0x5a/0x70
[ 1206.888550][T20569]  ? __pfx_ovl_parse_param+0x10/0x10
[ 1206.888569][T20569]  vfs_parse_fs_param+0x208/0x3c0
[ 1206.888585][T20569]  vfs_parse_fs_string+0xea/0x150
[ 1206.888600][T20569]  ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 1206.888621][T20569]  ? __sanitizer_cov_trace_const_cmp1+0x8/0x20
[ 1206.888648][T20569]  ? ovl_next_opt+0x143/0x1c0
[ 1206.888672][T20569]  ? __pfx_ovl_next_opt+0x10/0x10
[ 1206.888688][T20569]  vfs_parse_monolithic_sep+0x175/0x1f0
[ 1206.888706][T20569]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[ 1206.888724][T20569]  ? alloc_fs_context+0x59b/0x9c0
[ 1206.888744][T20569]  path_mount+0x149f/0x1f10
[ 1206.888764][T20569]  ? kmem_cache_free+0x2e2/0x4d0
[ 1206.888779][T20569]  ? __pfx_path_mount+0x10/0x10
[ 1206.888799][T20569]  ? putname+0x13c/0x180
[ 1206.888822][T20569]  __x64_sys_mount+0x28f/0x310
[ 1206.888840][T20569]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1206.888865][T20569]  do_syscall_64+0xcd/0x250
[ 1206.888888][T20569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1206.888909][T20569] RIP: 0033:0x7f56f198d169
[ 1206.888921][T20569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1206.888937][T20569] RSP: 002b:00007f56f2848038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1206.888953][T20569] RAX: ffffffffffffffda RBX: 00007f56f1ba6080 RCX: 00007f56f198d169
[ 1206.888964][T20569] RDX: 0000200000000340 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1206.888974][T20569] RBP: 00007f56f2848090 R08: 0000200000000080 R09: 0000000000000000
[ 1206.888983][T20569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1206.888993][T20569] R13: 0000000000000000 R14: 00007f56f1ba6080 R15: 00007fff4db78f58
[ 1206.889014][T20569]  </TASK>
[ 1207.815551][   T30] audit: type=1400 audit(1742805725.285:1376): avc:  denied  { write } for  pid=20577 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1210.092742][T20608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3706'.
[ 1210.394268][   T30] audit: type=1400 audit(1742805727.895:1377): avc:  denied  { map } for  pid=20599 comm="syz.5.3705" path="socket:[77050]" dev="sockfs" ino=77050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[ 1210.417994][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1210.536369][T20617] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1210.563091][ T5937] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1210.691071][   T30] audit: type=1400 audit(1742805728.185:1378): avc:  denied  { write } for  pid=20618 comm="syz.4.3711" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1210.714998][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1210.723129][ T5937] usb 2-1: Using ep0 maxpacket: 8
[ 1210.819786][   T30] audit: type=1400 audit(1742805728.215:1379): avc:  denied  { open } for  pid=20618 comm="syz.4.3711" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[ 1210.853997][ T5937] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[ 1210.980815][ T5937] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1210.998683][ T5937] usb 2-1: config 2 has no interface number 0
[ 1211.005083][ T5937] usb 2-1: config 2 interface 31 altsetting 2 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1211.019432][ T5937] usb 2-1: config 2 interface 31 altsetting 2 endpoint 0x84 has invalid maxpacket 512, setting to 64
[ 1211.163609][ T5937] usb 2-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1211.179790][ T5937] usb 2-1: config 2 interface 31 has no altsetting 0
[ 1211.803751][ T5937] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1211.863052][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.873636][ T5937] usb 2-1: Product: syz
[ 1211.879219][ T5937] usb 2-1: Manufacturer: syz
[ 1211.884022][ T5937] usb 2-1: SerialNumber: syz
[ 1211.891230][ T5937] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[ 1211.937991][T20628] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1211.940819][   T30] audit: type=1400 audit(1742805729.435:1380): avc:  denied  { mounton } for  pid=20627 comm="syz.4.3714" path="/132/file0/bus" dev="ramfs" ino=78067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[ 1211.945698][T20628] overlayfs: failed to set xattr on upper
[ 1211.967597][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1211.982065][T20628] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1211.991675][T20628] overlayfs: ...falling back to index=off.
[ 1212.010194][T20628] overlayfs: ...falling back to uuid=null.
[ 1212.050021][   T30] audit: type=1400 audit(1742805729.545:1381): avc:  denied  { unmount } for  pid=18148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[ 1212.087820][T20633] FAULT_INJECTION: forcing a failure.
