last executing test programs:

3m24.282100069s ago: executing program 3 (id=340):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
io_setup(0x4, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x800448d2, &(0x7f0000000100))
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r8, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES16=r7, @ANYRES64=r1, @ANYRES8=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs$userns(r2, &(0x7f00000000c0))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x401}, 0x14}}, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x25)

3m21.743579822s ago: executing program 3 (id=345):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000162000/0x4000)=nil, 0x4000, 0x2)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000240)={0x200, 0x2, 0x2}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgid(0x0)
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7})
sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015)
ptrace(0x10, r2)
ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

3m21.062073489s ago: executing program 3 (id=350):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r0, 0x4bfb, 0x10000000000004)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000002280)=ANY=[@ANYBLOB="12010002050203010902030001070340f289966d1d780904fc08010af4770509050f57c10f6701400008000000"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2a0b43)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x3b)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000040)={0x3, r6})

3m19.921434604s ago: executing program 3 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60b03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x2010, 0xffffffffffffffff, 0x470af000)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
socket(0x2a, 0x609db2c6e067f565, 0x80000001)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
unshare(0x22020600)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)

3m16.586708661s ago: executing program 3 (id=362):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="40a05274d3ef17df8550ea10c82bb4f276f9043ce9c0de7a52bafa7a52f7a83aaf7f9f030ad0b7e1447cde6da132afaed7eb8c57d9b05b58e7d4a90a8531e447afacd789ede8ccda1388187774a5c3aeca7ae705c66efaeac5721af11b7266a8899dc352583f38dc29290d80e4b070e29c5c62d3a175155ee43580151c6296ee0590776fcc71799c9017dc06f1d8dbecbaa7012292b005f8712bd4408fda4b8cfa782ce9e80e59e26d4a99c5e1cf45ccf81d579b289fc9aa108d7cf8c7037048ebe8d4cdebe91407defb8e6d9b386210c4c8f98adc31a0a32467ca0543", @ANYBLOB="47c4152f476ef004cc581e89bfe8638e21e34793869ba2071b79d77fe93f4c35947a13c986f8bcd8d422d9cf390b11f96358ea067a0e74f134117347efb7ab"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$inet(0x2, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6}}]}, 0x24}}, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @rand_addr=0x64010100, r6}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

3m16.344974442s ago: executing program 3 (id=365):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x7, 0xd}, {0xffff, 0x4}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x7ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040840}, 0x44080)
r3 = socket(0x5, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x0, 0x2b4a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000043c0)=[{{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000700)=""/94, 0x5e}], 0x4, &(0x7f0000001180)=""/4, 0x4}, 0x5}, {{&(0x7f00000011c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/74, 0x4a}, {&(0x7f0000001300)=""/51, 0x33}], 0x3, &(0x7f0000001380)=""/126, 0x7e}, 0x6}, {{&(0x7f0000001400)=@caif=@dgm, 0x80, &(0x7f0000001840)=[{&(0x7f0000001480)=""/192, 0xc0}, {&(0x7f0000001540)=""/40, 0x28}, {&(0x7f0000001580)=""/138, 0x8a}, {&(0x7f0000001640)=""/58, 0x3a}, {&(0x7f0000001680)=""/249, 0xf9}, {&(0x7f0000001780)=""/48, 0x30}, {&(0x7f00000017c0)=""/85, 0x55}], 0x7, &(0x7f00000018c0)=""/66, 0x42}, 0xdbb}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/16, 0x10}], 0x3, &(0x7f0000003a40)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003b40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003bc0)=""/79, 0x4f}], 0x1, &(0x7f0000003c80)=""/68, 0x44}, 0x3}, {{&(0x7f0000003d00)=@pppol2tpin6, 0x80, &(0x7f0000004280)=[{&(0x7f0000003d80)=""/232, 0xe8}, {&(0x7f0000003e80)=""/233, 0xe9}, {&(0x7f0000003f80)=""/249, 0xf9}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/102, 0x66}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/95, 0x5f}], 0x7, &(0x7f0000004300)=""/162, 0xa2}, 0x3}], 0x6, 0x2, 0x0)
memfd_create(0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1be10000220000032dbd7000fbdbdf2502108047070000050c000000baad2bd23b723664f31698b519b636e3e93518d9682342eb9bf6ce59d91028f9a6006273c42c28d08f15da606ecb9844ab55c7a33932c2b196b59095e0b75d937d0a162ee619d0e2ae5bdd50a7f59b3b4a9de2983d4f93c05caa33661b51d8bf2e466c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtfilter={0x970, 0x2c, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0xc6821302b4a0205c}, {0xd, 0x7}, {0x0, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x49c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x80000001, 0xfffffe01}}, @TCA_U32_LINK={0x8, 0x3, 0x8000000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x97}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xf9688388b91f686e}}, @TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_POLICE={0x450, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xbe11, 0x3, 0x3, {0x3, 0x1, 0x8, 0x8, 0xa2f, 0x3}, {0x6, 0x1, 0xc9b, 0xa, 0x3, 0x25f00c5f}, 0x6, 0x8, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x60, 0x7fff, 0x2, 0x6, 0x2, 0x0, 0x1, 0x71, 0x70, 0x2, 0xfffffffd, 0x1000, 0x6, 0x2, 0xb4e88685, 0x7fff, 0x9, 0x800, 0x10, 0x788ac720, 0x5, 0x1, 0x8000, 0xd1d, 0x0, 0xd01, 0x8, 0x800, 0x2, 0xaed, 0x2, 0x6, 0x2, 0x5, 0xa, 0x8, 0x401, 0xcfa, 0x7, 0x0, 0x8, 0x3, 0x9, 0x4, 0x800, 0x2, 0x4, 0x3, 0x894e, 0xe, 0x80, 0x5, 0x6, 0x2, 0x14, 0xf, 0x3, 0x6, 0x43, 0xc5, 0x7fffffff, 0x1, 0x7fffffff, 0x3, 0x8, 0x7, 0x1, 0x0, 0x2, 0x2, 0x9, 0x4, 0x6, 0x9, 0x7, 0x1, 0x2, 0x0, 0xc15a, 0x7, 0xfffffffd, 0x8, 0x4, 0x606, 0x202, 0xffff06aa, 0x2, 0x10000000, 0x8, 0x905a, 0x1, 0x9, 0x3, 0x7, 0x80000001, 0x7, 0x5, 0x101, 0x7, 0x9, 0x7, 0x1ff, 0x7, 0x7, 0x0, 0x1, 0x4, 0xff, 0x40000000, 0x3, 0x80000001, 0xffffff25, 0x8a, 0x1, 0x1, 0x0, 0x0, 0x7, 0xad, 0x10, 0xfffffffb, 0x7, 0x200, 0x7, 0x5, 0x1, 0x5, 0xe, 0x8000, 0xa, 0x1, 0x8000, 0x4, 0x0, 0x116, 0xfffffffa, 0x8000, 0x1, 0x401, 0x0, 0x10000, 0x5, 0xa, 0x1, 0x7, 0xffff, 0x1208, 0xe8, 0x6, 0x400, 0x6c54, 0x5, 0x3, 0x6, 0x9, 0x1, 0x9, 0x8, 0x80000000, 0x7, 0x1000, 0x9, 0x2, 0x5, 0x3, 0x80000000, 0x2, 0x3, 0xfffffff7, 0x7f, 0x5a24, 0x0, 0x5, 0x1, 0x3, 0x7, 0x8, 0x6199, 0x3ff, 0xfffffff7, 0x5, 0xd86, 0xb, 0x1, 0x6, 0x2958, 0x4, 0xffffffff, 0x5, 0xff, 0x3a22, 0x5, 0xa6, 0xff, 0xb, 0x0, 0xffffff00, 0x400, 0x7fff, 0xeaf2, 0x1ff, 0x9, 0x2, 0xe60, 0x10, 0x6e43, 0xa, 0x6, 0xfffff79a, 0x1, 0xfffffffa, 0x4, 0x2, 0x7, 0x5, 0x4, 0x7ab5, 0xffffffe7, 0x8, 0x7fff, 0x5, 0x0, 0x7fff, 0x8, 0x0, 0xc, 0x0, 0x5, 0xffff5025, 0x5, 0xffff, 0x10001, 0x4, 0x1, 0x3, 0x9, 0x6, 0x5, 0x2, 0x29e7b048, 0x4a9, 0x9, 0x80, 0x2, 0x0, 0x4, 0x6, 0x78f, 0xec4e, 0x7, 0xfffffffe, 0xbe13, 0x2, 0x6, 0x80000000, 0x2]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0x48c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_ROUTE4_POLICE={0x58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x3, 0x8, 0xc, {0x5e, 0x1, 0x692, 0x6, 0x5, 0x6}, {0x4, 0x2, 0x8, 0xc, 0x8, 0xa}, 0x72b8, 0x3, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd71d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x57e4, 0x9, 0x1b, 0x2, 0x7fff, 0x6, 0x3, 0x9, 0x6, 0x0, 0x6, 0xc, 0x1000, 0x10000, 0xd9f4, 0x3, 0x4, 0x3, 0xb, 0x9, 0x7, 0x8, 0x6, 0x1, 0x4, 0x0, 0x101, 0x5, 0xa722, 0xffff8000, 0xff, 0x3ff, 0x4, 0xffffffff, 0x8, 0x22bd, 0x4, 0x7fffffff, 0x2, 0x1, 0x200, 0x1, 0x0, 0x2d42, 0x7, 0x9, 0xa, 0x4, 0x7, 0xa1, 0x2, 0x1, 0x2, 0x0, 0x1a92536f, 0x63, 0xef, 0x3ff, 0x0, 0x8, 0x5, 0x200, 0x6, 0x8, 0x9, 0xc13, 0x200, 0x959c, 0x40000000, 0x1, 0x5, 0x6, 0x5, 0x79a5, 0x7, 0x10001, 0x0, 0x9, 0xa8, 0x3f, 0x80000000, 0x81, 0xfff, 0x8, 0x7, 0x1, 0x3, 0x0, 0x7c2c, 0x91, 0xdf2f, 0x4, 0x100, 0x8, 0x9, 0x5c29, 0x8001, 0x0, 0x800, 0x77c128ba, 0x8, 0x1, 0x56, 0x8, 0x8, 0x6, 0x7, 0x3, 0x5, 0x6f, 0x3, 0x7, 0xb, 0x0, 0x4, 0x6, 0xbcd, 0x6, 0x8e6, 0x4, 0x8000, 0x80000001, 0xfffffe5f, 0x57, 0x2, 0x7, 0x2, 0x0, 0x7, 0x8, 0x3, 0x6, 0xb, 0x40, 0x400, 0x5, 0x0, 0x1000, 0xffffffff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffc, 0x97035e7f, 0x4, 0x1000, 0x80000000, 0x7fffffff, 0x7, 0x3, 0x1, 0xfff, 0x5, 0x8001, 0x7fffffff, 0x29, 0xd5, 0xa1, 0x615, 0x10001, 0x5, 0x1, 0xe8c00000, 0x3d, 0x4, 0x7, 0x7, 0x0, 0x5a, 0xf, 0x200, 0x400, 0x1000, 0x8, 0x6, 0x10000, 0x6, 0x4, 0x7, 0x9, 0x5, 0x501d7f59, 0x3, 0x2, 0x7, 0x8, 0xdfb, 0x8, 0x6, 0x8b, 0x5, 0x6, 0xff800000, 0x25, 0x9, 0x7, 0x8, 0x80000001, 0x3, 0x2, 0x0, 0x1, 0x860d, 0x2, 0x2, 0x2, 0x8af, 0x5, 0x5, 0x0, 0x5, 0x0, 0x1ff, 0x0, 0x6, 0x2, 0x9, 0xc, 0x10000, 0xd, 0x4, 0x0, 0x6, 0xd, 0x80000001, 0x0, 0xa, 0x40, 0x8, 0x2, 0x7b40ce3d, 0x1d5, 0x1000, 0x2, 0x2, 0xfff, 0x2, 0x6, 0x7, 0x9, 0x80000000, 0x6, 0x7, 0x2, 0xd22b, 0xe, 0x45, 0xffff0000, 0x9, 0x2, 0x4, 0x7fff]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x970}}, 0x4000)
r10 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

3m1.188571437s ago: executing program 32 (id=365):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x7, 0xd}, {0xffff, 0x4}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x7ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040840}, 0x44080)
r3 = socket(0x5, 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x0, 0x2b4a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000043c0)=[{{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/154, 0x9a}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000700)=""/94, 0x5e}], 0x4, &(0x7f0000001180)=""/4, 0x4}, 0x5}, {{&(0x7f00000011c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/74, 0x4a}, {&(0x7f0000001300)=""/51, 0x33}], 0x3, &(0x7f0000001380)=""/126, 0x7e}, 0x6}, {{&(0x7f0000001400)=@caif=@dgm, 0x80, &(0x7f0000001840)=[{&(0x7f0000001480)=""/192, 0xc0}, {&(0x7f0000001540)=""/40, 0x28}, {&(0x7f0000001580)=""/138, 0x8a}, {&(0x7f0000001640)=""/58, 0x3a}, {&(0x7f0000001680)=""/249, 0xf9}, {&(0x7f0000001780)=""/48, 0x30}, {&(0x7f00000017c0)=""/85, 0x55}], 0x7, &(0x7f00000018c0)=""/66, 0x42}, 0xdbb}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/16, 0x10}], 0x3, &(0x7f0000003a40)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003b40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003bc0)=""/79, 0x4f}], 0x1, &(0x7f0000003c80)=""/68, 0x44}, 0x3}, {{&(0x7f0000003d00)=@pppol2tpin6, 0x80, &(0x7f0000004280)=[{&(0x7f0000003d80)=""/232, 0xe8}, {&(0x7f0000003e80)=""/233, 0xe9}, {&(0x7f0000003f80)=""/249, 0xf9}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/102, 0x66}, {&(0x7f0000004180)=""/100, 0x64}, {&(0x7f0000004200)=""/95, 0x5f}], 0x7, &(0x7f0000004300)=""/162, 0xa2}, 0x3}], 0x6, 0x2, 0x0)
memfd_create(0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1be10000220000032dbd7000fbdbdf2502108047070000050c000000baad2bd23b723664f31698b519b636e3e93518d9682342eb9bf6ce59d91028f9a6006273c42c28d08f15da606ecb9844ab55c7a33932c2b196b59095e0b75d937d0a162ee619d0e2ae5bdd50a7f59b3b4a9de2983d4f93c05caa33661b51d8bf2e466c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newtfilter={0x970, 0x2c, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff3, 0xc6821302b4a0205c}, {0xd, 0x7}, {0x0, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x49c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x80000001, 0xfffffe01}}, @TCA_U32_LINK={0x8, 0x3, 0x8000000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x97}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0xf9688388b91f686e}}, @TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_POLICE={0x450, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xbe11, 0x3, 0x3, {0x3, 0x1, 0x8, 0x8, 0xa2f, 0x3}, {0x6, 0x1, 0xc9b, 0xa, 0x3, 0x25f00c5f}, 0x6, 0x8, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x60, 0x7fff, 0x2, 0x6, 0x2, 0x0, 0x1, 0x71, 0x70, 0x2, 0xfffffffd, 0x1000, 0x6, 0x2, 0xb4e88685, 0x7fff, 0x9, 0x800, 0x10, 0x788ac720, 0x5, 0x1, 0x8000, 0xd1d, 0x0, 0xd01, 0x8, 0x800, 0x2, 0xaed, 0x2, 0x6, 0x2, 0x5, 0xa, 0x8, 0x401, 0xcfa, 0x7, 0x0, 0x8, 0x3, 0x9, 0x4, 0x800, 0x2, 0x4, 0x3, 0x894e, 0xe, 0x80, 0x5, 0x6, 0x2, 0x14, 0xf, 0x3, 0x6, 0x43, 0xc5, 0x7fffffff, 0x1, 0x7fffffff, 0x3, 0x8, 0x7, 0x1, 0x0, 0x2, 0x2, 0x9, 0x4, 0x6, 0x9, 0x7, 0x1, 0x2, 0x0, 0xc15a, 0x7, 0xfffffffd, 0x8, 0x4, 0x606, 0x202, 0xffff06aa, 0x2, 0x10000000, 0x8, 0x905a, 0x1, 0x9, 0x3, 0x7, 0x80000001, 0x7, 0x5, 0x101, 0x7, 0x9, 0x7, 0x1ff, 0x7, 0x7, 0x0, 0x1, 0x4, 0xff, 0x40000000, 0x3, 0x80000001, 0xffffff25, 0x8a, 0x1, 0x1, 0x0, 0x0, 0x7, 0xad, 0x10, 0xfffffffb, 0x7, 0x200, 0x7, 0x5, 0x1, 0x5, 0xe, 0x8000, 0xa, 0x1, 0x8000, 0x4, 0x0, 0x116, 0xfffffffa, 0x8000, 0x1, 0x401, 0x0, 0x10000, 0x5, 0xa, 0x1, 0x7, 0xffff, 0x1208, 0xe8, 0x6, 0x400, 0x6c54, 0x5, 0x3, 0x6, 0x9, 0x1, 0x9, 0x8, 0x80000000, 0x7, 0x1000, 0x9, 0x2, 0x5, 0x3, 0x80000000, 0x2, 0x3, 0xfffffff7, 0x7f, 0x5a24, 0x0, 0x5, 0x1, 0x3, 0x7, 0x8, 0x6199, 0x3ff, 0xfffffff7, 0x5, 0xd86, 0xb, 0x1, 0x6, 0x2958, 0x4, 0xffffffff, 0x5, 0xff, 0x3a22, 0x5, 0xa6, 0xff, 0xb, 0x0, 0xffffff00, 0x400, 0x7fff, 0xeaf2, 0x1ff, 0x9, 0x2, 0xe60, 0x10, 0x6e43, 0xa, 0x6, 0xfffff79a, 0x1, 0xfffffffa, 0x4, 0x2, 0x7, 0x5, 0x4, 0x7ab5, 0xffffffe7, 0x8, 0x7fff, 0x5, 0x0, 0x7fff, 0x8, 0x0, 0xc, 0x0, 0x5, 0xffff5025, 0x5, 0xffff, 0x10001, 0x4, 0x1, 0x3, 0x9, 0x6, 0x5, 0x2, 0x29e7b048, 0x4a9, 0x9, 0x80, 0x2, 0x0, 0x4, 0x6, 0x78f, 0xec4e, 0x7, 0xfffffffe, 0xbe13, 0x2, 0x6, 0x80000000, 0x2]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0x48c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_ROUTE4_POLICE={0x58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x3, 0x8, 0xc, {0x5e, 0x1, 0x692, 0x6, 0x5, 0x6}, {0x4, 0x2, 0x8, 0xc, 0x8, 0xa}, 0x72b8, 0x3, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd71d}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x57e4, 0x9, 0x1b, 0x2, 0x7fff, 0x6, 0x3, 0x9, 0x6, 0x0, 0x6, 0xc, 0x1000, 0x10000, 0xd9f4, 0x3, 0x4, 0x3, 0xb, 0x9, 0x7, 0x8, 0x6, 0x1, 0x4, 0x0, 0x101, 0x5, 0xa722, 0xffff8000, 0xff, 0x3ff, 0x4, 0xffffffff, 0x8, 0x22bd, 0x4, 0x7fffffff, 0x2, 0x1, 0x200, 0x1, 0x0, 0x2d42, 0x7, 0x9, 0xa, 0x4, 0x7, 0xa1, 0x2, 0x1, 0x2, 0x0, 0x1a92536f, 0x63, 0xef, 0x3ff, 0x0, 0x8, 0x5, 0x200, 0x6, 0x8, 0x9, 0xc13, 0x200, 0x959c, 0x40000000, 0x1, 0x5, 0x6, 0x5, 0x79a5, 0x7, 0x10001, 0x0, 0x9, 0xa8, 0x3f, 0x80000000, 0x81, 0xfff, 0x8, 0x7, 0x1, 0x3, 0x0, 0x7c2c, 0x91, 0xdf2f, 0x4, 0x100, 0x8, 0x9, 0x5c29, 0x8001, 0x0, 0x800, 0x77c128ba, 0x8, 0x1, 0x56, 0x8, 0x8, 0x6, 0x7, 0x3, 0x5, 0x6f, 0x3, 0x7, 0xb, 0x0, 0x4, 0x6, 0xbcd, 0x6, 0x8e6, 0x4, 0x8000, 0x80000001, 0xfffffe5f, 0x57, 0x2, 0x7, 0x2, 0x0, 0x7, 0x8, 0x3, 0x6, 0xb, 0x40, 0x400, 0x5, 0x0, 0x1000, 0xffffffff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffc, 0x97035e7f, 0x4, 0x1000, 0x80000000, 0x7fffffff, 0x7, 0x3, 0x1, 0xfff, 0x5, 0x8001, 0x7fffffff, 0x29, 0xd5, 0xa1, 0x615, 0x10001, 0x5, 0x1, 0xe8c00000, 0x3d, 0x4, 0x7, 0x7, 0x0, 0x5a, 0xf, 0x200, 0x400, 0x1000, 0x8, 0x6, 0x10000, 0x6, 0x4, 0x7, 0x9, 0x5, 0x501d7f59, 0x3, 0x2, 0x7, 0x8, 0xdfb, 0x8, 0x6, 0x8b, 0x5, 0x6, 0xff800000, 0x25, 0x9, 0x7, 0x8, 0x80000001, 0x3, 0x2, 0x0, 0x1, 0x860d, 0x2, 0x2, 0x2, 0x8af, 0x5, 0x5, 0x0, 0x5, 0x0, 0x1ff, 0x0, 0x6, 0x2, 0x9, 0xc, 0x10000, 0xd, 0x4, 0x0, 0x6, 0xd, 0x80000001, 0x0, 0xa, 0x40, 0x8, 0x2, 0x7b40ce3d, 0x1d5, 0x1000, 0x2, 0x2, 0xfff, 0x2, 0x6, 0x7, 0x9, 0x80000000, 0x6, 0x7, 0x2, 0xd22b, 0xe, 0x45, 0xffff0000, 0x9, 0x2, 0x4, 0x7fff]}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x970}}, 0x4000)
r10 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

2m2.335170707s ago: executing program 0 (id=572):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000380)={0x8, 0xfff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
getpid()
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88<A\r\xe6\xe5\xb8u\x10Q\x13\xef\xfe>`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca)
r6 = io_uring_setup(0x7c3b, &(0x7f0000000440)={0x0, 0xc95e, 0x0, 0x3})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r7, &(0x7f0000000100), 0x0)
r8 = dup(r1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58)
socket(0x2, 0x80805, 0x0)

2m1.592333225s ago: executing program 0 (id=575):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket(0x10, 0x6, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xfffffffc, 0x3ff, 0x2000002, 0x3a6}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async, rerun: 32)
io_uring_setup(0x1dde, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x1, 0x4, 0x0, r3}) (async, rerun: 32)
io_uring_enter(r3, 0x1867, 0x810003, 0x26, 0x0, 0x7) (async)
close(r2)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
listen(r2, 0x9) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00')
pread64(r7, &(0x7f0000002180)=""/4105, 0x1009, 0x500) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
prlimit64(0x0, 0x7, &(0x7f0000000300)={0x9, 0xffffffffffff4b2c}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1400200bce)
sched_setscheduler(0x0, 0x5, &(0x7f0000002200)) (async)
sendmsg$kcm(r6, 0x0, 0x20000000) (async)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) (async)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x2) (async, rerun: 64)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0x100000000) (async, rerun: 64)
sendmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x42, 0x20044000)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000440)=0x4) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
close(0x4)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1m57.933422771s ago: executing program 0 (id=590):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x5d0, 0x20050000)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "114c3e", 0x90, 0x6, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x16}, {[@fragment={0x5e, 0x0, 0x5, 0x1, 0x0, 0x3, 0x65}, @srh={0x29, 0x4, 0x4, 0x2, 0xe8, 0x78, 0x7, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @routing={0x87, 0x4, 0x2, 0xf7, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x29, 0x0, 0x4, 0x0, 0x9, 0x30, 0xe}, @dstopts={0x1d}], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x2, 0x4, 0x0, 0x3, 0x5, 0x5, 0x3, 0xe27, 0x81, 0x4, 0x4e20, 0x4e23}, 0x3, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84000)
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)

1m56.570502219s ago: executing program 0 (id=592):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_setup(0xa, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000180))
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000800000"], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getsockname$unix(r2, &(0x7f0000000300), &(0x7f0000000200)=0x6e)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000380)={0x1, 0x2, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
unshare(0x68060200)

1m53.949564755s ago: executing program 5 (id=600):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x3ff, {0x0, 0x0, 0x0, 0x7, 0x5e4, 0x0, 0x6, 0x1, 0xc, "c76a4ce62afe7bb9d9873bab83e2f454912cdc9d581cb16238aa224f07d4c31ffb8fd9c122091ddffa1599dd2dec40d56d25c3102dff2ccb26262f978516914e", "ac9e1f97be328c9f3a896f09bbb50739d90b77b7386cd2be9242019efa8392975c35447f86c196d7d10042a6c60bfcf943d3f358df8cd18cc027077a118fb4f7", "a9615fd1337caca29145dc1f9673162906f99848fd6c187be5527766cfa2d948", [0x2, 0x10000]}})
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0)

1m52.574265154s ago: executing program 5 (id=602):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000580)=""/77, 0x4d}, 0x8000)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r3, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5efe)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d0001"], 0x10}}, 0x0)
unshare(0x6a040000)
unshare(0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x41)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30aaaaaaaaaabb08004500001e0001e00000"], 0x8a)

1m51.790293203s ago: executing program 5 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff9, 0x8, 0x1, 0x3, 0x7})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_gpio_in\x00', r4, 0x0, 0x1}, 0x18)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
write$tun(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0/file0'}, 0x11)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000080)={0x8, 0x4})
socket$nl_netfilter(0x10, 0x3, 0xc)

1m51.510280287s ago: executing program 0 (id=608):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}})
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011"], 0xb4}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
sync()
socket$igmp(0x2, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0500580c"], 0x8)

1m50.10650658s ago: executing program 5 (id=613):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x5d0, 0x20050000)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "114c3e", 0x90, 0x6, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x16}, {[@fragment={0x5e, 0x0, 0x5, 0x1, 0x0, 0x3, 0x65}, @srh={0x29, 0x4, 0x4, 0x2, 0xe8, 0x78, 0x7, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @routing={0x87, 0x4, 0x2, 0xf7, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x29, 0x0, 0x4, 0x0, 0x9, 0x30, 0xe}, @dstopts={0x1d}], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x2, 0x4, 0x0, 0x3, 0x5, 0x5, 0x3, 0xe27, 0x81, 0x4, 0x4e20, 0x4e23}, 0x3, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x2, 0x0)

1m49.968577542s ago: executing program 0 (id=616):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mlockall(0x2)
r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = syz_open_dev$vcsu(0x0, 0x6, 0x101002)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x5c, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff000040"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000633000/0x800000)=nil, 0x800000, 0x13)
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]})
recvfrom(r9, &(0x7f0000000380)=""/17, 0x11, 0x2000, &(0x7f00000003c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80)

1m48.789266461s ago: executing program 5 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800002f, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000010000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
gettid()
clock_nanosleep(0x2, 0x3b9ac9ff, &(0x7f0000000100), 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080))

1m44.7508941s ago: executing program 2 (id=619):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100002000)
recvmmsg(r0, &(0x7f0000004e80)=[{{&(0x7f0000000100)=@ax25={{0x3, @bcast}, [@bcast, @bcast, @null, @null, @bcast, @rose, @bcast, @null]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/245, 0xf5}], 0x4}, 0xe95}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000001740)=""/165, 0xa5}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x6}, 0xfffffff3}, {{&(0x7f0000002880)=@isdn, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002900)=""/196, 0xc4}, {&(0x7f0000002a00)=""/163, 0xa3}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/171, 0xab}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/12, 0xc}, {&(0x7f0000004cc0)}], 0x8, &(0x7f0000004d80)=""/253, 0xfd}, 0x9}], 0x3, 0x1, &(0x7f0000004f40)={0x77359400})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x10000, 0x0)
syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)

1m44.440868649s ago: executing program 5 (id=621):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(&(0x7f0000000180)='jffs2\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x1a, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000072fefd0000"], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xcc071d8d439a1d7d}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0100000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x2, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x96e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r9, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m44.305184866s ago: executing program 2 (id=622):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @none}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)})
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x33, 0x8, 0x7e, 0x40, 0x112a, 0x1, 0x9921, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0xf9, 0xfc, 0x0, 0xc6, 0x4c, 0x53, 0x7}}]}}]}}, 0x0)

1m38.616243219s ago: executing program 2 (id=624):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x268, 0x311, 0x0, 0x268, 0x3f0, 0x460, 0x460, 0x3f0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x288, 0x2b0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2, @remote, [], [], [], 0x0, 0x7863}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd8, 0x140, 0xe4030000, {}, [@common=@unspec=@realm={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
preadv2(r0, &(0x7f0000000100)=[{0x0, 0x30}, {&(0x7f0000000040)=""/86, 0x56}], 0x2, 0xffff, 0x4, 0x1)

1m34.642630135s ago: executing program 33 (id=616):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mlockall(0x2)
r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000)
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$SHM_UNLOCK(r3, 0xc)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = syz_open_dev$vcsu(0x0, 0x6, 0x101002)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x5c, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ff000040"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000633000/0x800000)=nil, 0x800000, 0x13)
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]})
recvfrom(r9, &(0x7f0000000380)=""/17, 0x11, 0x2000, &(0x7f00000003c0)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80)

1m34.022879807s ago: executing program 2 (id=627):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x5d0, 0x20050000)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "114c3e", 0x90, 0x6, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x16}, {[@fragment={0x5e, 0x0, 0x5, 0x1, 0x0, 0x3, 0x65}, @srh={0x29, 0x4, 0x4, 0x2, 0xe8, 0x78, 0x7, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @routing={0x87, 0x4, 0x2, 0xf7, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x29, 0x0, 0x4, 0x0, 0x9, 0x30, 0xe}, @dstopts={0x1d}], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x2, 0x4, 0x0, 0x3, 0x5, 0x5, 0x3, 0xe27, 0x81, 0x4, 0x4e20, 0x4e23}, 0x3, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x2, 0x0)

1m30.983213226s ago: executing program 2 (id=629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000001400178004000e0006000300"], 0x38}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4200, 0x38)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x3, 0x0, [{0x80000000, 0x1, 0x4, 0xd, 0x3, 0x6, 0x1}, {0x6, 0x1, 0x2, 0x8, 0x4, 0x0, 0x9}, {0x0, 0x9, 0x2, 0x6e, 0xb604, 0x9, 0xfffffffb}]})

1m29.592936657s ago: executing program 1 (id=630):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="210000000000000000000000000000400004"], 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b602000014"], 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = getpid()
syz_pidfd_open(r7, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002040)={0x1120, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x110e, 0x2, 0x0, 0x1, [@nested={0x4, 0x4d}, @typed={0x5, 0x1, 0x0, 0x0, @fd}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x111, 0x0, 0x0, @fd}, @generic="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", @generic="33aa41ad2f1f240176cad511dfdbb6ffed288ee1f0bbe789ba20537ec920661d2efdfcba91ffe2dd2105678ac917f3ae0adb03953bb7f959d80677389626085bee74f79e2f8f9d79c92e0f9317ca16db4ecd9a04c46b40a4020c156649b5d3c502f5d6ef168892d482b5b1d39b6ee9c90ab2c09006d1a587d5721f2969afa83693d3667ee66c87ad962662c2e15b06f73e2d7ce79f7b1593040e3cad07c564ed630be4701c9803a0273bf34731", @typed={0x8, 0x58, 0x0, 0x0, @pid=r7}, @generic="99f18f0a", @generic="f82fa92439d96308f470dc85c1cc5e895995082ef883c31e905ce96538da819e0d7203d7f4800a70878d5d048109aa8a951f1e88f2"]}]}, 0x1120}], 0x1, 0x0, 0x0, 0x24000004}, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x47, 0x3ff, {r5}, {r8}, 0xfffffffffffff3c6, 0xc212})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860600702c1ffe800000"], 0xffdd)

1m29.381980631s ago: executing program 2 (id=631):
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) (async)

1m28.602449188s ago: executing program 34 (id=621):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(&(0x7f0000000180)='jffs2\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x1a, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000072fefd0000"], 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xcc071d8d439a1d7d}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0100000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x2, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x96e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r9, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m22.624968048s ago: executing program 1 (id=639):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000180)=0x7, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900))
preadv2(r4, &(0x7f0000000100)=[{0x0, 0x30}, {&(0x7f0000000040)=""/86, 0x56}], 0x2, 0xffff, 0x4, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)

1m11.042470633s ago: executing program 35 (id=631):
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000023c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async)
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) (async)

1m11.002638252s ago: executing program 1 (id=642):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @none}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @union]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)})
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x33, 0x8, 0x7e, 0x40, 0x112a, 0x1, 0x9921, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0xf9, 0xfc, 0x0, 0xc6, 0x4c, 0x53, 0x7}}]}}]}}, 0x0)

1m8.7391659s ago: executing program 4 (id=645):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$9p(0x0, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x5d0, 0x20050000)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "114c3e", 0x90, 0x6, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x16}, {[@fragment={0x5e, 0x0, 0x5, 0x1, 0x0, 0x3, 0x65}, @srh={0x29, 0x4, 0x4, 0x2, 0xe8, 0x78, 0x7, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @routing={0x87, 0x4, 0x2, 0xf7, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @srh={0x29, 0x0, 0x4, 0x0, 0x9, 0x30, 0xe}, @dstopts={0x1d}], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x2, 0x4, 0x0, 0x3, 0x5, 0x5, 0x3, 0xe27, 0x81, 0x4, 0x4e20, 0x4e23}, 0x3, 0x3}}}}}}}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet(0x2, 0x1, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84000)
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)

1m6.831947211s ago: executing program 4 (id=646):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x1ffffc})
sendmsg$802154_dgram(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000340))
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x800000}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m6.787581544s ago: executing program 4 (id=647):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @none}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0xfffffffc, 0x0, 0x3}, 0x3})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)})
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x33, 0x8, 0x7e, 0x40, 0x112a, 0x1, 0x9921, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0xf9, 0xfc, 0x0, 0xc6, 0x4c, 0x53, 0x7}}]}}]}}, 0x0)