[ 1212.087820][T20633] name failslab, interval 1, probability 0, space 0, times 0
[ 1212.124814][ T5937] usb 2-1: USB disconnect, device number 102
[ 1212.145555][T20633] CPU: 0 UID: 0 PID: 20633 Comm: syz.4.3716 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1212.145580][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1212.145591][T20633] Call Trace:
[ 1212.145595][T20633]  <TASK>
[ 1212.145600][T20633]  dump_stack_lvl+0x16c/0x1f0
[ 1212.145618][T20633]  should_fail_ex+0x50a/0x650
[ 1212.145638][T20633]  should_failslab+0xc2/0x120
[ 1212.145651][T20633]  kmem_cache_alloc_noprof+0x6e/0x3d0
[ 1212.145663][T20633]  ? skb_clone+0x190/0x3f0
[ 1212.145682][T20633]  skb_clone+0x190/0x3f0
[ 1212.145699][T20633]  netlink_deliver_tap+0xabd/0xd30
[ 1212.145716][T20633]  netlink_unicast+0x5e1/0x7f0
[ 1212.145733][T20633]  ? __pfx_netlink_unicast+0x10/0x10
[ 1212.145752][T20633]  netlink_sendmsg+0x8b8/0xd70
[ 1212.145770][T20633]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1212.145790][T20633]  ____sys_sendmsg+0xaaf/0xc90
[ 1212.145803][T20633]  ? copy_msghdr_from_user+0x10b/0x160
[ 1212.145819][T20633]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1212.145839][T20633]  ___sys_sendmsg+0x135/0x1e0
[ 1212.145857][T20633]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1212.145879][T20633]  ? __pfx_lock_release+0x10/0x10
[ 1212.145893][T20633]  ? trace_lock_acquire+0x14e/0x1f0
[ 1212.145910][T20633]  ? __fget_files+0x206/0x3a0
[ 1212.145924][T20633]  __sys_sendmsg+0x16e/0x220
[ 1212.145940][T20633]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1212.145965][T20633]  do_syscall_64+0xcd/0x250
[ 1212.145981][T20633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.145997][T20633] RIP: 0033:0x7f56f198d169
[ 1212.146006][T20633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1212.146017][T20633] RSP: 002b:00007f56f2869038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1212.146027][T20633] RAX: ffffffffffffffda RBX: 00007f56f1ba5fa0 RCX: 00007f56f198d169
[ 1212.146033][T20633] RDX: 0000000000004040 RSI: 0000200000000340 RDI: 0000000000000003
[ 1212.146039][T20633] RBP: 00007f56f2869090 R08: 0000000000000000 R09: 0000000000000000
[ 1212.146046][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1212.146051][T20633] R13: 0000000000000000 R14: 00007f56f1ba5fa0 R15: 00007fff4db78f58
[ 1212.146064][T20633]  </TASK>
[ 1213.518761][T20648] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1213.655192][   T30] audit: type=1404 audit(1742805731.145:1382): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[ 1213.875986][   T30] audit: type=1400 audit(1742805731.365:1383): avc:  denied  { prog_load } for  pid=20652 comm="syz.5.3723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1214.386201][   T30] audit: type=1400 audit(1742805731.865:1384): avc:  denied  { read write } for  pid=17885 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1214.455856][   T30] audit: type=1400 audit(1742805731.955:1385): avc:  denied  { execmem } for  pid=20656 comm="syz.1.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[ 1214.545295][   T30] audit: type=1400 audit(1742805732.025:1386): avc:  denied  { read write } for  pid=19455 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1214.599995][   T30] audit: type=1400 audit(1742805732.065:1387): avc:  denied  { mounton } for  pid=20656 comm="syz.1.3724" path="/114/file1" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[ 1214.628471][   T30] audit: type=1400 audit(1742805732.065:1388): avc:  denied  { read } for  pid=20659 comm="syz.5.3725" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0
[ 1214.655937][   T30] audit: type=1400 audit(1742805732.125:1389): avc:  denied  { read } for  pid=20647 comm="syz.4.3721" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=0
[ 1215.620830][T20696] mkiss: ax0: crc mode is auto.
[ 1216.204099][T12735] Bluetooth: hci2: sending frame failed (-49)
[ 1216.211397][T16799] Bluetooth: hci2: Opcode 0x1003 failed: -49
[ 1216.487704][T20714] netlink: 'syz.5.3745': attribute type 29 has an invalid length.
[ 1216.980805][   T30] kauditd_printk_skb: 125 callbacks suppressed
[ 1216.980820][   T30] audit: type=1400 audit(1742805734.475:1515): avc:  denied  { read write } for  pid=17566 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1217.052782][   T30] audit: type=1400 audit(1742805734.525:1516): avc:  denied  { create } for  pid=20718 comm="syz.5.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[ 1217.128336][   T30] audit: type=1400 audit(1742805734.555:1517): avc:  denied  { read write } for  pid=20729 comm="syz.2.3750" name="swradio4" dev="devtmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[ 1217.151797][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1217.199919][   T30] audit: type=1400 audit(1742805734.565:1518): avc:  denied  { prog_load } for  pid=20729 comm="syz.2.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[ 1217.237327][   T30] audit: type=1400 audit(1742805734.565:1519): avc:  denied  { create } for  pid=20729 comm="syz.2.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[ 1217.313160][   T30] audit: type=1400 audit(1742805734.565:1520): avc:  denied  { accept } for  pid=20729 comm="syz.2.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0
[ 1217.342342][   T30] audit: type=1400 audit(1742805734.605:1521): avc:  denied  { read write } for  pid=17566 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[ 1217.366606][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1217.380008][   T30] audit: type=1400 audit(1742805734.665:1522): avc:  denied  { create } for  pid=20731 comm="syz.0.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0
[ 1217.415344][   T30] audit: type=1400 audit(1742805734.675:1523): avc:  denied  { create } for  pid=20733 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[ 1217.439635][   T30] audit: type=1400 audit(1742805734.685:1524): avc:  denied  { create } for  pid=20731 comm="syz.0.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0
[ 1220.193136][ T5903] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1221.269479][ T5903] usb 3-1: device descriptor read/64, error -71
[ 1221.291249][T20812] hfs: unable to load iocharset "io#harset"