1m6.29862466s ago: executing program 1 (id=648):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @none}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0xfffffffc, 0x0, 0x3}, 0x3})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x400000000000000c, &(0x7f0000000080)})
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x33, 0x8, 0x7e, 0x40, 0x112a, 0x1, 0x9921, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x7, 0x0, 0x7, [{{0x9, 0x4, 0xf9, 0xfc, 0x0, 0xc6, 0x4c, 0x53, 0x7}}]}}]}}, 0x0)

1m3.653238877s ago: executing program 4 (id=649):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000180)=0x7, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900))
preadv2(r4, &(0x7f0000000100)=[{0x0, 0x30}, {&(0x7f0000000040)=""/86, 0x56}], 0x2, 0xffff, 0x4, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)

1m2.682031171s ago: executing program 1 (id=650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0)
r1 = syz_open_dev$sndctrl(0x0, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x401)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
unshare(0x6020480)
unshare(0x26020480)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$sndseq(r3, &(0x7f0000000040)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @ext={0x0, 0x0}}], 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, r4, r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x102}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

58.768600507s ago: executing program 4 (id=651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x400}]}}]}, 0x44}}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x400}]}}]}, 0x44}}, 0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) (async)

58.5333823s ago: executing program 1 (id=652):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20)
r1 = socket$kcm(0x2d, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x13fc, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1})

57.651268921s ago: executing program 4 (id=653):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5450, &(0x7f0000000180))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a32000000001400"], 0x78}}, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b042)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r6 = syz_open_dev$vim2m(&(0x7f0000000500), 0xb53d, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000540)={0x0, 0x1, 0x2})
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYRES16=r7, @ANYRES8=r6], 0x0)

0s ago: executing program 36 (id=652):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20)
r1 = socket$kcm(0x2d, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x13fc, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100}, 0x14)
bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r1})

kernel console output (not intermixed with test programs):