[ 1221.513106][ T5903] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1221.603224][T18401] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[ 1221.624165][T15267] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1221.643095][ T5903] usb 3-1: device descriptor read/64, error -71
[ 1221.667528][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1221.753261][ T5903] usb usb3-port1: attempt power cycle
[ 1221.764810][T18401] usb 5-1: config index 0 descriptor too short (expected 5668, got 36)
[ 1221.773260][T18401] usb 5-1: config 3 has too many interfaces: 84, using maximum allowed: 32
[ 1221.781864][T18401] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 84
[ 1221.790944][T18401] usb 5-1: config 3 has no interface number 0
[ 1221.797477][T18401] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1221.804255][T15267] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1221.808456][T18401] usb 5-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1221.824052][T15267] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1221.832323][T18401] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1221.844945][T15267] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1221.848513][T18401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.861651][T15267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1221.865539][T18401] usb 5-1: Product: syz
[ 1221.877730][T18401] usb 5-1: Manufacturer: syz
[ 1221.879637][T20821] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1221.882308][T18401] usb 5-1: SerialNumber: syz
[ 1221.895894][T15267] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1221.896066][T20823] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1222.093101][ T5903] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1222.127828][ T5903] usb 3-1: device descriptor read/8, error -71
[ 1222.136577][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1222.145378][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.160383][T18401] usb-storage 5-1:3.20: USB Mass Storage device detected
[ 1222.171707][T18401] usb-storage 5-1:3.20: Quirks match for vid 04e6 pid 000b: 4
[ 1222.181518][T20821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[ 1222.188029][T20821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1222.195704][T18401] scsi host1: usb-storage 5-1:3.20
[ 1222.204369][T18401] usb 5-1: USB disconnect, device number 95
[ 1222.205790][T20821] vhci_hcd vhci_hcd.0: Device attached
[ 1222.228348][   T30] kauditd_printk_skb: 261 callbacks suppressed
[ 1222.228363][   T30] audit: type=1400 audit(1742805739.725:1784): avc:  denied  { create } for  pid=20820 comm="syz.1.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1222.255318][   T30] audit: type=1400 audit(1742805739.735:1785): avc:  denied  { ioctl } for  pid=20820 comm="syz.1.3784" path="socket:[78417]" dev="sockfs" ino=78417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1222.291430][   T30] audit: type=1400 audit(1742805739.785:1786): avc:  denied  { create } for  pid=20820 comm="syz.1.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1222.316739][T20838] vhci_hcd: connection closed
[ 1222.325498][T13128] vhci_hcd: stop threads
[ 1222.358741][T13128] vhci_hcd: release socket
[ 1222.363526][T13128] vhci_hcd: disconnect device
[ 1222.370308][ T5937] usb 2-1: USB disconnect, device number 103
[ 1222.376556][ T5903] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1222.395045][   T52] vhci_hcd: vhci_device speed not set
[ 1222.405040][ T5903] usb 3-1: device descriptor read/8, error -71
[ 1222.478924][   T30] audit: type=1400 audit(1742805739.975:1787): avc:  denied  { create } for  pid=20843 comm="syz.5.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1222.518866][ T5903] usb usb3-port1: unable to enumerate USB device
[ 1222.577667][   T30] audit: type=1400 audit(1742805740.075:1788): avc:  denied  { create } for  pid=20847 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1222.608533][   T30] audit: type=1400 audit(1742805740.075:1789): avc:  denied  { create } for  pid=20847 comm="syz.0.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1222.628596][   T30] audit: type=1400 audit(1742805740.075:1790): avc:  denied  { read } for  pid=20847 comm="syz.0.3792" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1222.671268][   T30] audit: type=1400 audit(1742805740.075:1791): avc:  denied  { open } for  pid=20847 comm="syz.0.3792" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1222.700926][   T30] audit: type=1400 audit(1742805740.075:1792): avc:  denied  { map } for  pid=20847 comm="syz.0.3792" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1222.724642][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1222.745982][   T30] audit: type=1400 audit(1742805740.235:1793): avc:  denied  { append } for  pid=20847 comm="syz.0.3792" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1223.293212][ T5871] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1223.484182][ T5871] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1223.506626][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.520224][ T5871] usb 2-1: Product: syz
[ 1223.527250][ T5871] usb 2-1: Manufacturer: syz
[ 1223.535878][ T5871] usb 2-1: SerialNumber: syz
[ 1223.542094][ T5871] usb 2-1: config 0 descriptor??
[ 1223.847220][ T5871] hso 2-1:0.0: Can't find BULK IN endpoint
[ 1223.853984][ T5871] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1224.893084][T18401] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1225.615695][T18401] usb 6-1: Using ep0 maxpacket: 16
[ 1225.622769][T18401] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1225.633561][T18401] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1225.642629][T18401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.663718][T18401] usb 6-1: config 0 descriptor??
[ 1225.946422][T18401] usb 6-1: USB disconnect, device number 99
[ 1226.380799][   T52] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1226.670324][T18401] usb 2-1: USB disconnect, device number 104
[ 1226.686636][   T52] usb 3-1: Using ep0 maxpacket: 8
[ 1226.726649][   T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1226.739381][   T52] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1226.758578][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.768111][   T52] usb 3-1: config 0 descriptor??