ort (expected 156, got 27)
[  138.397936][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.447450][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.486733][ T5886] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  138.504892][   T24] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  138.519070][ T5886] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  138.530384][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.539816][ T5886] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  138.554161][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0
[  138.563374][   T24] usb 5-1: config 0 descriptor??
[  138.572646][ T5886] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  138.581770][ T5886] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  138.590425][ T5886] usb 3-1: Product: syz
[  138.594614][ T5886] usb 3-1: Manufacturer: syz
[  138.599214][ T5886] usb 3-1: SerialNumber: syz
[  138.605595][ T5886] usb 3-1: config 0 descriptor??
[  138.612432][ T5886] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  138.626688][ T5886] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  138.718660][ T5923] usb 2-1: xr_serial converter now attached to ttyUSB0
[  138.816657][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[  138.897539][ T1220] usb 3-1: USB disconnect, device number 12
[  138.917231][ T1220] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  138.975055][ T5923] usb 2-1: USB disconnect, device number 5
[  138.983317][   T24] pantherlord 0003:0E8F:0003.0002: item fetching failed at offset 2/5
[  139.008711][ T5923] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  139.017697][   T24] pantherlord 0003:0E8F:0003.0002: parse failed
[  139.028013][   T24] pantherlord 0003:0E8F:0003.0002: probe with driver pantherlord failed with error -22
[  139.039848][ T5923] xr_serial 2-1:150.204: device disconnected
[  139.074414][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'.
[  139.178399][ T5915] usb 5-1: USB disconnect, device number 8
[  140.026474][ T6762] input: syz1 as /devices/virtual/input/input5
[  140.373721][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  140.386422][   T30] audit: type=1400 audit(1744084843.079:292): avc:  denied  { read } for  pid=5187 comm="acpid" name="event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  140.900142][   T30] audit: type=1400 audit(1744084843.079:293): avc:  denied  { open } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.057914][   T30] audit: type=1400 audit(1744084843.629:294): avc:  denied  { ioctl } for  pid=5187 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2788 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.134204][ T6777] random: crng reseeded on system resumption
[  141.136638][   T30] audit: type=1400 audit(1744084843.959:295): avc:  denied  { connect } for  pid=6774 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  141.228598][   T30] audit: type=1400 audit(1744084843.959:296): avc:  denied  { write } for  pid=6774 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  141.442876][   T30] audit: type=1400 audit(1744084844.039:297): avc:  granted  { setsecparam } for  pid=6774 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  141.480953][   T30] audit: type=1400 audit(1744084844.039:298): avc:  denied  { append } for  pid=6774 comm="syz.4.192" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  141.506055][   T30] audit: type=1400 audit(1744084844.039:299): avc:  denied  { open } for  pid=6774 comm="syz.4.192" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  141.649786][   T30] audit: type=1400 audit(1744084844.099:300): avc:  denied  { read write } for  pid=6774 comm="syz.4.192" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  141.808164][   T30] audit: type=1400 audit(1744084844.099:301): avc:  denied  { open } for  pid=6774 comm="syz.4.192" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  143.868128][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'.
[  143.877109][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'.
[  144.478351][ T6841] netlink: 68 bytes leftover after parsing attributes in process `syz.3.205'.
[  144.618006][ T6843] syz.4.206 (6843): drop_caches: 0
[  145.729769][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  145.729786][   T30] audit: type=1400 audit(1744084848.569:323): avc:  denied  { connect } for  pid=6878 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.773587][ T1005] Bluetooth: (null): Invalid header checksum
[  145.788935][ T1005] Bluetooth: (null): Invalid header checksum
[  145.813221][   T30] audit: type=1400 audit(1744084848.579:324): avc:  denied  { setopt } for  pid=6878 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  145.883335][ T3539] Bluetooth: (null): Invalid header checksum
[  146.258454][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[  146.268120][ T6900] IPVS: Error joining to the multicast group
[  146.275320][ T6900] sd 0:0:1:0: device reset
[  146.320761][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'.
[  146.329811][ T6901] IPVS: Error joining to the multicast group
[  146.338362][ T6901] sd 0:0:1:0: device reset
[  146.591149][ T6916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  146.607058][   T30] audit: type=1400 audit(1744084849.509:325): avc:  denied  { setopt } for  pid=6915 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  146.977080][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  146.986363][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  147.228876][   T30] audit: type=1400 audit(1744084850.129:326): avc:  denied  { append } for  pid=6925 comm="syz.4.219" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  147.303270][ T6932] netlink: 68 bytes leftover after parsing attributes in process `syz.3.220'.
[  147.329422][   T30] audit: type=1400 audit(1744084850.229:327): avc:  denied  { read } for  pid=6925 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  147.372953][   T30] audit: type=1400 audit(1744084850.279:328): avc:  denied  { create } for  pid=6934 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  147.449789][   T30] audit: type=1400 audit(1744084850.279:329): avc:  denied  { setopt } for  pid=6934 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  147.537526][   T30] audit: type=1400 audit(1744084850.439:330): avc:  denied  { bind } for  pid=6915 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  147.689863][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  147.854161][   T30] audit: type=1400 audit(1744084850.759:331): avc:  denied  { watch } for  pid=6955 comm="syz.0.223" path="/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  147.878391][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  147.908653][   T30] audit: type=1400 audit(1744084850.759:332): avc:  denied  { watch_sb watch_reads } for  pid=6955 comm="syz.0.223" path="/36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  148.004187][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.115937][   T10] usb 2-1: config 0 descriptor??
[  148.255433][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[  148.831561][   T10] gspca_spca508: reg_read err -110
[  148.939832][   T10] gspca_spca508: reg_read err -32
[  148.955316][   T10] gspca_spca508: reg_read err -32
[  148.978567][   T10] gspca_spca508: reg_read err -71
[  149.036213][   T10] gspca_spca508: reg_read err -71
[  149.051539][   T10] gspca_spca508: reg write: error -71
[  149.091864][   T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  149.227300][   T10] usb 2-1: USB disconnect, device number 6
[  149.453278][ T6986] netlink: 'syz.4.231': attribute type 10 has an invalid length.
[  149.464549][ T6986] bond0: (slave wlan1): Opening slave failed
[  149.735106][ T6992] netlink: 68 bytes leftover after parsing attributes in process `syz.0.232'.
[  149.903108][ T5915] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  150.071105][ T5915] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  150.079333][ T5915] usb 4-1: config 0 has no interface number 0
[  150.155232][ T5915] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  150.166761][ T5915] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  150.229395][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'.
[  150.400782][ T7003] veth0_vlan: left promiscuous mode
[  150.410672][ T7003] veth0_vlan: entered promiscuous mode
[  150.738580][ T5915] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.838432][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.197633][ T5915] usb 4-1: config 0 descriptor??
[  151.203630][ T6977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  151.448770][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[  151.459635][ T7020] IPVS: Error joining to the multicast group
[  151.470604][ T7020] sd 0:0:1:0: device reset
[  151.827921][ T5915] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  152.036992][ T5923] usb 4-1: USB disconnect, device number 6
[  152.419888][   T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  152.802765][ T7050] capability: warning: `syz.4.249' uses deprecated v2 capabilities in a way that may be insecure
[  152.981124][   T24] usb 2-1: config 0 has an invalid interface number: 109 but max is 0
[  152.989329][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.999830][   T24] usb 2-1: config 0 has no interface number 0
[  153.005985][   T24] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64
[  153.017833][   T24] usb 2-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  153.039056][   T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  153.066485][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.086711][ T7062] overlayfs: failed to resolve './file0/file0': -2
[  153.117121][   T24] usb 2-1: Product: syz
[  153.139493][   T24] usb 2-1: Manufacturer: syz
[  153.148841][   T24] usb 2-1: SerialNumber: syz
[  153.338030][   T24] usb 2-1: config 0 descriptor??
[  153.379256][ T7032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  153.519796][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  153.527349][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  153.602222][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.611065][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.619502][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.629966][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.629993][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.646807][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.657101][   T24] ath6kl: Failed to submit usb control message: -71
[  153.689876][ T5915] usb 3-1: Using ep0 maxpacket: 8
[  153.694964][ T5885] usb 5-1: Using ep0 maxpacket: 16
[  153.705152][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0
[  153.713568][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.727036][ T5885] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  153.729908][   T24] ath6kl: unable to send the bmi data to the device: -71
[  153.746978][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.756966][   T24] ath6kl: Unable to send get target info: -71
[  153.759970][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.771723][ T5915] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  153.775242][   T24] ath6kl: Failed to init ath6kl core: -71
[  153.788442][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.788740][   T24] ath6kl_usb 2-1:0.109: probe with driver ath6kl_usb failed with error -71
[  153.804593][ T5915] usb 3-1: config 0 descriptor??
[  153.814557][ T5885] usb 5-1: config 0 descriptor??
[  153.821718][   T24] usb 2-1: USB disconnect, device number 7
[  154.029513][ T5915] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  154.050140][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  154.199787][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  154.206442][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0
[  154.217844][ T5923] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  154.228615][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  154.228628][   T30] audit: type=1400 audit(1744084857.129:341): avc:  denied  { read write } for  pid=7060 comm="syz.4.253" name="mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  154.263230][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.271827][ T5923] usb 4-1: Product: syz
[  154.276041][ T5923] usb 4-1: Manufacturer: syz
[  154.288684][ T5923] usb 4-1: SerialNumber: syz
[  154.297743][ T5923] usb 4-1: config 0 descriptor??
[  154.305482][   T30] audit: type=1400 audit(1744084857.129:342): avc:  denied  { open } for  pid=7060 comm="syz.4.253" path="/dev/input/mouse0" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  154.407544][ T5885] hid (null): report_id 3281620142 is invalid
[  154.416286][ T5885] hid (null): report_id 1332452703 is invalid
[  154.432541][ T5885] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input6
[  154.861830][ T5885] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0003/input/input7
[  154.883181][ T5923] gs_usb 4-1:0.0: Couldn't get device config: (err=-71)
[  154.895552][ T5923] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  154.938256][ T5923] usb 4-1: USB disconnect, device number 7
[  154.955696][ T5885] kye 0003:0458:5013.0003: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0
[  154.984346][   T30] audit: type=1400 audit(1744084857.889:343): avc:  denied  { write } for  pid=7082 comm="syz.1.259" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  155.004395][ T5885] usb 5-1: USB disconnect, device number 9
[  155.790201][   T30] audit: type=1400 audit(1744084858.629:344): avc:  denied  { shutdown } for  pid=7108 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  155.984664][ T5915] usb 3-1: USB disconnect, device number 13
[  156.372301][   T30] audit: type=1400 audit(1744084859.269:345): avc:  denied  { create } for  pid=7132 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.550230][   T30] audit: type=1400 audit(1744084859.269:346): avc:  denied  { connect } for  pid=7132 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.601136][   T30] audit: type=1400 audit(1744084859.319:347): avc:  denied  { map } for  pid=7132 comm="syz.3.277" path="socket:[13358]" dev="sockfs" ino=13358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.647056][   T30] audit: type=1400 audit(1744084859.319:348): avc:  denied  { read } for  pid=7132 comm="syz.3.277" path="socket:[13358]" dev="sockfs" ino=13358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  156.772147][   T30] audit: type=1400 audit(1744084859.479:349): avc:  denied  { search } for  pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  157.442420][   T30] audit: type=1400 audit(1744084860.349:350): avc:  denied  { write } for  pid=7149 comm="syz.4.281" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  157.491815][ T7158] =======================================================
[  157.491815][ T7158] WARNING: The mand mount option has been deprecated and
[  157.491815][ T7158]          and is ignored by this kernel. Remove the mand
[  157.491815][ T7158]          option from the mount to silence this warning.
[  157.491815][ T7158] =======================================================
[  157.533013][ T7158] tmpfs: Bad value for 'mpol'
[  157.989904][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  158.339374][   T24] usb 3-1: Using ep0 maxpacket: 16
[  158.603673][   T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  158.627852][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  158.639256][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.753664][ T5923] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  158.798550][   T24] usb 3-1: config 0 descriptor??
[  159.280141][ T7160] warning: `syz.2.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  159.317911][ T7160] sp0: Synchronizing with TNC
[  159.326042][ T7159] [U] �
[  159.331658][ T5923] usb 5-1: config 129 has an invalid interface number: 249 but max is 0
[  159.343314][ T5923] usb 5-1: config 129 has no interface number 0
[  159.353398][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  159.353409][   T30] audit: type=1400 audit(1744084862.259:355): avc:  denied  { read write } for  pid=7181 comm="syz.0.290" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  159.386668][   T30] audit: type=1400 audit(1744084862.259:356): avc:  denied  { open } for  pid=7181 comm="syz.0.290" path="/46/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  159.395085][ T5923] usb 5-1: config 129 interface 249 has no altsetting 0
[  159.421018][ T5923] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  159.432920][    T9] usb 3-1: USB disconnect, device number 14
[  159.434432][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.502970][   T30] audit: type=1400 audit(1744084862.399:357): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  159.658477][ T7187] input: syz1 as /devices/virtual/input/input8
[  159.943046][   T30] audit: type=1400 audit(1744084862.849:358): avc:  denied  { accept } for  pid=7190 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  160.803274][ T7205] netlink: 96 bytes leftover after parsing attributes in process `syz.3.296'.
[  161.100322][ T5923] usb 5-1: string descriptor 0 read error: -71
[  161.102616][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'.
[  161.115483][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'.
[  161.121519][ T5923] redrat3 5-1:129.249: Couldn't find all endpoints
[  161.285330][ T5923] usb 5-1: USB disconnect, device number 10
[  161.435574][ T7215] process 'syz.3.299' launched './file1' with NULL argv: empty string added
[  161.479962][   T30] audit: type=1400 audit(1744084864.349:359): avc:  denied  { execute_no_trans } for  pid=7212 comm="syz.3.299" path="/73/file1" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  161.635943][ T7215] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  162.316710][ T5885] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  162.325317][   T30] audit: type=1400 audit(1744084865.179:360): avc:  denied  { unlink } for  pid=7225 comm="syz.0.304" name="#1" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  163.176461][   T30] audit: type=1400 audit(1744084865.189:361): avc:  denied  { mount } for  pid=7225 comm="syz.0.304" name="/" dev="overlay" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  163.210358][   T30] audit: type=1400 audit(1744084866.109:362): avc:  denied  { setopt } for  pid=7231 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  163.320076][ T5885] usb 2-1: Using ep0 maxpacket: 8
[  163.326955][ T5885] usb 2-1: config 127 has an invalid interface number: 171 but max is 1
[  163.349770][ T5885] usb 2-1: config 127 has no interface number 1
[  163.356244][ T5885] usb 2-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81
[  163.368783][ T5885] usb 2-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.379239][ T5885] usb 2-1: config 127 interface 0 altsetting 10 bulk endpoint 0x81 has invalid maxpacket 0
[  163.489320][ T7240] sd 0:0:1:0: device reset
[  163.596987][ T5885] usb 2-1: config 127 interface 171 has no altsetting 0
[  163.604646][ T5885] usb 2-1: config 127 interface 0 has no altsetting 0
[  163.744317][ T5885] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  163.768762][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.788538][ T5885] usb 2-1: Product: syz
[  163.797806][ T5885] usb 2-1: Manufacturer: syz
[  163.802998][ T5885] usb 2-1: SerialNumber: syz
[  164.192727][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.198451][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.846151][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[  165.856511][ T7260] IPVS: Error joining to the multicast group
[  165.868562][ T7260] sd 0:0:1:0: device reset
[  166.818417][ T5885] xr_serial 2-1:127.171: xr_serial converter detected
[  166.861051][ T5885] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  167.467294][ T5885] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  167.625868][ T5885] usb 2-1: USB disconnect, device number 8
[  167.637839][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[  167.646738][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[  167.751244][ T5885] xr_serial 2-1:127.171: device disconnected
[  167.947852][ T7294] netlink: 68 bytes leftover after parsing attributes in process `syz.2.320'.
[  168.250466][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  168.266887][ T7303] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  168.471755][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  168.523296][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.597884][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.770774][ T5915] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  168.839320][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  168.893192][ T5885] usb 5-1: Using ep0 maxpacket: 8
[  168.898288][ T5915] usb 4-1: SerialNumber: syz
[  169.100650][ T5885] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  169.100755][ T5885] usb 5-1: config 0 has no interface number 0
[  169.537690][ T5885] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  169.537764][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.537801][ T5885] usb 5-1: Product: syz
[  169.537859][ T5885] usb 5-1: Manufacturer: syz
[  169.537892][ T5885] usb 5-1: SerialNumber: syz
[  169.986482][ T5915] usb 4-1: 0:2 : does not exist
[  170.010153][ T5885] usb 5-1: config 0 descriptor??
[  170.020489][ T5885] usb 5-1: selecting invalid altsetting 1
[  170.020938][ T5885] dvb_ttusb_budget: ttusb_init_controller: error
[  170.020999][ T5885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  170.035878][ T5915] usb 4-1: USB disconnect, device number 8
[  170.119253][ T5885] DVB: Unable to find symbol stv0299_attach()
[  170.154132][ T5885] DVB: Unable to find symbol tda8083_attach()
[  170.169464][ T5885] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  170.232419][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'.
[  170.245448][ T7297] sg_read: process 261 (syz.4.321) changed security contexts after opening file descriptor, this is not allowed.
[  170.258929][   T30] audit: type=1400 audit(1744084873.119:363): avc:  denied  { kexec_image_load } for  pid=7296 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  170.293570][ T5885] usb 5-1: USB disconnect, device number 11
[  170.314639][ T6380] udevd[6380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.883055][ T7319] netlink: 'syz.4.326': attribute type 1 has an invalid length.
[  170.984461][ T7319] 8021q: adding VLAN 0 to HW filter on device bond1
[  171.203293][ T7320] bond1: (slave veth3): Enslaving as an active interface with a down link
[  171.273285][ T7332] netlink: 'syz.0.330': attribute type 4 has an invalid length.
[  171.752171][ T5885] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  171.819020][ T7339] mmap: syz.4.331 (7339) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  171.882653][   T30] audit: type=1400 audit(1744084874.789:364): avc:  denied  { setopt } for  pid=7334 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  171.913102][ T5885] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30
[  171.933753][ T5885] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  171.945067][ T5885] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  171.957830][ T5885] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 16, setting to 8
[  171.968553][ T5885] usb 3-1: config 0 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  171.989654][ T7345] SELinux:  Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped).
[  172.004379][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0
[  172.004647][   T30] audit: type=1400 audit(1744084874.909:365): avc:  denied  { relabelto } for  pid=7331 comm="syz.0.330" name="cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0"
[  172.011172][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  172.050619][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.104076][   T30] audit: type=1400 audit(1744084874.909:366): avc:  denied  { associate } for  pid=7331 comm="syz.0.330" name="cgroup.procs" dev="cgroup" ino=236 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0"
[  172.164695][ T5885] usb 3-1: config 0 descriptor??
[  172.170568][ T7328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.178488][ T7328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.254025][   T30] audit: type=1400 audit(1744084875.149:367): avc:  denied  { bind } for  pid=7349 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  172.458076][ T7355] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  172.677583][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'.
[  172.728458][ T7361] sd 0:0:1:0: device reset
[  173.290563][ T7360] IPVS: Error joining to the multicast group
[  174.226394][   T30] audit: type=1400 audit(1744084877.119:368): avc:  denied  { bind } for  pid=7364 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  174.259860][ T5885] usbhid 3-1:0.0: can't add hid device: -71
[  174.265791][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  174.400008][ T5885] usb 3-1: USB disconnect, device number 15
[  175.774958][ T7375] ALSA: mixer_oss: invalid OSS volume '��
'
[  176.410892][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  177.841213][ T7407] netlink: zone id is out of range
[  177.846353][ T7407] netlink: zone id is out of range
[  177.917186][ T7407] netlink: zone id is out of range
[  177.928248][ T7407] netlink: zone id is out of range
[  178.072115][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  178.252798][   T30] audit: type=1400 audit(1744084881.159:369): avc:  denied  { getopt } for  pid=7405 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  178.410063][   T24] usb 3-1: Using ep0 maxpacket: 8
[  178.417104][   T24] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  178.428496][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.578990][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  178.589044][ T7416] IPVS: Error joining to the multicast group
[  178.598575][ T7416] sd 0:0:1:0: device reset
[  178.737304][   T24] usb 3-1: config 0 descriptor??
[  178.872582][   T30] audit: type=1400 audit(1744084881.779:370): avc:  denied  { connect } for  pid=7418 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  178.952709][ T7421] netlink: 68 bytes leftover after parsing attributes in process `syz.1.351'.
[  178.954496][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.976665][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.015194][   T10] usb 3-1: USB disconnect, device number 16
[  179.403602][ T5915] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  180.029769][ T7433] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  180.082671][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  180.382190][ T5915] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  180.390481][ T5915] usb 2-1: config 0 has no interface number 0
[  180.531891][ T5915] usb 2-1: config 0 interface 12 has no altsetting 0
[  180.547413][ T5915] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  180.552639][   T30] audit: type=1400 audit(1744084883.449:371): avc:  denied  { read write } for  pid=7438 comm="syz.0.355" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  180.603129][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.047746][ T7439] netlink: 'syz.0.355': attribute type 25 has an invalid length.
[  181.050673][ T5915] usb 2-1: Product: syz
[  181.074964][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'.
[  181.100029][ T5915] usb 2-1: Manufacturer: syz
[  181.111113][   T30] audit: type=1400 audit(1744084883.449:372): avc:  denied  { open } for  pid=7438 comm="syz.0.355" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  181.136390][ T5915] usb 2-1: SerialNumber: syz
[  181.225016][ T5915] usb 2-1: config 0 descriptor??
[  181.330050][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  181.381682][ T7452] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  181.409964][   T30] audit: type=1400 audit(1744084884.289:373): avc:  denied  { bind } for  pid=7449 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  181.431285][ T7452] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  181.551669][   T10] usb 5-1: config 129 has an invalid interface number: 249 but max is 0
[  181.567976][   T10] usb 5-1: config 129 has no interface number 0
[  181.640210][   T10] usb 5-1: config 129 interface 249 has no altsetting 0
[  181.669245][   T10] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  181.785786][ T7456] overlayfs: failed to resolve './file0': -2
[  182.046664][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.059667][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.155468][   T30] audit: type=1400 audit(1744084885.059:374): avc:  denied  { create } for  pid=7458 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  182.165064][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.773125][   T30] audit: type=1400 audit(1744084885.319:375): avc:  denied  { create } for  pid=7458 comm="syz.0.360" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  182.789849][ T7465] vlan2: entered allmulticast mode
[  182.881234][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.915234][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.930476][   T30] audit: type=1400 audit(1744084885.659:376): avc:  denied  { unlink } for  pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  183.014498][ T7470] netlink: 68 bytes leftover after parsing attributes in process `syz.2.363'.
[  183.328423][ T7475] overlayfs: failed to resolve './file0/file0': -2
[  183.761309][ T5915] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  183.768897][ T5915] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  183.777742][ T5915] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  183.799845][ T5915] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  183.837675][ T5915] usb 2-1: USB disconnect, device number 9
[  184.077831][   T10] usb 5-1: string descriptor 0 read error: -71
[  184.097040][   T10] redrat3 5-1:129.249: Couldn't find all endpoints
[  184.422879][   T10] usb 5-1: USB disconnect, device number 13
[  184.973811][ T7488] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  185.336629][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  185.682386][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  185.688974][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  185.719772][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  185.725858][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  188.455871][ T7517] overlayfs: failed to resolve './file0/file0': -2
[  188.833049][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  189.011789][   T10] usb 3-1: Using ep0 maxpacket: 16
[  189.065474][   T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  189.085681][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.110524][   T10] usb 3-1: Product: syz
[  189.124957][   T10] usb 3-1: Manufacturer: syz
[  189.149758][   T10] usb 3-1: SerialNumber: syz
[  189.170547][   T10] r8152-cfgselector 3-1: Unknown version 0x0000
[  189.186140][   T10] r8152-cfgselector 3-1: config 0 descriptor??
[  189.427393][   T10] r8152-cfgselector 3-1: Unknown version 0x0000
[  189.448238][   T10] r8152-cfgselector 3-1: bad CDC descriptors
[  189.478604][   T10] r8152-cfgselector 3-1: USB disconnect, device number 17
[  189.559988][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  189.725580][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  189.745479][ T5885] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  189.801076][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.845857][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  189.860686][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.868684][ T5885] usb 5-1: Product: syz
[  189.894792][ T5885] usb 5-1: Manufacturer: syz
[  189.899406][ T5885] usb 5-1: SerialNumber: syz
[  190.303373][ T7536] sd 0:0:1:0: device reset
[  190.448673][ T5885] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  190.578543][   T30] audit: type=1400 audit(1744084893.479:377): avc:  denied  { read write } for  pid=7528 comm="syz.4.381" name="lp0" dev="devtmpfs" ino=2866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  190.585027][  T974] usb 5-1: USB disconnect, device number 14
[  190.643158][   T30] audit: type=1400 audit(1744084893.479:378): avc:  denied  { open } for  pid=7528 comm="syz.4.381" path="/dev/usb/lp0" dev="devtmpfs" ino=2866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  190.813024][   T30] audit: type=1400 audit(1744084893.719:379): avc:  denied  { ioctl } for  pid=7528 comm="syz.4.381" path=2F6465762F7573622F6C7030202864656C6574656429 dev="devtmpfs" ino=2866 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[  190.813807][ T7528] usblp0: removed
[  193.970019][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  193.976278][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.740123][ T7561] sd 0:0:1:0: device reset
[  194.880109][ T7567] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.969767][ T5887] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  195.678958][   T30] audit: type=1400 audit(1744084898.559:380): avc:  denied  { create } for  pid=7571 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  195.702266][ T5887] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  195.718685][ T5887] usb 3-1: config 129 has no interface number 0
[  196.154393][ T5887] usb 3-1: config 129 interface 249 has no altsetting 0
[  196.161578][ T5887] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  196.170795][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.472680][ T5887] usb 3-1: string descriptor 0 read error: -71
[  197.491583][ T5887] redrat3 3-1:129.249: Couldn't find all endpoints
[  197.506586][ T5887] usb 3-1: USB disconnect, device number 18
[  198.581793][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  198.604972][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  198.612641][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  198.622297][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  198.632135][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.413560][   T30] audit: type=1400 audit(1744084901.889:381): avc:  denied  { setopt } for  pid=7599 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  199.437950][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  199.460913][   T30] audit: type=1400 audit(1744084901.889:382): avc:  denied  { write } for  pid=7599 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  199.492110][ T5143] Bluetooth: Unexpected continuation frame (len 10)
[  199.493951][   T30] audit: type=1400 audit(1744084902.399:383): avc:  denied  { read } for  pid=7611 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  200.048006][   T30] audit: type=1400 audit(1744084902.949:384): avc:  denied  { create } for  pid=7618 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  200.135665][   T30] audit: type=1400 audit(1744084902.979:385): avc:  denied  { ioctl } for  pid=7618 comm="syz.0.405" path="socket:[15637]" dev="sockfs" ino=15637 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  200.452859][   T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.624861][   T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.679947][ T5143] Bluetooth: hci5: command tx timeout
[  200.757861][ T7601] chnl_net:caif_netlink_parms(): no params data found
[  200.835380][   T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.064984][   T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.457947][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.482228][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.513010][ T7601] bridge_slave_0: entered allmulticast mode
[  201.565217][ T7601] bridge_slave_0: entered promiscuous mode
[  201.587217][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.609868][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.647844][ T7601] bridge_slave_1: entered allmulticast mode
[  201.721258][ T7601] bridge_slave_1: entered promiscuous mode
[  201.908678][ T7646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.938414][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'.
[  201.964000][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'.
[  202.834967][ T5143] Bluetooth: hci5: command tx timeout
[  202.873442][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.029337][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.072256][   T63] bridge_slave_1: left allmulticast mode
[  203.077959][   T63] bridge_slave_1: left promiscuous mode
[  203.085846][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.121243][   T63] bridge_slave_0: left allmulticast mode
[  203.129336][   T63] bridge_slave_0: left promiscuous mode
[  203.139132][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.483050][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.493567][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.495236][   T63] bond0 (unregistering): Released all slaves
[  204.628738][ T7601] team0: Port device team_slave_0 added
[  204.761812][ T7601] team0: Port device team_slave_1 added
[  204.919910][ T5143] Bluetooth: hci5: command tx timeout
[  204.933340][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[  204.942348][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[  205.357045][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.376531][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.483441][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.609264][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.064487][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.130405][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.364277][ T7696] netlink: 'syz.1.419': attribute type 3 has an invalid length.
[  206.420874][   T30] audit: type=1400 audit(1744084909.319:386): avc:  denied  { bind } for  pid=7695 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  206.471679][ T7601] hsr_slave_0: entered promiscuous mode
[  206.479841][ T7601] hsr_slave_1: entered promiscuous mode
[  206.589627][ T7601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.602610][ T7601] Cannot create hsr debugfs directory
[  206.702702][ T7702] overlayfs: failed to resolve './file0/file0': -2
[  207.064455][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  207.069399][ T5143] Bluetooth: hci5: command tx timeout
[  207.089738][   T63] hsr_slave_0: left promiscuous mode
[  207.226578][   T63] hsr_slave_1: left promiscuous mode
[  207.246872][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.250037][ T5885] usb 3-1: Using ep0 maxpacket: 8
[  207.259606][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.271963][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.280394][ T5885] usb 3-1: config 6 has an invalid interface number: 55 but max is 2
[  207.283079][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.356785][   T63] veth1_macvtap: left promiscuous mode
[  207.369337][ T5885] usb 3-1: config 6 has an invalid interface number: 209 but max is 2
[  207.383861][   T63] veth0_macvtap: left promiscuous mode
[  207.412090][   T63] veth1_vlan: left promiscuous mode
[  207.432365][ T5885] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping
[  207.434423][   T63] veth0_vlan: left promiscuous mode
[  207.459753][ T5885] usb 3-1: config 6 has an invalid interface number: 106 but max is 2
[  207.497721][ T5885] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[  207.690840][ T5885] usb 3-1: config 6 has no interface number 0
[  207.700014][ T5885] usb 3-1: config 6 has no interface number 1
[  207.706543][ T5885] usb 3-1: config 6 has no interface number 2
[  207.725988][ T5885] usb 3-1: config 6 interface 55 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  207.737222][ T5885] usb 3-1: config 6 interface 55 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64
[  207.737250][ T5885] usb 3-1: config 6 interface 55 altsetting 3 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  207.737283][ T5885] usb 3-1: config 6 interface 209 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  207.737302][ T5885] usb 3-1: config 6 interface 209 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 8
[  207.737322][ T5885] usb 3-1: config 6 interface 209 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  207.737340][ T5885] usb 3-1: config 6 interface 209 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  207.737358][ T5885] usb 3-1: config 6 interface 209 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  207.737381][ T5885] usb 3-1: config 6 interface 106 altsetting 13 has a duplicate endpoint with address 0xF, skipping
[  207.737402][ T5885] usb 3-1: config 6 interface 106 altsetting 13 has an endpoint descriptor with address 0xB9, changing to 0x89
[  207.737423][ T5885] usb 3-1: config 6 interface 106 altsetting 13 endpoint 0x89 has an invalid bInterval 133, changing to 11
[  207.737443][ T5885] usb 3-1: config 6 interface 106 altsetting 13 endpoint 0x89 has invalid maxpacket 24578, setting to 1024
[  207.737463][ T5885] usb 3-1: config 6 interface 106 altsetting 13 has a duplicate endpoint with address 0xF, skipping
[  207.737482][ T5885] usb 3-1: config 6 interface 106 altsetting 13 has a duplicate endpoint with address 0x9, skipping
[  207.737501][ T5885] usb 3-1: config 6 interface 106 altsetting 13 has 6 endpoint descriptors, different from the interface descriptor's value: 5
[  207.737522][ T5885] usb 3-1: config 6 interface 55 has no altsetting 0
[  207.737537][ T5885] usb 3-1: config 6 interface 209 has no altsetting 0
[  207.737552][ T5885] usb 3-1: config 6 interface 106 has no altsetting 0
[  207.772025][ T5885] usb 3-1: Dual-Role OTG device on HNP port
[  207.772288][ T5885] usb 3-1: New USB device found, idVendor=1b3d, idProduct=9312, bcdDevice=2a.34
[  207.772310][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.772326][ T5885] usb 3-1: Product: ఄ
[  207.772339][ T5885] usb 3-1: Manufacturer: 뉯蟜洕蛴⚔᛬石顱㆜㫟ぉ탃눳
[  207.772354][ T5885] usb 3-1: SerialNumber: ఊ
[  208.717297][ T7715] tty tty1: ldisc open failed (-12), clearing slot 0
[  208.802959][ T7725] ufs: Invalid option: "'&" or missing value
[  208.809093][ T7725] ufs: wrong mount options
[  208.824752][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  209.151177][ T5885] ftdi_sio 3-1:6.55: FTDI USB Serial Device converter detected
[  209.167157][ T5885] ftdi_sio ttyUSB0: unknown device type: 0x2a34
[  209.193927][ T5885] ftdi_sio 3-1:6.209: FTDI USB Serial Device converter detected
[  209.223010][ T5885] ftdi_sio ttyUSB1: unknown device type: 0x2a34
[  209.268489][ T5885] ftdi_sio 3-1:6.106: FTDI USB Serial Device converter detected
[  209.297599][ T5885] ftdi_sio ttyUSB2: unknown device type: 0x2a34
[  209.300862][ T7728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.427'.
[  209.320009][ T5885] usb 3-1: USB disconnect, device number 19
[  209.348914][ T5885] ftdi_sio 3-1:6.55: device disconnected
[  209.356902][ T5885] ftdi_sio 3-1:6.209: device disconnected
[  209.364945][ T5885] ftdi_sio 3-1:6.106: device disconnected
[  210.245062][   T63] team0 (unregistering): Port device team_slave_1 removed
[  210.285943][   T63] team0 (unregistering): Port device team_slave_0 removed
[  211.683677][ T7749] loop8: detected capacity change from 0 to 8
[  211.806574][ T7749] Dev loop8: unable to read RDB block 8
[  211.844645][ T7749]  loop8: unable to read partition table
[  211.850882][ T7749] loop8: partition table beyond EOD, truncated
[  211.859949][ T7749] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  211.957265][ T7758] overlayfs: failed to resolve './file0/file0': -2
[  212.125400][   T30] audit: type=1400 audit(1744084915.029:387): avc:  denied  { ioctl } for  pid=7748 comm="syz.1.432" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  212.150217][    C1] vkms_vblank_simulate: vblank timer overrun
[  212.402424][ T7601] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.415984][ T7601] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.437820][ T7601] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.457584][ T7601] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  212.583577][ T5923] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  212.613895][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.727914][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  212.736915][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  212.776976][ T5923] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  212.781662][ T7601] 8021q: adding VLAN 0 to HW filter on device team0
[  212.969840][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.979040][ T7772] 9pnet_fd: Insufficient options for proto=fd
[  212.992956][   T30] audit: type=1400 audit(1744084915.879:388): avc:  denied  { read } for  pid=7771 comm="syz.4.438" dev="sockfs" ino=16709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  213.031019][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.032755][ T5923] usb 3-1: config 0 descriptor??
[  213.038107][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.077275][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.084531][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.111600][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  213.186355][ T7601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  213.186373][ T7601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.851852][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  213.863947][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.910043][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.011889][   T10] usb 5-1: Using ep0 maxpacket: 8
[  214.013631][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  214.013650][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  214.013664][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  214.013677][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  214.013700][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  214.013730][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  214.013747][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.015586][   T10] usb 5-1: config 0 descriptor??
[  214.016846][ T7783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  214.065598][ T5923] gp8psk: usb out operation failed.
[  214.065759][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  214.065791][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  214.071532][ T5923] usb 3-1: USB disconnect, device number 20
[  214.405044][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.405282][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.511706][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.637552][   T10] usb 5-1: USB disconnect, device number 15
[  214.651923][ T5143] Bluetooth: hci4: Opcode 0x0c03 failed: -19
[  214.934270][ T7809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.442'.
[  214.991668][ T7601] veth0_vlan: entered promiscuous mode
[  215.034752][ T7601] veth1_vlan: entered promiscuous mode
[  215.048521][ T7813] loop8: detected capacity change from 0 to 8
[  215.058820][ T7813] Dev loop8: unable to read RDB block 8
[  215.061048][ T1220] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  215.066864][ T7813]  loop8: unable to read partition table
[  215.100169][ T7813] loop8: partition table beyond EOD, truncated
[  215.106378][ T7813] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  215.252920][ T7601] veth0_macvtap: entered promiscuous mode
[  215.263031][ T1220] usb 3-1: Using ep0 maxpacket: 32
[  215.286609][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.294432][ T7601] veth1_macvtap: entered promiscuous mode
[  215.326337][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.327642][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.356565][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.364672][ T1220] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  215.366754][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.386139][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.396195][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.407927][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.427116][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.438769][ T1220] usb 3-1: config 0 descriptor??