[ 1226.913308][ T9712] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1227.075453][T12735] Bluetooth: hci1: command 0x0405 tx timeout
[ 1227.099197][   T52] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1227.134688][ T9712] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1227.185447][ T9712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.268315][ T9712] usb 6-1: Product: syz
[ 1227.325851][ T9712] usb 6-1: Manufacturer: syz
[ 1227.330487][ T9712] usb 6-1: SerialNumber: syz
[ 1227.336974][   T30] kauditd_printk_skb: 38 callbacks suppressed
[ 1227.337007][   T30] audit: type=1400 audit(1742805744.835:1832): avc:  denied  { create } for  pid=20933 comm="syz.0.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1227.639564][ T9712] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1227.743510][ T5871] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1227.759097][   T30] audit: type=1400 audit(1742805744.895:1833): avc:  denied  { bind } for  pid=20933 comm="syz.0.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1227.964738][ T5937] usb 6-1: USB disconnect, device number 100
[ 1227.983322][ T5871] usb 6-1: ath9k_htc: Unable to allocate URBs
[ 1227.991013][ T5937] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1228.010117][   T30] audit: type=1400 audit(1742805744.895:1834): avc:  denied  { node_bind } for  pid=20933 comm="syz.0.3818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[ 1228.053051][   T30] audit: type=1400 audit(1742805744.895:1835): avc:  denied  { connect } for  pid=20933 comm="syz.0.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1228.133078][   T30] audit: type=1400 audit(1742805744.895:1836): avc:  denied  { write } for  pid=20933 comm="syz.0.3818" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1228.183058][   T30] audit: type=1400 audit(1742805745.105:1837): avc:  denied  { ioctl } for  pid=20933 comm="syz.0.3818" path="socket:[77696]" dev="sockfs" ino=77696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1228.235577][   T30] audit: type=1400 audit(1742805745.175:1838): avc:  denied  { read } for  pid=20937 comm="syz.1.3819" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1228.288013][   T30] audit: type=1400 audit(1742805745.175:1839): avc:  denied  { open } for  pid=20937 comm="syz.1.3819" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[ 1228.333187][ T5903] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1228.337508][   T30] audit: type=1400 audit(1742805745.175:1840): avc:  denied  { write } for  pid=20937 comm="syz.1.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[ 1228.392798][   T30] audit: type=1400 audit(1742805745.215:1841): avc:  denied  { create } for  pid=20911 comm="syz.2.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1228.483185][ T5903] usb 2-1: Using ep0 maxpacket: 16
[ 1228.492498][ T5903] usb 2-1: config 0 descriptor has 1 excess byte, ignoring
[ 1228.500574][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[ 1228.516604][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1228.543510][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1228.578214][ T5903] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1228.613126][ T5871] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1228.617600][ T5903] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1228.630609][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.650153][ T5903] usb 2-1: Product: syz
[ 1228.654421][ T5903] usb 2-1: Manufacturer: syz
[ 1228.658995][ T5903] usb 2-1: SerialNumber: syz
[ 1228.665585][ T5903] usb 2-1: config 0 descriptor??
[ 1228.672286][T20943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1228.704259][ T5903] mcba_usb 2-1:0.0 can0: couldn't setup read URBs
[ 1228.710717][ T5903] mcba_usb 2-1:0.0 can0: couldn't start device: -90
[ 1228.763881][ T5903] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90
[ 1228.768926][ T5871] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.788488][ T5871] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1228.803212][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.861063][ T5871] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1228.881820][T20963] lo speed is unknown, defaulting to 1000
[ 1228.889955][T20963] lo speed is unknown, defaulting to 1000
[ 1228.901535][T20963] lo speed is unknown, defaulting to 1000
[ 1228.965639][T20963] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1229.067643][T20963] lo speed is unknown, defaulting to 1000
[ 1229.098732][T20963] lo speed is unknown, defaulting to 1000
[ 1229.120783][T20963] lo speed is unknown, defaulting to 1000
[ 1229.127470][T20963] lo speed is unknown, defaulting to 1000
[ 1229.148423][T20963] lo speed is unknown, defaulting to 1000
[ 1229.180444][T20957] input: syz0 as /devices/virtual/input/input149
[ 1229.288208][ T5903] usb 2-1: USB disconnect, device number 105
[ 1229.703620][ T5903] usb 3-1: USB disconnect, device number 115
[ 1229.954579][ T5871] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1229.987265][ T5871] stv0680 5-1:4.0: STV(e): camera ping failed!!
[ 1229.996713][ T5871] stv0680 5-1:4.0: last error: 0,  command = 0x0
[ 1230.253576][ T5871] usb 5-1: USB disconnect, device number 96
[ 1232.461487][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 1232.461504][   T30] audit: type=1400 audit(1742805749.955:1866): avc:  denied  { getopt } for  pid=21000 comm="syz.4.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1232.725600][T21012] siw: device registration error -23
[ 1232.969837][   T30] audit: type=1400 audit(1742805749.995:1867): avc:  denied  { ioctl } for  pid=21000 comm="syz.4.3839" path="socket:[78861]" dev="sockfs" ino=78861 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1233.008772][   T30] audit: type=1400 audit(1742805750.215:1868): avc:  denied  { setopt } for  pid=21005 comm="syz.0.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1233.032560][   T30] audit: type=1400 audit(1742805750.215:1869): avc:  denied  { read write } for  pid=21005 comm="syz.0.3840" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1233.254690][   T30] audit: type=1400 audit(1742805750.215:1870): avc:  denied  { open } for  pid=21005 comm="syz.0.3840" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1233.379797][   T30] audit: type=1400 audit(1742805750.495:1871): avc:  denied  { shutdown } for  pid=21005 comm="syz.0.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1233.747546][   T30] audit: type=1400 audit(1742805751.245:1872): avc:  denied  { ioctl } for  pid=21026 comm="syz.5.3845" path="socket:[78908]" dev="sockfs" ino=78908 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 1235.303048][   T30] audit: type=1400 audit(1742805752.365:1873): avc:  denied  { wake_alarm } for  pid=21031 comm="syz.5.3846" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[ 1235.338595][   T30] audit: type=1400 audit(1742805752.785:1874): avc:  denied  { ioctl } for  pid=21031 comm="syz.5.3846" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 1235.606801][   T30] audit: type=1400 audit(1742805753.105:1875): avc:  denied  { name_bind } for  pid=21039 comm="syz.5.3848" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1236.784098][T21054] netlink: 'syz.1.3851': attribute type 2 has an invalid length.
[ 1237.232497][T21069] mkiss: ax0: crc mode is auto.
[ 1237.996454][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1237.996474][   T30] audit: type=1400 audit(1742805755.455:1883): avc:  denied  { write } for  pid=21058 comm="syz.4.3856" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1238.805937][   T30] audit: type=1400 audit(1742805755.795:1884): avc:  denied  { bind } for  pid=21077 comm="syz.5.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1238.875887][   T30] audit: type=1400 audit(1742805755.795:1885): avc:  denied  { write } for  pid=21077 comm="syz.5.3860" path="socket:[79912]" dev="sockfs" ino=79912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1240.833312][T21099] FAULT_INJECTION: forcing a failure.