[  215.445172][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.468873][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.481907][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.511524][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.537530][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.548187][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.559170][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.570508][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.588049][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.612532][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.626499][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.638183][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.656039][   T30] audit: type=1400 audit(1744084918.559:389): avc:  denied  { watch } for  pid=7824 comm="syz.4.445" path="/90/file0" dev="rpc_pipefs" ino=16848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1
[  215.732615][ T7601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.745638][ T7601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.754596][ T7601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.763586][ T7601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.359945][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[  217.927297][ T5915] libceph: connect (1)[c::]:6789 error -101
[  217.949673][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  218.081022][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  218.223144][ T5915] libceph: connect (1)[c::]:6789 error -101
[  218.229250][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  218.243424][   T24] usb 2-1: config 4 has an invalid interface number: 13 but max is 1
[  218.251653][   T24] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  218.260723][   T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  218.270907][   T24] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2
[  218.280152][   T24] usb 2-1: config 4 has no interface number 0
[  218.286306][   T24] usb 2-1: config 4 interface 13 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  218.297243][   T24] usb 2-1: config 4 interface 13 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  218.310837][   T24] usb 2-1: config 4 interface 13 has no altsetting 0
[  218.320199][   T24] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=77.3f
[  218.329283][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.339480][   T24] usb 2-1: Product: syz
[  218.343724][   T24] usb 2-1: Manufacturer: syz
[  218.348350][   T24] usb 2-1: SerialNumber: syz
[  218.627156][ T3489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.644051][   T24] usb 2-1: selecting invalid altsetting 3
[  218.651290][ T3489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.670735][   T24] comedi comedi0: could not set alternate setting 3 in high speed
[  218.678554][   T24] usbduxsigma 2-1:4.13: driver 'usbduxsigma' failed to auto-configure device.
[  218.705768][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.723050][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.737904][   T24] usbduxsigma 2-1:4.13: probe with driver usbduxsigma failed with error -22
[  218.788483][   T24] usb 2-1: USB disconnect, device number 10
[  218.834406][   T30] audit: type=1400 audit(1744084921.729:390): avc:  denied  { mount } for  pid=7601 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  218.842663][ T5915] libceph: connect (1)[c::]:6789 error -101
[  218.863696][ T5915] libceph: mon0 (1)[c::]:6789 connect error
[  218.911483][   T30] audit: type=1400 audit(1744084921.799:391): avc:  denied  { mounton } for  pid=7601 comm="syz-executor" path="/root/syzkaller.P3ff5y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  218.931551][ T7851] ceph: No mds server is up or the cluster is laggy
[  219.542649][   T30] audit: type=1400 audit(1744084922.449:392): avc:  denied  { mount } for  pid=7601 comm="syz-executor" name="/" dev="gadgetfs" ino=6895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  219.651072][ T1220] usbhid 3-1:0.0: can't add hid device: -71
[  219.657109][ T1220] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  219.683312][   T30] audit: type=1400 audit(1744084922.589:393): avc:  denied  { watch } for  pid=7871 comm="syz.4.452" path="/92/bus" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  219.745999][ T1220] usb 3-1: USB disconnect, device number 21
[  219.959403][ T7874] block device autoloading is deprecated and will be removed.
[  219.973462][ T7874] syz.4.452: attempt to access beyond end of device
[  219.973462][ T7874] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  221.997762][ T7888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.455'.
[  223.306456][ T7917] overlayfs: failed to resolve './file0/file0': -2
[  224.072372][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'.
[  224.081369][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'.
[  225.389098][   T30] audit: type=1326 audit(1744084928.289:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.448940][   T30] audit: type=1326 audit(1744084928.329:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.489758][   T30] audit: type=1326 audit(1744084928.329:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.583823][   T30] audit: type=1326 audit(1744084928.329:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.583864][   T30] audit: type=1326 audit(1744084928.329:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.583899][   T30] audit: type=1326 audit(1744084928.329:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.583933][   T30] audit: type=1326 audit(1744084928.329:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.583970][   T30] audit: type=1326 audit(1744084928.329:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.584005][   T30] audit: type=1326 audit(1744084928.329:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  225.584041][   T30] audit: type=1326 audit(1744084928.339:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8218d8d169 code=0x7ffc0000
[  226.392380][ T7982] veth0_to_team: entered promiscuous mode
[  226.392394][ T7982] veth0_to_team: entered allmulticast mode
[  227.021919][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  228.420069][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.476'.
[  228.993453][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[  229.003588][ T8016] IPVS: Error joining to the multicast group
[  229.011801][ T8016] sd 0:0:1:0: device reset
[  229.180584][ T5885] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  229.269785][ T1220] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  229.342030][ T5885] usb 6-1: Using ep0 maxpacket: 32
[  229.435044][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.461911][ T5885] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.88
[  229.471111][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.484266][ T5885] usb 6-1: Product: syz
[  229.493640][ T5885] usb 6-1: Manufacturer: syz
[  229.507627][ T5885] usb 6-1: SerialNumber: syz
[  229.514943][ T1220] usb 2-1: config 0 has an invalid interface number: 33 but max is 0
[  229.529299][ T1220] usb 2-1: config 0 has no interface number 0
[  229.558459][ T5885] usb 6-1: config 0 descriptor??
[  229.565717][ T1220] usb 2-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43
[  229.580600][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.591455][ T5885] usb 6-1: bad CDC descriptors
[  229.600254][ T5885] usb 6-1: unsupported MDLM descriptors
[  229.613883][ T1220] usb 2-1: config 0 descriptor??
[  229.629648][ T1220] usb-storage 2-1:0.33: USB Mass Storage device detected
[  229.819657][ T5885] usb 6-1: USB disconnect, device number 2
[  230.675885][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  230.675901][   T30] audit: type=1400 audit(1744084933.579:410): avc:  denied  { name_bind } for  pid=8065 comm="syz.0.486" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  230.827858][   T30] audit: type=1400 audit(1744084933.729:411): avc:  denied  { ioctl } for  pid=8071 comm="syz.2.489" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  232.410591][ T1220] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  232.562825][ T5915] usb 2-1: USB disconnect, device number 11
[  232.592264][ T1220] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  232.623359][ T1220] usb 3-1: config 129 has no interface number 0
[  232.633740][ T1220] usb 3-1: config 129 interface 249 has no altsetting 0
[  232.648217][ T8098] ip6t_rpfilter: unknown options
[  232.657100][ T1220] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  232.683455][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'.
[  232.693900][ T8100] IPVS: Error joining to the multicast group
[  232.701156][ T8100] sd 0:0:1:0: device reset
[  232.788062][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.924761][ T8105] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.659820][ T5915] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  233.830839][ T5915] usb 2-1: Using ep0 maxpacket: 16
[  233.849962][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.892426][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.923596][ T8104] netlink: 60 bytes leftover after parsing attributes in process `syz.5.495'.
[  233.938434][ T5915] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  233.953311][ T8117] netlink: 'syz.4.497': attribute type 15 has an invalid length.
[  233.961544][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.983261][ T5915] usb 2-1: config 0 descriptor??
[  234.403268][ T5915] usbhid 2-1:0.0: can't add hid device: -32
[  234.409295][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  234.442497][ T5915] usb 2-1: USB disconnect, device number 12
[  234.574459][ T1220] usb 3-1: string descriptor 0 read error: -71
[  234.592235][ T1220] redrat3 3-1:129.249: Couldn't find all endpoints
[  234.609545][ T1220] usb 3-1: USB disconnect, device number 22
[  234.903770][   T30] audit: type=1400 audit(1744084937.779:412): avc:  denied  { setopt } for  pid=8135 comm="syz.2.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  235.209639][   T30] audit: type=1400 audit(1744084937.789:413): avc:  denied  { name_bind } for  pid=8135 comm="syz.2.501" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  235.275139][   T30] audit: type=1400 audit(1744084937.789:414): avc:  denied  { node_bind } for  pid=8135 comm="syz.2.501" saddr=::ffff:127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  235.298041][   T30] audit: type=1400 audit(1744084937.789:415): avc:  denied  { connect } for  pid=8135 comm="syz.2.501" laddr=::ffff:127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  235.321207][   T30] audit: type=1400 audit(1744084937.799:416): avc:  denied  { name_connect } for  pid=8135 comm="syz.2.501" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  235.687100][ T8152] sd 0:0:1:0: device reset
[  236.178676][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  236.187734][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  236.879730][ T8166] FAULT_INJECTION: forcing a failure.
[  236.879730][ T8166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.958102][ T8166] CPU: 1 UID: 0 PID: 8166 Comm: syz.1.507 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  236.958126][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.958136][ T8166] Call Trace:
[  236.958141][ T8166]  <TASK>
[  236.958148][ T8166]  dump_stack_lvl+0x16c/0x1f0
[  236.958175][ T8166]  should_fail_ex+0x512/0x640
[  236.958197][ T8166]  _copy_from_user+0x2e/0xd0
[  236.958217][ T8166]  copy_msghdr_from_user+0x98/0x160
[  236.958238][ T8166]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  236.958269][ T8166]  ___sys_sendmsg+0xfe/0x1d0
[  236.958290][ T8166]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.958348][ T8166]  __sys_sendmsg+0x16d/0x220
[  236.958368][ T8166]  ? __pfx___sys_sendmsg+0x10/0x10
[  236.958395][ T8166]  ? rcu_is_watching+0x12/0xc0
[  236.958424][ T8166]  do_syscall_64+0xcd/0x260
[  236.958448][ T8166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.958464][ T8166] RIP: 0033:0x7fb28878d169
[  236.958478][ T8166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.958494][ T8166] RSP: 002b:00007fb289566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  236.958511][ T8166] RAX: ffffffffffffffda RBX: 00007fb2889a5fa0 RCX: 00007fb28878d169
[  236.958521][ T8166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  236.958531][ T8166] RBP: 00007fb289566090 R08: 0000000000000000 R09: 0000000000000000
[  236.958541][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.958551][ T8166] R13: 0000000000000000 R14: 00007fb2889a5fa0 R15: 00007ffcb09b6648
[  236.958574][ T8166]  </TASK>
[  237.989826][   T30] audit: type=1400 audit(2000000001.300:417): avc:  denied  { ioctl } for  pid=8155 comm="syz.5.505" path="socket:[18381]" dev="sockfs" ino=18381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  238.173824][ T8187] syz_tun: entered allmulticast mode
[  238.434270][    T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  238.869821][    T9] usb 2-1: device descriptor read/64, error -71
[  239.259750][ T1220] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  239.439759][    T9] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  239.551196][ T1220] usb 6-1: config 129 has an invalid interface number: 249 but max is 0
[  239.564850][ T1220] usb 6-1: config 129 has no interface number 0
[  239.571809][    T9] usb 2-1: device descriptor read/64, error -71
[  239.578278][ T1220] usb 6-1: config 129 interface 249 has no altsetting 0
[  239.588427][ T1220] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  239.597712][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.697600][    T9] usb usb2-port1: attempt power cycle
[  239.972507][ T8213] block device autoloading is deprecated and will be removed.
[  240.338820][ T8218] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.429758][    T9] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  240.649273][ T8222] netlink: 60 bytes leftover after parsing attributes in process `syz.2.517'.
[  241.986000][    T9] usb 2-1: device descriptor read/8, error -71
[  242.013335][ T8187] syz_tun: left allmulticast mode
[  242.442421][ T8230] netlink: 68 bytes leftover after parsing attributes in process `syz.5.519'.
[  242.601160][ T1220] usb 6-1: string descriptor 0 read error: -71
[  242.887667][ T1220] redrat3 6-1:129.249: Couldn't find all endpoints
[  242.900903][ T1220] usb 6-1: USB disconnect, device number 3
[  243.231279][ T8253] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  243.276947][ T8253] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  243.347601][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  243.550760][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.561258][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  243.570422][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.591204][    T9] usb 2-1: config 0 descriptor??
[  243.620590][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  244.239184][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  244.248968][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  244.267570][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  244.295718][    T9] pwc: recv_control_msg error -32 req 04 val 1000
[  244.877162][    T9] pwc: recv_control_msg error -32 req 04 val 1400
[  245.071096][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  245.084612][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  245.095435][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  245.107952][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  245.118633][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  245.126962][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  245.138961][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  245.147268][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  245.153927][ T5885] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  245.287349][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  245.295196][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  245.308869][    T9] pwc: Registered as video103.
[  245.321710][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  245.351888][    T9] usb 2-1: USB disconnect, device number 16
[  245.451469][ T5885] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  245.471259][ T5885] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  245.483575][ T5885] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.494471][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.710007][ T8282] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  245.764982][ T1220] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  245.853723][ T5915] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  245.873299][ T5885] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  246.031935][ T5915] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  246.044842][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.084439][ T5915] usb 3-1: config 129 has no interface number 0
[  246.111758][ T1220] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  246.480676][ T5915] usb 3-1: config 129 interface 249 has no altsetting 0
[  246.497840][ T5915] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  246.508552][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.520443][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.529608][ T1220] usb 5-1: config 0 descriptor??
[  246.560020][  T974] usb 6-1: USB disconnect, device number 4
[  246.989130][ T1220] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  247.015590][ T1220] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input12
[  247.018144][ T8323] ������: renamed from bridge_slave_0 (while UP)
[  247.124345][ T1220] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  247.586787][ T8346] delete_channel: no stack
[  247.636831][   T10] usb 5-1: USB disconnect, device number 16
[  247.833066][ T8353] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  247.843451][   T30] audit: type=1400 audit(2000000011.260:418): avc:  denied  { unmount } for  pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  248.632592][ T5915] usb 3-1: string descriptor 0 read error: -71
[  248.725559][ T5915] redrat3 3-1:129.249: Couldn't find all endpoints
[  248.972756][ T5915] usb 3-1: USB disconnect, device number 23
[  249.035362][   T30] audit: type=1400 audit(2000000012.460:419): avc:  denied  { checkpoint_restore } for  pid=8372 comm="syz.2.546" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  249.095753][ T8373] fuse: Unknown parameter '000000000000000000050x0000000000000003'
[  249.539937][ T5915] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  249.819889][ T5915] usb 3-1: Using ep0 maxpacket: 8
[  249.844265][ T5915] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  249.880523][ T5915] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  250.071614][   T30] audit: type=1400 audit(2000000013.430:420): avc:  denied  { write } for  pid=8383 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  250.854162][ T5915] usb 3-1: config 179 has no interface number 0
[  250.861005][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7
[  250.872381][ T5915] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  250.884018][ T5915] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  251.533987][ T5915] usb 3-1: config 179 interface 65 has no altsetting 0
[  251.541188][ T5915] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  251.550444][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.611583][ T8407] FAULT_INJECTION: forcing a failure.
[  251.611583][ T8407] name failslab, interval 1, probability 0, space 0, times 0
[  251.657015][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.1.552 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  251.657040][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  251.657051][ T8407] Call Trace:
[  251.657056][ T8407]  <TASK>
[  251.657062][ T8407]  dump_stack_lvl+0x16c/0x1f0
[  251.657091][ T8407]  should_fail_ex+0x512/0x640
[  251.657110][ T8407]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  251.657130][ T8407]  should_failslab+0xc2/0x120
[  251.657149][ T8407]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  251.657166][ T8407]  ? skb_clone+0x190/0x3f0
[  251.657196][ T8407]  skb_clone+0x190/0x3f0
[  251.657217][ T8407]  nfnetlink_rcv_batch+0x1dd/0x2350
[  251.657246][ T8407]  ? kmem_cache_free+0x2d4/0x4d0
[  251.657270][ T8407]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  251.657297][ T8407]  ? find_held_lock+0x2b/0x80
[  251.657319][ T8407]  ? __dev_queue_xmit+0x896/0x43e0
[  251.657352][ T8407]  ? avc_has_perm_noaudit+0x149/0x3b0
[  251.657373][ T8407]  ? __asan_memset+0x23/0x50
[  251.657397][ T8407]  ? __nla_validate_parse+0x600/0x2880
[  251.657424][ T8407]  ? __pfx___nla_validate_parse+0x10/0x10
[  251.657448][ T8407]  ? cap_capable+0xb3/0x250
[  251.657472][ T8407]  ? __nla_parse+0x40/0x60
[  251.657497][ T8407]  nfnetlink_rcv+0x3c1/0x430
[  251.657522][ T8407]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  251.657554][ T8407]  netlink_unicast+0x53a/0x7f0
[  251.657580][ T8407]  ? __pfx_netlink_unicast+0x10/0x10
[  251.657610][ T8407]  netlink_sendmsg+0x8d1/0xdd0
[  251.657637][ T8407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.657669][ T8407]  ____sys_sendmsg+0xa95/0xc70
[  251.657696][ T8407]  ? copy_msghdr_from_user+0x10a/0x160
[  251.657716][ T8407]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.657753][ T8407]  ___sys_sendmsg+0x134/0x1d0
[  251.657775][ T8407]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.657828][ T8407]  __sys_sendmsg+0x16d/0x220
[  251.657849][ T8407]  ? __pfx___sys_sendmsg+0x10/0x10
[  251.657878][ T8407]  ? xfd_validate_state+0x5d/0x180
[  251.657904][ T8407]  do_syscall_64+0xcd/0x260
[  251.657928][ T8407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.657945][ T8407] RIP: 0033:0x7fb28878d169
[  251.657959][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.657975][ T8407] RSP: 002b:00007fb289566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.657992][ T8407] RAX: ffffffffffffffda RBX: 00007fb2889a5fa0 RCX: 00007fb28878d169
[  251.658004][ T8407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  251.658014][ T8407] RBP: 00007fb289566090 R08: 0000000000000000 R09: 0000000000000000
[  251.658024][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.658034][ T8407] R13: 0000000000000000 R14: 00007fb2889a5fa0 R15: 00007ffcb09b6648
[  251.658058][ T8407]  </TASK>
[  252.054199][ T5923] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  252.173300][ T8414] Invalid ELF header type: 3 != 1
[  252.296970][   T30] audit: type=1400 audit(2000000015.600:421): avc:  denied  { module_load } for  pid=8413 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  252.401455][ T5923] usb 6-1: config 129 has an invalid interface number: 249 but max is 0
[  252.456666][ T5923] usb 6-1: config 129 has no interface number 0
[  252.779924][  T974] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  253.022009][ T5923] usb 6-1: config 129 interface 249 has no altsetting 0
[  253.028998][ T5923] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  253.063557][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.089010][ T5923] usb 6-1: can't set config #129, error -71
[  253.095645][  T974] usb 2-1: Using ep0 maxpacket: 32
[  253.147470][  T974] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.179769][ T5923] usb 6-1: USB disconnect, device number 5
[  253.217598][   T10] usb 3-1: USB disconnect, device number 24
[  253.225851][  T974] usb 2-1: config 0 interface 0 has no altsetting 0
[  253.266300][  T974] usb 2-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00
[  253.276111][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'.
[  253.298989][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.319196][  T974] usb 2-1: config 0 descriptor??
[  254.457847][  T974] asus 0003:0B05:1A30.0005: item fetching failed at offset 0/3
[  254.475514][  T974] asus 0003:0B05:1A30.0005: Asus hid parse failed: -22
[  254.489921][  T974] asus 0003:0B05:1A30.0005: probe with driver asus failed with error -22
[  254.553315][ T8448] xt_hashlimit: max too large, truncated to 1048576
[  254.965787][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[  254.974595][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[  255.190401][ T5915] usb 2-1: USB disconnect, device number 17
[  255.320547][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.326995][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  255.922973][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'.
[  255.932312][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'.
[  256.014127][   T30] audit: type=1400 audit(2000000019.430:422): avc:  denied  { create } for  pid=8461 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  256.016210][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  256.177330][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'.
[  256.191375][   T30] audit: type=1400 audit(2000000019.440:423): avc:  denied  { write } for  pid=8461 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  256.212368][   T30] audit: type=1400 audit(2000000019.600:424): avc:  denied  { read } for  pid=8471 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  256.304449][ T8475] sctp: [Deprecated]: syz.0.565 (pid 8475) Use of int in maxseg socket option.
[  256.304449][ T8475] Use struct sctp_assoc_value instead
[  256.656702][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.557'.
[  257.219433][ T8497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.569'.
[  257.478529][   T30] audit: type=1400 audit(2000000020.640:425): avc:  denied  { watch watch_reads } for  pid=8486 comm="syz.4.569" path="/proc/458" dev="proc" ino=19150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  258.002935][ T8511] [U] 
[  258.005742][ T8511] [U] 
[  258.008425][ T8511] [U] 
[  258.011134][ T8511] [U] 
[  258.049916][ T8511] [U] 
[  258.052610][ T8511] [U] 
[  258.055281][ T8511] [U] 
[  258.057937][ T8511] [U] 
[  258.090387][ T8511] [U] 
[  258.093103][ T8511] [U] 
[  258.095781][ T8511] [U] 
[  258.098461][ T8511] [U] 
[  258.189563][ T8511] [U] 
[  258.192289][ T8511] [U] 
[  258.194963][ T8511] [U] 
[  258.197638][ T8511] [U] 
[  258.205228][ T8511] [U] 
[  258.207939][ T8511] [U] 
[  258.210631][ T8511] [U] 
[  258.213318][ T8511] [U] 
[  258.218706][ T8511] [U] 
[  258.221410][ T8511] [U] 
[  258.224099][ T8511] [U] 
[  258.226792][ T8511] [U] 
[  258.232690][ T8511] [U] 
[  258.235388][ T8511] [U] 
[  258.238075][ T8511] [U] 
[  258.240767][ T8511] [U] 
[  258.243704][ T8511] [U] 
[  258.246394][ T8511] [U] 
[  258.249079][ T8511] [U] 
[  258.251761][ T8511] [U] 
[  258.257578][ T8511] [U] 
[  258.260273][ T8511] [U] 
[  258.262961][ T8511] [U] 
[  258.265645][ T8511] [U] 
[  258.300643][ T8511] [U] 
[  258.303355][ T8511] [U] 
[  258.306045][ T8511] [U] 
[  258.308731][ T8511] [U] 
[  258.327444][ T5923] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  258.335087][  T974] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  258.416970][ T8511] [U] 
[  258.419699][ T8511] [U] 
[  258.422395][ T8511] [U] 
[  258.425083][ T8511] [U] 
[  258.446793][ T8511] [U] 
[  258.449505][ T8511] [U] 
[  258.452178][ T8511] [U] 
[  258.454849][ T8511] [U] 
[  258.458706][ T8511] [U] 
[  258.461441][ T8511] [U] 
[  258.464141][ T8511] [U] 
[  258.466836][ T8511] [U] 
[  258.474971][ T8511] [U] 
[  258.477677][ T8511] [U] 
[  258.480363][ T8511] [U] 
[  258.483035][ T8511] [U] 
[  258.509654][  T974] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  258.519127][ T5923] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  258.519289][ T8511] [U] 
[  258.530123][ T8511] [U] 
[  258.532786][ T8511] [U] 
[  258.535451][ T8511] [U] 
[  258.542884][ T5923] usb 3-1: config 129 has no interface number 0
[  258.548737][ T8511] [U] 
[  258.549208][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.551788][ T8511] [U] 
[  258.551814][ T8511] [U] 
[  258.551839][ T8511] [U] 
[  258.568828][ T5923] usb 3-1: config 129 interface 249 has no altsetting 0
[  258.586785][  T974] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  258.591822][ T8511] [U] 
[  258.598018][ T5923] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  258.598471][ T8511] [U] 
[  258.609648][  T974] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  258.610101][ T8511] [U] 
[  258.620757][ T8511] [U] 
[  258.621869][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.623436][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.643728][  T974] usb 5-1: Manufacturer: syz
[  258.681500][ T8511] [U] 
[  258.683498][  T974] usb 5-1: config 0 descriptor??
[  258.684201][ T8511] [U] 
[  258.691796][ T8511] [U] 
[  258.694458][ T8511] [U] 
[  258.712627][ T8511] [U] 
[  258.715309][ T8511] [U] 
[  258.717968][ T8511] [U] 
[  258.720635][ T8511] [U] 
[  258.806505][ T8511] [U] 
[  258.809238][ T8511] [U] 
[  258.811932][ T8511] [U] 
[  258.814623][ T8511] [U] 
[  258.843328][ T8511] [U] 
[  258.871534][  T974] rc_core: IR keymap rc-hauppauge not found
[  258.898100][  T974] Registered IR keymap rc-empty
[  258.937265][  T974] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  258.980482][  T974] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[  259.153570][ T8541] loop8: detected capacity change from 0 to 8
[  259.169582][ T8541] Dev loop8: unable to read RDB block 8
[  259.179821][ T8541]  loop8: unable to read partition table
[  259.203157][ T8541] loop8: partition table beyond EOD, truncated
[  259.217887][ T8541] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  259.464955][  T974] usb 5-1: USB disconnect, device number 17
[  259.551341][ T8561] FAULT_INJECTION: forcing a failure.
[  259.551341][ T8561] name failslab, interval 1, probability 0, space 0, times 0
[  259.573747][ T8561] CPU: 1 UID: 0 PID: 8561 Comm: syz.1.581 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  259.573775][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  259.573785][ T8561] Call Trace:
[  259.573791][ T8561]  <TASK>
[  259.573797][ T8561]  dump_stack_lvl+0x16c/0x1f0
[  259.573824][ T8561]  should_fail_ex+0x512/0x640
[  259.573842][ T8561]  ? __kmalloc_noprof+0xbf/0x510
[  259.573861][ T8561]  ? nf_tables_newrule+0xbfd/0x28e0
[  259.573878][ T8561]  should_failslab+0xc2/0x120
[  259.573896][ T8561]  __kmalloc_noprof+0xd2/0x510
[  259.573911][ T8561]  ? nf_tables_newrule+0x8b0/0x28e0
[  259.573933][ T8561]  nf_tables_newrule+0xbfd/0x28e0
[  259.573960][ T8561]  ? __pfx_nf_tables_newrule+0x10/0x10
[  259.573986][ T8561]  ? __nla_parse+0x40/0x60
[  259.574010][ T8561]  nfnetlink_rcv_batch+0x1908/0x2350
[  259.574054][ T8561]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  259.574081][ T8561]  ? find_held_lock+0x2b/0x80
[  259.574119][ T8561]  ? avc_has_perm_noaudit+0x149/0x3b0
[  259.574162][ T8561]  ? __nla_parse+0x40/0x60
[  259.574185][ T8561]  nfnetlink_rcv+0x3c1/0x430
[  259.574208][ T8561]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  259.574241][ T8561]  netlink_unicast+0x53a/0x7f0
[  259.574267][ T8561]  ? __pfx_netlink_unicast+0x10/0x10
[  259.574297][ T8561]  netlink_sendmsg+0x8d1/0xdd0
[  259.574324][ T8561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.574357][ T8561]  ____sys_sendmsg+0xa95/0xc70
[  259.574382][ T8561]  ? copy_msghdr_from_user+0x10a/0x160
[  259.574401][ T8561]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.574439][ T8561]  ___sys_sendmsg+0x134/0x1d0
[  259.574461][ T8561]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.574518][ T8561]  __sys_sendmsg+0x16d/0x220
[  259.574538][ T8561]  ? __pfx___sys_sendmsg+0x10/0x10
[  259.574567][ T8561]  ? rcu_is_watching+0x12/0xc0
[  259.574595][ T8561]  do_syscall_64+0xcd/0x260
[  259.574619][ T8561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.574636][ T8561] RIP: 0033:0x7fb28878d169
[  259.574650][ T8561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.574666][ T8561] RSP: 002b:00007fb289566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.574682][ T8561] RAX: ffffffffffffffda RBX: 00007fb2889a5fa0 RCX: 00007fb28878d169
[  259.574693][ T8561] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  259.574703][ T8561] RBP: 00007fb289566090 R08: 0000000000000000 R09: 0000000000000000
[  259.574714][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.574724][ T8561] R13: 0000000000000000 R14: 00007fb2889a5fa0 R15: 00007ffcb09b6648
[  259.574747][ T8561]  </TASK>
[  259.912270][ T8563] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  260.078884][ T5923] usb 3-1: string descriptor 0 read error: -71
[  260.088774][ T5923] redrat3 3-1:129.249: Couldn't find all endpoints
[  260.103479][ T5923] usb 3-1: USB disconnect, device number 25
[  260.180414][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'.
[  260.230759][ T5915] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  260.305222][ T8576] ubi31: attaching mtd0
[  260.315304][ T8576] ubi31: scanning is finished
[  260.318484][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'.
[  260.320051][ T8576] ubi31: empty MTD device detected
[  260.355700][ T8571] bond1: entered promiscuous mode
[  260.355924][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  260.369444][ T8571] bond1: entered allmulticast mode
[  260.544900][ T8575] geneve2: entered promiscuous mode
[  260.569843][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  260.591255][ T5915] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.605926][ T8575] geneve2: entered allmulticast mode
[  260.619736][   T10] usb 2-1: Using ep0 maxpacket: 32
[  260.632750][ T8575] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  260.640046][ T5915] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  260.661611][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  260.672302][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0
[  260.678958][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.697065][ T5915] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  260.711436][   T10] usb 2-1: config 0 descriptor??
[  260.727860][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.738329][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  260.744498][ T8576] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  260.754215][ T8576] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  260.764021][ T8576] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  260.774155][ T8576] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  260.782973][ T8576] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  260.783765][ T5915] usb 6-1: config 0 descriptor??
[  260.801786][ T8576] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  260.818003][ T8576] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3912031805
[  260.830409][ T8576] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  260.844641][ T8579] ubi31: background thread "ubi_bgt31d" started, PID 8579
[  261.544140][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.561562][   T10] gspca_nw80x: reg_w err -71
[  261.566590][   T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[  261.596392][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.606318][   T10] usb 2-1: USB disconnect, device number 18
[  261.612420][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.619471][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.637088][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.743470][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.753345][ T8598] loop8: detected capacity change from 0 to 8
[  261.762970][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.763923][ T8598] Dev loop8: unable to read RDB block 8
[  261.775163][ T5915] chicony 0003:04F2:1421.0006: unknown main item tag 0x0
[  261.781633][ T8598]  loop8: unable to read partition table
[  262.719376][ T8598] loop8: partition table beyond EOD, truncated
[  262.719396][ T8598] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  262.727516][ T5915] chicony 0003:04F2:1421.0006: hidraw0: USB HID v0.02 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0
[  262.761110][ T8599] tty tty20: ldisc open failed (-12), clearing slot 19
[  262.840820][ T5915] usb 6-1: USB disconnect, device number 6
[  263.975677][ T8612] sd 0:0:1:0: device reset
[  264.708560][ T8623] FAULT_INJECTION: forcing a failure.
[  264.708560][ T8623] name failslab, interval 1, probability 0, space 0, times 0
[  264.721511][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.1.597 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  264.721532][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  264.721542][ T8623] Call Trace:
[  264.721547][ T8623]  <TASK>
[  264.721554][ T8623]  dump_stack_lvl+0x16c/0x1f0
[  264.721579][ T8623]  should_fail_ex+0x512/0x640
[  264.721595][ T8623]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  264.721619][ T8623]  should_failslab+0xc2/0x120
[  264.721637][ T8623]  __kmalloc_cache_noprof+0x6a/0x3e0
[  264.721659][ T8623]  ? nfnl_err_add+0x4e/0x2d0
[  264.721683][ T8623]  nfnl_err_add+0x4e/0x2d0
[  264.721705][ T8623]  nfnetlink_rcv_batch+0xca3/0x2350
[  264.721740][ T8623]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  264.721764][ T8623]  ? find_held_lock+0x2b/0x80
[  264.721799][ T8623]  ? avc_has_perm_noaudit+0x149/0x3b0
[  264.721838][ T8623]  ? __nla_parse+0x40/0x60
[  264.721861][ T8623]  nfnetlink_rcv+0x3c1/0x430
[  264.721884][ T8623]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  264.721926][ T8623]  netlink_unicast+0x53a/0x7f0
[  264.721949][ T8623]  ? __pfx_netlink_unicast+0x10/0x10
[  264.721976][ T8623]  netlink_sendmsg+0x8d1/0xdd0
[  264.722000][ T8623]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.722030][ T8623]  ____sys_sendmsg+0xa95/0xc70
[  264.722054][ T8623]  ? copy_msghdr_from_user+0x10a/0x160
[  264.722072][ T8623]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.722105][ T8623]  ___sys_sendmsg+0x134/0x1d0
[  264.722126][ T8623]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.722174][ T8623]  __sys_sendmsg+0x16d/0x220
[  264.722193][ T8623]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.722218][ T8623]  ? rcu_is_watching+0x12/0xc0
[  264.722245][ T8623]  do_syscall_64+0xcd/0x260
[  264.722268][ T8623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.722283][ T8623] RIP: 0033:0x7fb28878d169
[  264.722296][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.722311][ T8623] RSP: 002b:00007fb289566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.722327][ T8623] RAX: ffffffffffffffda RBX: 00007fb2889a5fa0 RCX: 00007fb28878d169
[  264.722338][ T8623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  264.722347][ T8623] RBP: 00007fb289566090 R08: 0000000000000000 R09: 0000000000000000
[  264.722356][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.722365][ T8623] R13: 0000000000000000 R14: 00007fb2889a5fa0 R15: 00007ffcb09b6648
[  264.722388][ T8623]  </TASK>
[  264.962209][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.219757][ T5915] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  265.508551][ T5915] usb 3-1: config 129 has an invalid interface number: 249 but max is 0
[  265.930339][ T5915] usb 3-1: config 129 has no interface number 0
[  265.939873][ T5915] usb 3-1: config 129 interface 249 has no altsetting 0
[  265.946861][ T5915] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  265.956552][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.122222][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'.
[  266.131374][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.600'.
[  266.874385][ T8641] netlink: 68 bytes leftover after parsing attributes in process `syz.5.602'.
[  267.125825][ T8644] loop8: detected capacity change from 0 to 8
[  267.150412][ T8644] Dev loop8: unable to read RDB block 8
[  267.166236][ T8644]  loop8: unable to read partition table
[  267.179562][ T8644] loop8: partition table beyond EOD, truncated
[  267.201403][ T8644] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  267.307154][   T30] audit: type=1400 audit(2000000030.730:426): avc:  denied  { bind } for  pid=8648 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  267.932748][ T5915] usb 3-1: string descriptor 0 read error: -71
[  267.952838][ T5915] redrat3 3-1:129.249: Couldn't find all endpoints
[  267.960297][ T8658] netlink: 80 bytes leftover after parsing attributes in process `syz.0.608'.
[  268.348424][ T8661] trusted_key: syz.5.607 sent an empty control message without MSG_MORE.
[  268.826025][ T5915] usb 3-1: USB disconnect, device number 26
[  268.932895][ T5143] Bluetooth: hci1: unexpected event for opcode 0x0c58
[  268.966445][ T8665] FAULT_INJECTION: forcing a failure.
[  268.966445][ T8665] name failslab, interval 1, probability 0, space 0, times 0
[  268.989386][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.4.610 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  268.989410][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.989419][ T8665] Call Trace:
[  268.989423][ T8665]  <TASK>
[  268.989429][ T8665]  dump_stack_lvl+0x16c/0x1f0
[  268.989453][ T8665]  should_fail_ex+0x512/0x640
[  268.989470][ T8665]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  268.989490][ T8665]  should_failslab+0xc2/0x120
[  268.989507][ T8665]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  268.989524][ T8665]  ? __alloc_skb+0x2b2/0x380
[  268.989545][ T8665]  __alloc_skb+0x2b2/0x380
[  268.989564][ T8665]  ? __pfx___alloc_skb+0x10/0x10
[  268.989584][ T8665]  ? __pfx_nf_tables_abort+0x10/0x10
[  268.989608][ T8665]  netlink_ack+0x15d/0xb80
[  268.989631][ T8665]  ? kasan_save_track+0x14/0x30
[  268.989653][ T8665]  nfnetlink_rcv_batch+0x1431/0x2350
[  268.989692][ T8665]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  268.989725][ T8665]  ? find_held_lock+0x2b/0x80
[  268.989762][ T8665]  ? avc_has_perm_noaudit+0x149/0x3b0
[  268.989803][ T8665]  ? __nla_parse+0x40/0x60
[  268.989827][ T8665]  nfnetlink_rcv+0x3c1/0x430
[  268.989850][ T8665]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  268.989881][ T8665]  netlink_unicast+0x53a/0x7f0
[  268.989906][ T8665]  ? __pfx_netlink_unicast+0x10/0x10
[  268.989933][ T8665]  netlink_sendmsg+0x8d1/0xdd0
[  268.989957][ T8665]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.989986][ T8665]  ____sys_sendmsg+0xa95/0xc70
[  268.990010][ T8665]  ? copy_msghdr_from_user+0x10a/0x160
[  268.990029][ T8665]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.990063][ T8665]  ___sys_sendmsg+0x134/0x1d0
[  268.990084][ T8665]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.990132][ T8665]  __sys_sendmsg+0x16d/0x220
[  268.990153][ T8665]  ? __pfx___sys_sendmsg+0x10/0x10
[  268.990181][ T8665]  ? rcu_is_watching+0x12/0xc0
[  268.990209][ T8665]  do_syscall_64+0xcd/0x260
[  268.990235][ T8665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.990252][ T8665] RIP: 0033:0x7f192af8d169
[  268.990266][ T8665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.990281][ T8665] RSP: 002b:00007f192bd2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.990298][ T8665] RAX: ffffffffffffffda RBX: 00007f192b1a5fa0 RCX: 00007f192af8d169
[  268.990309][ T8665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  268.990319][ T8665] RBP: 00007f192bd2b090 R08: 0000000000000000 R09: 0000000000000000
[  268.990329][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  268.990339][ T8665] R13: 0000000000000000 R14: 00007f192b1a5fa0 R15: 00007ffcef4d72b8
[  268.990361][ T8665]  </TASK>
[  269.438368][   T30] audit: type=1400 audit(2000000032.860:427): avc:  denied  { mount } for  pid=8676 comm="syz.4.614" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  270.411109][ T5915] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  270.432915][ T8679] tty tty30: ldisc open failed (-12), clearing slot 29
[  270.650466][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.675919][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  270.709726][ T5915] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00
[  270.719248][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'.
[  270.755396][   T30] audit: type=1400 audit(2000000034.090:428): avc:  denied  { remount } for  pid=8676 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  270.785060][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.007576][ T5915] usb 3-1: config 0 descriptor??
[  271.913730][ T5915] nintendo 0003:057E:2017.0007: ignoring exceeding usage max
[  271.927901][ T5915] nintendo 0003:057E:2017.0007: item fetching failed at offset 3/7
[  271.974542][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[  271.975606][ T5915] nintendo 0003:057E:2017.0007: HID parse failed
[  271.984235][ T8692] IPVS: Error joining to the multicast group
[  272.025189][ T8692] sd 0:0:1:0: device reset
[  272.072310][ T5915] nintendo 0003:057E:2017.0007: probe - fail = -22
[  272.078923][ T5915] nintendo 0003:057E:2017.0007: probe with driver nintendo failed with error -22
[  272.173918][ T8672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.984756][ T8672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.001229][ T5143] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  273.010618][ T5143] Bluetooth: hci1: Injecting HCI hardware error event
[  273.018367][ T5143] Bluetooth: hci1: hardware error 0x00
[  273.027186][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[  274.460779][ T5915] usb 3-1: USB disconnect, device number 27
[  274.611077][ T1005] Bluetooth: Error in BCSP hdr checksum
[  274.820098][   T30] audit: type=1400 audit(2000000038.240:429): avc:  denied  { unmount } for  pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  274.959383][   T30] audit: type=1400 audit(2000000038.380:430): avc:  denied  { map } for  pid=8702 comm="syz.2.619" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  275.272567][   T30] audit: type=1400 audit(2000000038.380:431): avc:  denied  { execute } for  pid=8702 comm="syz.2.619" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  275.300381][   T30] audit: type=1400 audit(2000000038.550:432): avc:  denied  { setopt } for  pid=8704 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  276.519778][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  276.561444][   T30] audit: type=1400 audit(2000000038.930:433): avc:  denied  { connect } for  pid=8705 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  276.591638][   T30] audit: type=1400 audit(2000000038.980:434): avc:  denied  { listen } for  pid=8705 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  276.611678][ T5143] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  279.929688][    C0] sched: DL replenish lagged too much
[  281.355912][ T8723] ip6t_srh: unknown srh invflags 7863
[  288.552732][   T30] audit: type=1400 audit(2000000051.940:435): avc:  denied  { map } for  pid=8728 comm="syz.1.626" path="socket:[20833]" dev="sockfs" ino=20833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  290.119770][   T30] audit: type=1400 audit(2000000051.940:436): avc:  denied  { read } for  pid=8728 comm="syz.1.626" path="socket:[20833]" dev="sockfs" ino=20833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  292.021564][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  292.165245][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  292.185336][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  292.197292][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  292.208965][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  292.318904][ T8748] syzkaller0: entered promiscuous mode
[  292.334610][ T8748] syzkaller0: entered allmulticast mode
[  292.555528][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.613391][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.621357][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.700141][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.707702][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  294.280007][ T5143] Bluetooth: hci4: command tx timeout