[ 1240.833312][T21099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1241.030949][T21099] CPU: 0 UID: 0 PID: 21099 Comm: syz.0.3866 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1241.030976][T21099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1241.030987][T21099] Call Trace:
[ 1241.030992][T21099]  <TASK>
[ 1241.031000][T21099]  dump_stack_lvl+0x16c/0x1f0
[ 1241.031028][T21099]  should_fail_ex+0x50a/0x650
[ 1241.031059][T21099]  core_sys_select+0x91b/0xb80
[ 1241.031090][T21099]  ? __pfx_core_sys_select+0x10/0x10
[ 1241.031115][T21099]  ? get_pid_task+0xfc/0x250
[ 1241.031160][T21099]  ? set_user_sigmask+0x217/0x2a0
[ 1241.031183][T21099]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1241.031212][T21099]  do_pselect.constprop.0+0x1a0/0x1f0
[ 1241.031231][T21099]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[ 1241.031256][T21099]  __x64_sys_pselect6+0x183/0x240
[ 1241.031276][T21099]  ? __pfx___x64_sys_pselect6+0x10/0x10
[ 1241.031300][T21099]  do_syscall_64+0xcd/0x250
[ 1241.031326][T21099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1241.031350][T21099] RIP: 0033:0x7fbb0ff8d169
[ 1241.031365][T21099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1241.031382][T21099] RSP: 002b:00007fbb10ea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1241.031399][T21099] RAX: ffffffffffffffda RBX: 00007fbb101a6080 RCX: 00007fbb0ff8d169
[ 1241.031411][T21099] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040
[ 1241.031421][T21099] RBP: 00007fbb10ea4090 R08: 0000000000000000 R09: 0000000000000000
[ 1241.031432][T21099] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[ 1241.031448][T21099] R13: 0000000000000000 R14: 00007fbb101a6080 R15: 00007ffd0b3fefa8
[ 1241.031471][T21099]  </TASK>
[ 1241.251574][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3867'.
[ 1241.284649][   T30] audit: type=1400 audit(1742805758.595:1886): avc:  denied  { create } for  pid=21104 comm="syz.1.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1241.305293][   T30] audit: type=1400 audit(1742805758.595:1887): avc:  denied  { write } for  pid=21104 comm="syz.1.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[ 1241.326462][   T30] audit: type=1400 audit(1742805758.735:1888): avc:  denied  { create } for  pid=21102 comm="syz.4.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 1241.419125][   T30] audit: type=1400 audit(1742805758.915:1889): avc:  denied  { read } for  pid=21111 comm="syz.4.3869" path="socket:[79147]" dev="sockfs" ino=79147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1241.670814][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3870'.
[ 1241.863266][T18401] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1242.026250][T18401] usb 3-1: Using ep0 maxpacket: 8
[ 1242.032624][T18401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1242.056554][T18401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1242.117508][T18401] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1242.177231][T18401] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[ 1242.266131][T18401] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1242.313095][ T5903] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1242.327820][T18401] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1242.375546][T18401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.424069][T18401] usb 3-1: config 0 descriptor??
[ 1242.448573][T21121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1242.465625][ T5903] usb 2-1: Using ep0 maxpacket: 8
[ 1242.489379][ T5903] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1242.508777][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.570351][ T5903] usb 2-1: config 0 has no interface number 0
[ 1242.627539][ T5903] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1242.672213][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.727384][ T5903] usb 2-1: Product: syz
[ 1242.760418][ T5903] usb 2-1: Manufacturer: syz
[ 1242.795921][ T5903] usb 2-1: SerialNumber: syz
[ 1242.840482][ T5903] usb 2-1: config 0 descriptor??
[ 1242.876288][   T30] audit: type=1400 audit(1742805760.335:1890): avc:  denied  { create } for  pid=21119 comm="syz.2.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1242.905497][T21131] ptrace attach of "./syz-executor exec"[17566] was attempted by ""[21131]
[ 1242.949583][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.960845][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.967693][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.974575][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.982546][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.989468][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1242.996242][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.003082][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.010563][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.017385][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.024240][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.031019][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.037867][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.044671][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.051423][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.058210][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.065054][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.071823][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.081450][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.101863][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.109518][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.116328][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.123143][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.129941][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.136743][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.143575][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.150341][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.157143][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.163923][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.170679][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.177457][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.184276][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.191045][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.197839][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.204620][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.212036][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.218865][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.225690][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.232454][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.239233][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.246013][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.252761][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.259531][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.266348][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.273153][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.279965][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.286768][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.293575][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.300363][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.307170][T12735] Bluetooth: hci2: Received unexpected HCI Event 0x00
[ 1243.365398][   T52] usb 2-1: USB disconnect, device number 106
[ 1243.371556][   T30] audit: type=1400 audit(1742805760.335:1891): avc:  denied  { bind } for  pid=21119 comm="syz.2.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1243.391658][   T30] audit: type=1400 audit(1742805760.335:1892): avc:  denied  { accept } for  pid=21119 comm="syz.2.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1243.418938][   T30] audit: type=1400 audit(1742805760.845:1893): avc:  denied  { ioctl } for  pid=21129 comm="syz.1.3875" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=80024 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1243.455802][   T30] audit: type=1400 audit(1742805760.845:1894): avc:  denied  { write } for  pid=21129 comm="syz.1.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1243.459158][T16799] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[ 1243.487676][ T5903] usb 3-1: USB disconnect, device number 116
[ 1243.499257][   T30] audit: type=1400 audit(1742805760.845:1895): avc:  denied  { nlmsg_write } for  pid=21129 comm="syz.1.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1243.639433][   T30] audit: type=1400 audit(1742805761.135:1896): avc:  denied  { listen } for  pid=21132 comm="syz.5.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1243.661549][   T30] audit: type=1400 audit(1742805761.135:1897): avc:  denied  { connect } for  pid=21132 comm="syz.5.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1243.681283][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1243.846673][   T30] audit: type=1400 audit(1742805761.135:1898): avc:  denied  { read } for  pid=21132 comm="syz.5.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1244.817402][T21135] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3876'.
[ 1350.122962][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1350.129931][    C1] rcu: 	0-...!: (0 ticks this GP) idle=8a24/1/0x4000000000000000 softirq=101107/101112 fqs=2
[ 1350.141527][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P21120/1:b..l
[ 1350.149530][    C1] rcu: 	(detected by 1, t=10506 jiffies, g=92893, q=168 ncpus=2)
[ 1350.157256][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1350.157281][    C0] NMI backtrace for cpu 0
[ 1350.157291][    C0] CPU: 0 UID: 0 PID: 21153 Comm: syz.5.3883 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1350.157308][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1350.157316][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70
[ 1350.157341][    C0] Code: 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 <c3> cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90
[ 1350.157353][    C0] RSP: 0018:ffffc90000007e28 EFLAGS: 00000046
[ 1350.157365][    C0] RAX: 0000000080010001 RBX: 1bc16d674ec85a0e RCX: ffffffff81a720c5
[ 1350.157374][    C0] RDX: ffff888026df0000 RSI: ffffffff81a720d3 RDI: 0000000000000006
[ 1350.157383][    C0] RBP: 1839e023a8000000 R08: 0000000000000006 R09: 1839e023a8000000
[ 1350.157391][    C0] R10: 1bc16d674ec85a0e R11: 0000000000000002 R12: ffff8880858ed340
[ 1350.157400][    C0] R13: ffff8880b862c780 R14: ffff8880b862c680 R15: ffffffff896ae430
[ 1350.157409][    C0] FS:  00007f2b3926b6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1350.157423][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1350.157432][    C0] CR2: 00007f2b3926af98 CR3: 0000000069274000 CR4: 00000000003526f0
[ 1350.157441][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1350.157449][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1350.157457][    C0] Call Trace:
[ 1350.157463][    C0]  <NMI>
[ 1350.157470][    C0]  ? nmi_cpu_backtrace+0x1d8/0x390
[ 1350.157486][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1350.157504][    C0]  ? nmi_handle+0x1ac/0x5d0
[ 1350.157522][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[ 1350.157541][    C0]  ? default_do_nmi+0x6a/0x160
[ 1350.157555][    C0]  ? exc_nmi+0x170/0x1e0
[ 1350.157568][    C0]  ? end_repeat_nmi+0xf/0x53
[ 1350.157600][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1350.157617][    C0]  ? __hrtimer_run_queues+0x415/0xae0
[ 1350.157630][    C0]  ? __hrtimer_run_queues+0x423/0xae0
[ 1350.157644][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[ 1350.157662][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[ 1350.157682][    C0]  ? __sanitizer_cov_trace_pc+0x66/0x70
[ 1350.157701][    C0]  </NMI>
[ 1350.157705][    C0]  <IRQ>
[ 1350.157710][    C0]  __hrtimer_run_queues+0x423/0xae0
[ 1350.157725][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1350.157738][    C0]  ? read_tsc+0x9/0x20
[ 1350.157754][    C0]  hrtimer_interrupt+0x392/0x8e0
[ 1350.157772][    C0]  __sysvec_apic_timer_interrupt+0x10f/0x400
[ 1350.157792][    C0]  sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1350.157809][    C0]  </IRQ>
[ 1350.157814][    C0]  <TASK>
[ 1350.157819][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1350.157837][    C0] RIP: 0010:obj_cgroup_charge+0x0/0x4d0
[ 1350.157853][    C0] Code: eb b0 48 89 ef e8 00 70 f7 ff eb 86 48 89 ef e8 f6 6f f7 ff e9 45 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 57 41 56 41 89 f6 41 55 49 89 fd 41 54 55 48 89 d5
[ 1350.157865][    C0] RSP: 0018:ffffc900030b7b30 EFLAGS: 00000202
[ 1350.157876][    C0] RAX: 0000000000000001 RBX: ffff88814040d8c0 RCX: 0000000000000000
[ 1350.157884][    C0] RDX: 00000000000001c8 RSI: 0000000000000dc0 RDI: ffff888029136c00
[ 1350.157892][    C0] RBP: ffffc900030b7bd0 R08: ffffc900030b7bd0 R09: 0000000000000000
[ 1350.157901][    C0] R10: ffff88801208cfc0 R11: 0000000000000001 R12: 0000000000000000
[ 1350.157909][    C0] R13: ffff888029136c00 R14: 0000000000000000 R15: 0000000000000001
[ 1350.157922][    C0]  __memcg_slab_post_alloc_hook+0x1b6/0x9b0
[ 1350.157939][    C0]  ? kasan_save_track+0x14/0x30
[ 1350.157953][    C0]  kmem_cache_alloc_noprof+0x366/0x3d0
[ 1350.157969][    C0]  ? alloc_vfsmnt+0x23/0x6f0
[ 1350.157987][    C0]  alloc_vfsmnt+0x23/0x6f0
[ 1350.158003][    C0]  clone_mnt+0x6d/0xf90
[ 1350.158021][    C0]  copy_tree+0x39e/0x9c0
[ 1350.158037][    C0]  copy_mnt_ns+0x1b5/0xa70
[ 1350.158051][    C0]  ? kmem_cache_alloc_noprof+0x279/0x3d0
[ 1350.158064][    C0]  ? create_new_namespaces+0x30/0xad0
[ 1350.158086][    C0]  create_new_namespaces+0xd3/0xad0
[ 1350.158104][    C0]  ? bpf_lsm_capable+0x9/0x10
[ 1350.158120][    C0]  ? security_capable+0x7e/0x260
[ 1350.158137][    C0]  unshare_nsproxy_namespaces+0xc0/0x1f0
[ 1350.158151][    C0]  ksys_unshare+0x45d/0xa40
[ 1350.158165][    C0]  ? __pfx_ksys_unshare+0x10/0x10
[ 1350.158180][    C0]  ? do_user_addr_fault+0x83d/0x13f0
[ 1350.158199][    C0]  __x64_sys_unshare+0x31/0x40
[ 1350.158212][    C0]  do_syscall_64+0xcd/0x250
[ 1350.158230][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1350.158247][    C0] RIP: 0033:0x7f2b3838d169
[ 1350.158258][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1350.158270][    C0] RSP: 002b:00007f2b3926b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1350.158282][    C0] RAX: ffffffffffffffda RBX: 00007f2b385a5fa0 RCX: 00007f2b3838d169