[  294.306757][ T5143] Bluetooth: hci0: unexpected event for opcode 0x2003
[  294.840280][ T5143] Bluetooth: hci1: command tx timeout
[  296.359941][ T5143] Bluetooth: hci4: command tx timeout
[  296.923151][ T5143] Bluetooth: hci1: command tx timeout
[  298.439913][ T5143] Bluetooth: hci4: command tx timeout
[  298.999939][ T5143] Bluetooth: hci1: command tx timeout
[  299.011828][ T8789] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  300.689743][ T5143] Bluetooth: hci4: command tx timeout
[  301.079756][ T5143] Bluetooth: hci1: command tx timeout
[  304.419773][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  310.109190][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  310.133017][   T30] audit: type=1400 audit(2000000073.560:437): avc:  denied  { module_request } for  pid=8749 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  310.212704][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  310.221729][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  310.234883][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  310.242829][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  310.250764][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.406994][ T8753] chnl_net:caif_netlink_parms(): no params data found
[  310.444361][ T8749] chnl_net:caif_netlink_parms(): no params data found
[  310.461387][ T5915] usb 2-1: config 129 has an invalid interface number: 249 but max is 0
[  310.493553][ T5915] usb 2-1: config 129 has no interface number 0
[  310.513928][ T5915] usb 2-1: config 129 interface 249 has no altsetting 0
[  310.563916][ T5915] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  310.591378][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.820774][ T5143] Bluetooth: hci5: command tx timeout
[  313.139861][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.165123][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.189875][ T8749] bridge_slave_0: entered allmulticast mode
[  313.391991][ T8749] bridge_slave_0: entered promiscuous mode
[  313.407202][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.414710][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.622981][ T5915] usb 2-1: string descriptor 0 read error: -71
[  313.639582][ T5915] redrat3 2-1:129.249: Couldn't find all endpoints
[  313.707932][ T5915] usb 2-1: USB disconnect, device number 19
[  313.708842][ T8749] bridge_slave_1: entered allmulticast mode
[  313.736602][ T8749] bridge_slave_1: entered promiscuous mode
[  313.821712][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.833692][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.841780][ T8753] bridge_slave_0: entered allmulticast mode
[  313.849111][ T8753] bridge_slave_0: entered promiscuous mode
[  313.895085][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.904527][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.916522][ T8753] bridge_slave_1: entered allmulticast mode
[  313.933034][   T30] audit: type=1400 audit(2000000077.360:438): avc:  denied  { write } for  pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  313.933661][ T8753] bridge_slave_1: entered promiscuous mode
[  313.960557][ T5886] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  313.973527][   T30] audit: type=1400 audit(2000000077.380:439): avc:  denied  { remove_name } for  pid=5184 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.000484][   T30] audit: type=1400 audit(2000000077.380:440): avc:  denied  { add_name } for  pid=5184 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  314.031711][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.098495][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.117257][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.133292][ T5886] usb 5-1: config 129 has an invalid interface number: 249 but max is 0
[  314.143454][ T5886] usb 5-1: config 129 has no interface number 0
[  314.151703][ T5886] usb 5-1: config 129 interface 249 has no altsetting 0
[  314.158843][ T5886] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  314.161981][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  314.168210][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.322562][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.354885][ T8749] team0: Port device team_slave_0 added
[  314.394857][ T8749] team0: Port device team_slave_1 added
[  314.515882][ T8753] team0: Port device team_slave_0 added
[  314.527537][ T8753] team0: Port device team_slave_1 added
[  314.540983][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.548193][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.584423][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.598083][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.610766][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.614579][ T5915] usb 2-1: config 129 has an invalid interface number: 249 but max is 0
[  314.642747][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.643279][ T8813] chnl_net:caif_netlink_parms(): no params data found
[  314.713414][ T5915] usb 2-1: config 129 has no interface number 0
[  314.746956][ T5915] usb 2-1: config 129 interface 249 has no altsetting 0
[  314.771394][ T5915] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=99.21
[  314.800063][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.840224][ T5143] Bluetooth: hci5: command tx timeout
[  314.851878][ T8749] hsr_slave_0: entered promiscuous mode
[  314.863256][ T8749] hsr_slave_1: entered promiscuous mode
[  314.869600][ T8749] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.880340][ T8749] Cannot create hsr debugfs directory
[  314.892821][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.907070][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.933681][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.946480][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.953790][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.983301][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.337628][ T8753] hsr_slave_0: entered promiscuous mode
[  315.349355][ T8753] hsr_slave_1: entered promiscuous mode
[  315.360542][ T8753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.368952][ T8753] Cannot create hsr debugfs directory
[  315.441679][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.449564][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.466540][ T8813] bridge_slave_0: entered allmulticast mode
[  315.477354][ T8813] bridge_slave_0: entered promiscuous mode
[  315.545172][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.555992][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.577053][ T8813] bridge_slave_1: entered allmulticast mode
[  315.587839][ T8813] bridge_slave_1: entered promiscuous mode
[  315.733880][ T5886] usb 5-1: string descriptor 0 read error: -71
[  315.760951][ T5886] redrat3 5-1:129.249: Couldn't find all endpoints
[  315.815748][ T5886] usb 5-1: USB disconnect, device number 18
[  315.857843][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.093984][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.213323][ T8813] team0: Port device team_slave_0 added
[  316.250579][ T8813] team0: Port device team_slave_1 added
[  316.371640][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.378987][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.416096][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.487409][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.497828][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.534093][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.693387][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  316.699858][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  316.796095][ T8813] hsr_slave_0: entered promiscuous mode
[  316.961553][ T5143] Bluetooth: hci5: command tx timeout
[  317.528483][ T5915] usb 2-1: string descriptor 0 read error: -71
[  317.573112][ T5915] redrat3 2-1:129.249: Couldn't find all endpoints
[  317.622100][ T8813] hsr_slave_1: entered promiscuous mode
[  317.633415][ T8813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.633575][ T8813] Cannot create hsr debugfs directory
[  317.634978][ T8749] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  318.999769][ T5143] Bluetooth: hci5: command tx timeout
[  319.357135][ T8749] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  319.360005][ T5915] usb 2-1: USB disconnect, device number 20
[  320.765407][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'.
[  320.793425][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'.
[  320.814526][ T8749] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  320.843900][ T8859] netlink: 'syz.4.651': attribute type 11 has an invalid length.
[  320.846328][ T8749] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  321.907142][   T30] audit: type=1400 audit(2000000084.390:441): avc:  denied  { create } for  pid=8861 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  331.829935][ T8868] netlink: 'syz.1.652': attribute type 4 has an invalid length.
[  378.270163][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.282322][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  416.964550][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  416.983871][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  486.182708][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  486.197139][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  492.225961][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  504.999598][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  505.006556][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5495/1:b..l
[  505.014761][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=23289, q=485978 ncpus=2)
[  505.022729][    C1] task:dhcpcd          state:R  running task     stack:24856 pid:5495  tgid:5495  ppid:1      task_flags:0x400140 flags:0x00000002
[  505.036927][    C1] Call Trace:
[  505.040204][    C1]  <TASK>
[  505.043123][    C1]  __schedule+0x116f/0x5de0
[  505.047601][    C1]  ? __kernel_text_address+0xd/0x40
[  505.052782][    C1]  ? unwind_get_return_address+0x59/0xa0
[  505.058429][    C1]  ? __pfx___schedule+0x10/0x10
[  505.063272][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  505.068618][    C1]  ? stack_depot_save_flags+0x28/0xa50
[  505.074075][    C1]  ? mark_held_locks+0x49/0x80
[  505.078838][    C1]  preempt_schedule_irq+0x51/0x90
[  505.083853][    C1]  irqentry_exit+0x36/0x90
[  505.088239][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  505.094198][    C1] RIP: 0010:lock_acquire+0x4e/0x350
[  505.099393][    C1] Code: 48 8b 05 8d b1 0e 12 48 89 44 24 30 31 c0 66 90 65 8b 05 a9 b1 0e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 72 34 ee 0e <0f> 82 74 02 00 00 8b 35 ea 63 ee 0e 85 f6 0f 85 8d 00 00 00 48 8b
[  505.119000][    C1] RSP: 0018:ffffc900033c7668 EFLAGS: 00000297
[  505.125064][    C1] RAX: 0000000000000000 RBX: ffffffff8e3c1580 RCX: 0000000000000002
[  505.133017][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c1580
[  505.140981][    C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  505.148946][    C1] R10: 0000000000000002 R11: 000000000000a702 R12: 0000000000000000
[  505.156897][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  505.164867][    C1]  ? find_held_lock+0x2b/0x80
[  505.169518][    C1]  ? unwind_next_frame+0x3f4/0x20a0
[  505.174702][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  505.180854][    C1]  unwind_next_frame+0xd1/0x20a0
[  505.185792][    C1]  ? unwind_next_frame+0xbd/0x20a0
[  505.190885][    C1]  ? save_stack+0x160/0x1f0
[  505.195382][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  505.201529][    C1]  arch_stack_walk+0x94/0x100
[  505.206182][    C1]  ? save_stack+0x160/0x1f0
[  505.210669][    C1]  stack_trace_save+0x8e/0xc0
[  505.215349][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  505.221075][    C1]  ? __lock_acquire+0x5ca/0x1ba0
[  505.225999][    C1]  save_stack+0x160/0x1f0
[  505.230307][    C1]  ? __pfx_save_stack+0x10/0x10
[  505.235158][    C1]  ? page_ext_put+0x3e/0xd0
[  505.239658][    C1]  __reset_page_owner+0x84/0x1a0
[  505.244582][    C1]  __free_frozen_pages+0x69d/0xff0
[  505.249678][    C1]  __put_partials+0x16d/0x1c0
[  505.254358][    C1]  qlist_free_all+0x4e/0x120
[  505.258953][    C1]  ? tomoyo_encode2+0x100/0x3e0
[  505.263794][    C1]  kasan_quarantine_reduce+0x195/0x1e0
[  505.269221][    C1]  __kasan_kmalloc+0x8a/0xb0
[  505.273791][    C1]  __kmalloc_noprof+0x223/0x510
[  505.278650][    C1]  tomoyo_encode2+0x100/0x3e0
[  505.283336][    C1]  tomoyo_encode+0x29/0x50
[  505.287725][    C1]  tomoyo_realpath_from_path+0x18f/0x6e0
[  505.293341][    C1]  ? tomoyo_profile+0x47/0x60
[  505.298011][    C1]  tomoyo_path_number_perm+0x245/0x580
[  505.303469][    C1]  ? tomoyo_path_number_perm+0x237/0x580
[  505.309075][    C1]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  505.315036][    C1]  ? __lock_acquire+0xaa4/0x1ba0
[  505.320001][    C1]  ? hook_file_ioctl_common+0x145/0x410
[  505.325536][    C1]  ? xfd_validate_state+0x5d/0x180
[  505.330629][    C1]  security_file_ioctl+0x9b/0x240
[  505.335652][    C1]  __x64_sys_ioctl+0xb7/0x200
[  505.340328][    C1]  do_syscall_64+0xcd/0x260
[  505.344821][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.350722][    C1] RIP: 0033:0x7f18b47c8d49
[  505.355216][    C1] RSP: 002b:00007ffdc9b3d398 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  505.363614][    C1] RAX: ffffffffffffffda RBX: 00005633057bbb60 RCX: 00007f18b47c8d49
[  505.371650][    C1] RDX: 00007ffdc9b3d3a0 RSI: 0000000000008921 RDI: 0000000000000011
[  505.379615][    C1] RBP: 0000000000000000 R08: 0000000000000008 R09: 0000000000000035
[  505.387584][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc9b3d3a0
[  505.395535][    C1] R13: 00005632d6952f88 R14: 00005633057bbb60 R15: 00005633057a61e0
[  505.403498][    C1]  </TASK>
[  505.406489][    C1] rcu: rcu_preempt kthread starved for 944 jiffies! g23289 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  505.417481][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  505.427447][    C1] rcu: RCU grace-period kthread stack dump:
[  505.433311][    C1] task:rcu_preempt     state:R  running task     stack:27704 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  505.446787][    C1] Call Trace:
[  505.450046][    C1]  <TASK>
[  505.452977][    C1]  __schedule+0x116f/0x5de0
[  505.457495][    C1]  ? __pfx___schedule+0x10/0x10
[  505.462347][    C1]  ? find_held_lock+0x2b/0x80
[  505.467014][    C1]  ? schedule+0x2d7/0x3a0
[  505.471325][    C1]  schedule+0xe7/0x3a0
[  505.475392][    C1]  schedule_timeout+0x123/0x290
[  505.480236][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  505.485597][    C1]  ? __pfx_process_timeout+0x10/0x10
[  505.490868][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  505.496672][    C1]  ? prepare_to_swait_event+0xf5/0x480
[  505.502139][    C1]  rcu_gp_fqs_loop+0x1ea/0xb00
[  505.506898][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  505.512180][    C1]  ? rcu_gp_cleanup+0x7c1/0xd90
[  505.517031][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  505.522840][    C1]  rcu_gp_kthread+0x270/0x380
[  505.527509][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  505.532696][    C1]  ? rcu_is_watching+0x12/0xc0
[  505.537463][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.542661][    C1]  ? __kthread_parkme+0x19e/0x250
[  505.547695][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  505.552893][    C1]  kthread+0x3c2/0x780
[  505.556958][    C1]  ? __pfx_kthread+0x10/0x10
[  505.561544][    C1]  ? __pfx_kthread+0x10/0x10
[  505.566131][    C1]  ? __pfx_kthread+0x10/0x10
[  505.570721][    C1]  ? __pfx_kthread+0x10/0x10
[  505.575303][    C1]  ? rcu_is_watching+0x12/0xc0
[  505.580065][    C1]  ? __pfx_kthread+0x10/0x10
[  505.584655][    C1]  ret_from_fork+0x45/0x80
[  505.589072][    C1]  ? __pfx_kthread+0x10/0x10
[  505.592184][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  505.593645][    C1]  ret_from_fork_asm+0x1a/0x30
[  505.604629][    C1]  </TASK>
[  505.607640][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  505.613951][    C1] Sending NMI from CPU 1 to CPUs 0:
[  505.619150][    C0] NMI backtrace for cpu 0
[  505.619162][    C0] CPU: 0 UID: 0 PID: 1102 Comm: kworker/u8:6 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  505.619179][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  505.619188][    C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  505.619211][    C0] RIP: 0010:unwind_next_frame+0x4f3/0x20a0
[  505.619230][    C0] Code: 44 24 28 48 8b 74 24 20 48 8b 44 24 18 8b 90 b8 03 00 00 4c 89 f9 4c 89 c7 e8 19 f1 ff ff 48 89 c1 48 85 c0 0f 84 05 fe ff ff <48> b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f
[  505.619242][    C0] RSP: 0018:ffffc90000007088 EFLAGS: 00000286
[  505.619252][    C0] RAX: ffffffff911a3f9a RBX: 0000000000000002 RCX: ffffffff911a3f9a
[  505.619261][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90970944
[  505.619269][    C0] RBP: ffffc90000007190 R08: ffffffff911a3fa0 R09: 0000000000000000
[  505.619278][    C0] R10: 0000000000000006 R11: 00000000000069ff R12: ffffc90000007198
[  505.619286][    C0] R13: ffffc90000007148 R14: ffffc9000000717d R15: ffffffff8169ff43
[  505.619295][    C0] FS:  0000000000000000(0000) GS:ffff8881249b3000(0000) knlGS:0000000000000000
[  505.619316][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.619325][    C0] CR2: 0000200000032000 CR3: 0000000030b56000 CR4: 00000000003526f0
[  505.619334][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  505.619342][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  505.619350][    C0] Call Trace:
[  505.619354][    C0]  <IRQ>
[  505.619359][    C0]  ? __unwind_start+0x574/0x7f0
[  505.619375][    C0]  ? get_stack_info_noinstr+0x44/0x120
[  505.619390][    C0]  __unwind_start+0x45f/0x7f0
[  505.619406][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  505.619420][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  505.619438][    C0]  arch_stack_walk+0x73/0x100
[  505.619458][    C0]  ? __unwind_start+0x574/0x7f0
[  505.619475][    C0]  stack_trace_save+0x8e/0xc0
[  505.619492][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  505.619509][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  505.619523][    C0]  kasan_save_stack+0x33/0x60
[  505.619551][    C0]  kasan_save_track+0x14/0x30
[  505.619563][    C0]  kasan_save_free_info+0x3b/0x60
[  505.619581][    C0]  __kasan_slab_free+0x51/0x70
[  505.619597][    C0]  kmem_cache_free+0x2d4/0x4d0
[  505.619610][    C0]  ? skb_free_head+0x18a/0x1d0
[  505.619625][    C0]  skb_free_head+0x18a/0x1d0
[  505.619638][    C0]  skb_release_data+0x7a5/0x960
[  505.619652][    C0]  ? dst_release+0x8d/0x340
[  505.619667][    C0]  consume_skb+0xbf/0x100
[  505.619683][    C0]  nft_synproxy_do_eval+0xa6b/0xd80
[  505.619702][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  505.619720][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  505.619733][    C0]  ? __lock_acquire+0x5ca/0x1ba0
[  505.619746][    C0]  ? __pfx_nft_synproxy_eval+0x10/0x10
[  505.619763][    C0]  nft_do_chain+0x2e6/0x1920
[  505.619783][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  505.619799][    C0]  ? mark_held_locks+0x49/0x80
[  505.619813][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.619828][    C0]  ? ipt_do_table+0xd48/0x1ac0
[  505.619851][    C0]  nft_do_chain_inet+0x18a/0x340
[  505.619867][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  505.619882][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  505.619896][    C0]  ? __pfx_ipt_do_table+0x10/0x10
[  505.619913][    C0]  ? nf_nat_ipv4_local_in+0x181/0x720
[  505.619933][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  505.619948][    C0]  nf_hook_slow+0xbb/0x200
[  505.619962][    C0]  nf_hook.constprop.0+0x422/0x750
[  505.619976][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  505.619991][    C0]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  505.620004][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  505.620018][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  505.620035][    C0]  ip_local_deliver+0x169/0x1f0
[  505.620047][    C0]  ? __pfx_ip_local_deliver+0x10/0x10
[  505.620061][    C0]  ip_rcv+0x2c3/0x5d0
[  505.620074][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  505.620087][    C0]  __netif_receive_skb_one_core+0x197/0x1e0
[  505.620101][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  505.620115][    C0]  ? lock_acquire+0x179/0x350
[  505.620129][    C0]  ? process_backlog+0x3f0/0x15e0
[  505.620141][    C0]  __netif_receive_skb+0x1d/0x160
[  505.620155][    C0]  process_backlog+0x442/0x15e0
[  505.620170][    C0]  __napi_poll.constprop.0+0xb7/0x550
[  505.620185][    C0]  net_rx_action+0xa97/0x1010
[  505.620201][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  505.620214][    C0]  ? mark_held_locks+0x49/0x80
[  505.620226][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.620242][    C0]  ? tmigr_handle_remote+0x132/0x380
[  505.620261][    C0]  ? mark_held_locks+0x49/0x80
[  505.620273][    C0]  handle_softirqs+0x216/0x8e0
[  505.620291][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  505.620307][    C0]  ? irqtime_account_irq+0x18d/0x2e0
[  505.620331][    C0]  ? kernel_fpu_end+0x59/0x70
[  505.620346][    C0]  do_softirq+0xb2/0xf0
[  505.620361][    C0]  </IRQ>
[  505.620365][    C0]  <TASK>
[  505.620369][    C0]  __local_bh_enable_ip+0x100/0x120
[  505.620386][    C0]  kernel_fpu_end+0x5e/0x70
[  505.620401][    C0]  blake2s_compress+0x7f/0xe0
[  505.620419][    C0]  blake2s_final+0xc9/0x150
[  505.620433][    C0]  hmac.constprop.0+0x252/0x420
[  505.620448][    C0]  ? point_double+0x115/0x440
[  505.620462][    C0]  ? __pfx_hmac.constprop.0+0x10/0x10
[  505.620480][    C0]  ? __pfx_curve25519_ever64_base+0x10/0x10
[  505.620495][    C0]  ? crng_fast_key_erasure+0x1ce/0x250
[  505.620511][    C0]  ? __local_bh_enable_ip+0xa4/0x120
[  505.620527][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.620541][    C0]  ? kernel_fpu_end+0x59/0x70
[  505.620556][    C0]  ? __local_bh_enable_ip+0xa4/0x120
[  505.620573][    C0]  kdf.constprop.0+0x14b/0x280
[  505.620588][    C0]  ? __pfx_kdf.constprop.0+0x10/0x10
[  505.620603][    C0]  ? __pfx_mix_hash+0x10/0x10
[  505.620622][    C0]  message_ephemeral+0x5f/0x70
[  505.620637][    C0]  wg_noise_handshake_create_initiation+0x2c6/0x650
[  505.620656][    C0]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  505.620673][    C0]  ? find_held_lock+0x2b/0x80
[  505.620690][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[  505.620705][    C0]  ? ktime_get_coarse_with_offset+0x1f3/0x270
[  505.620722][    C0]  ? ktime_get_coarse_with_offset+0x176/0x270
[  505.620740][    C0]  wg_packet_send_handshake_initiation+0x19a/0x360
[  505.620760][    C0]  ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10
[  505.620778][    C0]  ? __lock_acquire+0xaa4/0x1ba0
[  505.620797][    C0]  wg_packet_handshake_send_worker+0x1c/0x30
[  505.620815][    C0]  process_one_work+0x9cc/0x1b70
[  505.620833][    C0]  ? __pfx_nsim_dev_trap_report_work+0x10/0x10
[  505.620852][    C0]  ? __pfx_process_one_work+0x10/0x10
[  505.620869][    C0]  ? assign_work+0x1a0/0x250
[  505.620883][    C0]  worker_thread+0x6c8/0xf10
[  505.620900][    C0]  ? __kthread_parkme+0x19e/0x250
[  505.620918][    C0]  ? __pfx_worker_thread+0x10/0x10
[  505.620931][    C0]  kthread+0x3c2/0x780
[  505.620943][    C0]  ? __pfx_kthread+0x10/0x10
[  505.620955][    C0]  ? __pfx_kthread+0x10/0x10
[  505.620967][    C0]  ? __pfx_kthread+0x10/0x10
[  505.620979][    C0]  ? __pfx_kthread+0x10/0x10
[  505.620990][    C0]  ? rcu_is_watching+0x12/0xc0
[  505.621006][    C0]  ? __pfx_kthread+0x10/0x10
[  505.621018][    C0]  ret_from_fork+0x45/0x80
[  505.621031][    C0]  ? __pfx_kthread+0x10/0x10
[  505.621043][    C0]  ret_from_fork_asm+0x1a/0x30
[  505.621065][    C0]  </TASK>
[  506.328224][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  510.802927][   T31] INFO: task kworker/u8:4:63 blocked for more than 169 seconds.