[ 1350.158291][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000
[ 1350.158299][    C0] RBP: 00007f2b3840e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1350.158307][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1350.158315][    C0] R13: 0000000000000001 R14: 00007f2b385a5fa0 R15: 00007ffcdd606c78
[ 1350.158328][    C0]  </TASK>
[ 1350.159280][    C1] task:syz.0.3870      state:R  running task     stack:27832 pid:21120 tgid:21113 ppid:17329  task_flags:0x40044c flags:0x00004006
[ 1350.680219][    C1] Call Trace:
[ 1350.683494][    C1]  <TASK>
[ 1350.686423][    C1]  __schedule+0xf43/0x5890
[ 1350.690850][    C1]  ? hlock_class+0x4e/0x130
[ 1350.695353][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1350.700556][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1350.705341][    C1]  ? __pfx___schedule+0x10/0x10
[ 1350.710191][    C1]  ? find_held_lock+0x2d/0x110
[ 1350.714961][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[ 1350.720335][    C1]  preempt_schedule_common+0x44/0xc0
[ 1350.725619][    C1]  preempt_schedule_thunk+0x1a/0x30
[ 1350.730823][    C1]  _raw_spin_unlock+0x3e/0x50
[ 1350.735496][    C1]  unmap_page_range+0xee3/0x4390
[ 1350.740453][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1350.745827][    C1]  ? mas_next_slot+0x12d3/0x21b0
[ 1350.750768][    C1]  ? uprobe_munmap+0x20/0x5c0
[ 1350.755445][    C1]  unmap_single_vma+0x194/0x2b0
[ 1350.760299][    C1]  unmap_vmas+0x22f/0x490
[ 1350.764634][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1350.769490][    C1]  ? mas_next_slot+0x12d3/0x21b0
[ 1350.774441][    C1]  exit_mmap+0x1c1/0xba0
[ 1350.778690][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1350.783461][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 1350.788243][    C1]  __mmput+0x12a/0x410
[ 1350.792315][    C1]  mmput+0x62/0x70
[ 1350.796040][    C1]  do_exit+0x9ba/0x2db0
[ 1350.800193][    C1]  ? get_signal+0x8f7/0x26c0
[ 1350.804787][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1350.809372][    C1]  ? do_raw_spin_lock+0x12d/0x2c0
[ 1350.814389][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1350.819760][    C1]  do_group_exit+0xd3/0x2a0
[ 1350.824261][    C1]  get_signal+0x24ed/0x26c0
[ 1350.828771][    C1]  ? do_user_addr_fault+0xdc7/0x13f0
[ 1350.834056][    C1]  ? reacquire_held_locks+0x20b/0x4c0
[ 1350.839432][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1350.844290][    C1]  arch_do_signal_or_restart+0x90/0x7e0
[ 1350.849830][    C1]  ? do_user_addr_fault+0xe50/0x13f0
[ 1350.855112][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1350.861272][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1350.866817][    C1]  syscall_exit_to_user_mode+0x150/0x2a0
[ 1350.872450][    C1]  do_syscall_64+0xda/0x250
[ 1350.876954][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1350.882848][    C1] RIP: 0033:0x7fbb0ff8d169
[ 1350.887257][    C1] RSP: 002b:00007fbb10ea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1350.895665][    C1] RAX: 0000000000010106 RBX: 00007fbb101a6080 RCX: 00007fbb0ff8d169
[ 1350.903629][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 000000000000000a
[ 1350.911594][    C1] RBP: 00007fbb1000e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1350.919559][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1350.927523][    C1] R13: 0000000000000001 R14: 00007fbb101a6080 R15: 00007ffd0b3fefa8
[ 1350.935499][    C1]  </TASK>
[ 1350.938515][    C1] rcu: rcu_preempt kthread starved for 10450 jiffies! g92893 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1350.949699][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1350.959655][    C1] rcu: RCU grace-period kthread stack dump:
[ 1350.965529][    C1] task:rcu_preempt     state:R  running task     stack:27552 pid:18    tgid:18    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1350.979022][    C1] Call Trace:
[ 1350.982291][    C1]  <TASK>
[ 1350.985221][    C1]  __schedule+0xf43/0x5890
[ 1350.989650][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 1350.994869][    C1]  ? __pfx___schedule+0x10/0x10
[ 1350.999735][    C1]  ? schedule+0x298/0x350
[ 1351.004067][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1351.009096][    C1]  ? lock_acquire+0x2f/0xb0
[ 1351.013603][    C1]  ? schedule+0x1fd/0x350
[ 1351.017935][    C1]  schedule+0xe7/0x350
[ 1351.022008][    C1]  schedule_timeout+0x124/0x280
[ 1351.026858][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1351.032228][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1351.037515][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1351.043322][    C1]  ? prepare_to_swait_event+0xf3/0x470
[ 1351.048789][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[ 1351.053572][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1351.058869][    C1]  ? rcu_gp_init+0xc82/0x1630
[ 1351.063553][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1351.068763][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1351.074572][    C1]  rcu_gp_kthread+0x271/0x380
[ 1351.079258][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1351.084462][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1351.089669][    C1]  ? __kthread_parkme+0x148/0x220
[ 1351.094693][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1351.099894][    C1]  kthread+0x3af/0x750
[ 1351.103966][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.108560][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.113155][    C1]  ret_from_fork+0x45/0x80
[ 1351.117573][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.122184][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1351.126954][    C1]  </TASK>
[ 1351.129966][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1351.136288][    C1] CPU: 1 UID: 0 PID: 16407 Comm: kworker/u8:26 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0
[ 1351.147307][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1351.157367][    C1] Workqueue: events_unbound toggle_allocation_gate
[ 1351.163879][    C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0
[ 1351.170554][    C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31
[ 1351.190157][    C1] RSP: 0018:ffffc9000c26f928 EFLAGS: 00000293
[ 1351.196220][    C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81ade1ea
[ 1351.204183][    C1] RDX: ffff8880302da440 RSI: ffffffff81ade1c4 RDI: 0000000000000005
[ 1351.212147][    C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
[ 1351.220109][    C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41
[ 1351.228071][    C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08
[ 1351.236050][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 1351.244989][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1351.251587][    C1] CR2: 00007fde58960426 CR3: 000000000df80000 CR4: 00000000003526f0
[ 1351.259566][    C1] DR0: 0000000100000000 DR1: 0000000000000040 DR2: 0000000000000003
[ 1351.267536][    C1] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1351.275513][    C1] Call Trace:
[ 1351.278788][    C1]  <IRQ>
[ 1351.281636][    C1]  ? rcu_check_gp_kthread_starvation+0x31b/0x450
[ 1351.287965][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 1351.293159][    C1]  ? rcu_sched_clock_irq+0x247a/0x3310
[ 1351.298623][    C1]  ? timekeeping_advance+0x72e/0xa90
[ 1351.303905][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 1351.309533][    C1]  ? __asan_memcpy+0x3c/0x60
[ 1351.314131][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1351.318893][    C1]  ? update_process_times+0x178/0x2d0
[ 1351.324265][    C1]  ? __pfx_update_process_times+0x10/0x10
[ 1351.329985][    C1]  ? update_wall_time+0x1c/0x40
[ 1351.334842][    C1]  ? tick_nohz_handler+0x376/0x530
[ 1351.339950][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 1351.345403][    C1]  ? __hrtimer_run_queues+0x5fb/0xae0
[ 1351.350775][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1351.356487][    C1]  ? read_tsc+0x9/0x20
[ 1351.360574][    C1]  ? hrtimer_interrupt+0x392/0x8e0
[ 1351.365692][    C1]  ? __sysvec_apic_timer_interrupt+0x10f/0x400
[ 1351.371851][    C1]  ? sysvec_apic_timer_interrupt+0x9f/0xc0
[ 1351.377655][    C1]  </IRQ>
[ 1351.380579][    C1]  <TASK>
[ 1351.383505][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1351.389668][    C1]  ? smp_call_function_many_cond+0x4ea/0x12c0
[ 1351.395729][    C1]  ? smp_call_function_many_cond+0x4c4/0x12c0
[ 1351.401790][    C1]  ? smp_call_function_many_cond+0x4c6/0x12c0
[ 1351.407852][    C1]  ? smp_call_function_many_cond+0x4c4/0x12c0
[ 1351.413923][    C1]  ? __pfx_do_sync_core+0x10/0x10
[ 1351.418940][    C1]  on_each_cpu_cond_mask+0x40/0x90
[ 1351.424047][    C1]  text_poke_bp_batch+0x22b/0x760
[ 1351.429069][    C1]  ? __pfx___mutex_lock+0x10/0x10
[ 1351.434091][    C1]  ? __pfx_text_poke_bp_batch+0x10/0x10
[ 1351.439632][    C1]  ? text_poke_queue+0xef/0x180
[ 1351.444478][    C1]  ? arch_jump_label_transform_queue+0xc0/0x120
[ 1351.450726][    C1]  text_poke_finish+0x30/0x40
[ 1351.455397][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[ 1351.461372][    C1]  jump_label_update+0x1d7/0x400
[ 1351.466311][    C1]  static_key_disable_cpuslocked+0x158/0x1c0
[ 1351.472289][    C1]  static_key_disable+0x1a/0x20
[ 1351.477135][    C1]  toggle_allocation_gate+0x147/0x260
[ 1351.482504][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1351.488391][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[ 1351.493585][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1351.499653][    C1]  ? lock_acquire+0x2f/0xb0
[ 1351.504153][    C1]  ? process_one_work+0x921/0x1ba0
[ 1351.509265][    C1]  process_one_work+0x9c5/0x1ba0
[ 1351.514209][    C1]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[ 1351.520359][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1351.525735][    C1]  ? assign_work+0x1a0/0x250
[ 1351.530324][    C1]  worker_thread+0x6c8/0xf00
[ 1351.534924][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1351.540036][    C1]  kthread+0x3af/0x750
[ 1351.544102][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.548690][    C1]  ? lock_acquire+0x2f/0xb0
[ 1351.553194][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.557782][    C1]  ret_from_fork+0x45/0x80
[ 1351.562198][    C1]  ? __pfx_kthread+0x10/0x10
[ 1351.566783][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1351.571557][    C1]  </TASK>